An email account is a mailbox used to send, receive, and store messages, attachments, and contact history. In cyber security, it is more than a communication tool: it is often an identity anchor, a record of relationships, and a gateway to password resets, collaboration platforms, and cloud services. Because one mailbox can expose both content and metadata, compromise can reveal sensitive conversations even if no other system is breached.
Attackers commonly target email accounts with phishing, stolen passwords, token theft, or session hijacking. Once inside, they may search for confidential files, impersonate the owner, forward messages, or use contact threads to map an organization’s network. Defenders reduce risk with multi-factor authentication, strong password hygiene, alerts for unusual logins, limited retention of sensitive mail, and careful review of account recovery settings. In practice, protecting an email account often means protecting the trust and privacy built around it.