Security
A separate email for your crypto
Whoever takes your email takes your accounts: every password reset runs through that inbox. Yet most people use one address for newsletters, shops and their exchange. This is education, not investment advice.
Why separation works
An address you never publish stays out of spam lists and breaches. Phishing arriving there is instantly suspicious.
The second benefit is cleanup: leaving a platform means disabling one alias.
How to set it up
Work in this order and test each step. Save recovery codes before enabling 2FA, not after.
From zero to a safe mailbox
- 01
1. New encrypted account
Proton Mail for example, neutral name
- 02
2. Strong unique password
From your password manager
- 03
3. 2FA with app or key
No SMS: SIM swap risk
- 04
4. Print recovery codes
Store physically, away from devices
- 05
5. Alias per platform
exchange@, broker@, wallet@
- 06
6. Migrate
Update the address, log out old sessions
Recovery: the step people skip
A privacy mailbox without a recovery plan is a risk: no support desk will let you in with a selfie, by design.
Keep two independent ways back: printed recovery codes and a backup hardware key.
Document which alias belongs to which platform in your estate file — the map, not the passwords.
- Two 2FA methods
- Recovery codes on paper or metal
- Document alias-to-platform mapping
Recommended by our newsroom
External parties. Block #9 does not hold or manage your assets at these providers. Not investment advice.
Frequently asked questions
Can I keep using Gmail?
You can, with a strong password and a hardware key. A separate encrypted inbox simply adds separation.
Are aliases suspicious to an exchange?
No. A unique address per service is normal; identity checks are separate.
What if my provider goes down?
Keep a backup address at another provider as recovery contact.
Read next
The Proton suite explained
Proton bundles encrypted email, VPN, storage, password management and a bitcoin wallet under Swiss law. How it works and what to use it for.
Privacy and crypto
Anyone who knows you own crypto knows where to knock. A practical privacy guide on email, phone numbers, addresses and metadata.
Recognising phishing and wallet drainers
How to recognise phishing sites, fake messages and wallet drainers targeting crypto users. Practical warning signs and protective steps.