Protect your business against phishing
Four steps against phishing: two-step sign-in, stopping fake email from your domain, reporting suspicious messages and a security check of your Workspace.
· Updated · 1 min read
Phishing is a fake message, usually an email, that tries to get someone to hand over a password, pay a fake invoice or open a harmful attachment. It’s how most break-ins at small businesses start.
These four steps protect your team and your business.
1. Turn on two-step sign-in
Two-step sign-in (Google calls it 2-Step Verification) means signing in takes two things:
- Something you know: your password.
- Something you have: your phone or a security key.
If someone steals a password, they still can’t get in without the phone. See how to turn it on.
2. Stop fake email from your domain
Criminals can send email that looks like it came from your business, for example a fake invoice from your accounts department. A few settings on your domain let other email services check that a message really came from you, and reject it if it didn’t.
If we look after your Google Workspace, we set this up for you. How the settings work explains the detail.
3. Report suspicious email
When Gmail spots a suspicious email, it shows a warning. If one gets through, report it: Google uses the report to block similar messages. Avoid and report phishing emails shows how.
To practise spotting fakes, try Google’s phishing quiz with your team.
4. Check your Workspace security settings
Every business has different risks. A review of your Google Workspace settings shows what’s missing, like accounts without two-step sign-in or files shared more widely than they should be.
If your Google Workspace is with cozan, we’ll do a basic security review for free. Ask us for a security review, and we’ll tell you what to fix first.
