Privacy guides, threat breakdowns, and product news from the Tobava team.
Move your Gmail account across without losing a single message. Enable IMAP, import years of archived mail, bring your contacts, set up forwarding as a safety net, and work through the accounts tied to your old address in the right order.
Microsoft migrations have one extra wrinkle: your business domain points at Exchange, so the cutover has to be planned. Mailbox inventory, per-account import, DNS TTL prep, and an MX switch with no gap in delivery.
We build an email service, so this isn't neutral — but an unfair comparison helps nobody. Where Gmail genuinely wins, where the differences actually matter, and who should realistically switch.
"Encrypted email" describes at least three different things, and providers rarely distinguish between them. TLS, encryption at rest and true E2EE compared — including what encryption can't protect.
No malware, no payload, nothing for antivirus to catch — the message is the attack. The five variants you'll actually see, and the process controls that stop them without a security team.
Running a business from a Gmail address costs credibility on every quote you send. Registering a domain, pointing MX records, publishing SPF/DKIM/DMARC, and structuring addresses so they survive staff changes.
Your mailbox is the master key to everything else you own — every password reset lands there. SMS codes, authenticator apps, hardware keys and passkeys ranked by what they genuinely protect against.
No email product is "HIPAA-compliant" on its own — compliance is how you operate, not a badge a vendor sells. What the rules require, where ordinary email falls short, and the questions to ask any provider.
"In the cloud" means on a computer in a building in a country, under that country's laws. Data residency vs sovereignty, how the US CLOUD Act reaches offshore storage, and when any of it genuinely matters.
A race condition in OpenSSH's signal handler allows unauthenticated remote code execution on glibc-based Linux systems. We break down the exploit, show how to check if your server is vulnerable, and walk through the patch process — including Ubuntu backport awareness so you don't get false positives from scanner tools.
Gmail scans every message to serve targeted ads. Outlook uses "diagnostic data" to improve AI models. Here's how commercial email providers monetise your inbox, and how end-to-end encryption changes the equation.
Deliverability is 80% DNS. If your outbound mail keeps landing in junk, the answer is almost always a missing or misconfigured SPF/DKIM/DMARC record. Here's a plain-English breakdown with copy-paste DNS entries.
Getting a breach alert is alarming — but most people don't know what to do next. We explain what credential exposure really means, how to check which passwords need changing, and why password reuse is the real threat.
Why did a cybersecurity firm build an email service? Because we got tired of recommending "use ProtonMail" while knowing exactly what flaws commercial providers have. Here's what makes Tobava Mail different — technically.
AI-generated phishing emails now pass grammar checks, mimic your CEO's writing style, and bypass legacy spam filters. We break down what's changed, what red flags still work, and how to train your team to spot them.