News for hackers. Stuff that matters.
Re:Ask HN: Gmail account security by alerighi on Sunday January 23, 2022 @07:08PM (#30052082)
My solution is, buy your own domain. It's cheap and it will cost you only 20$ a year or something like that. I'm not saying run your own email service (I do, but I recognize that it's complex and not worth for most people), but use a public email service (like also GMail) with your own domain.

That way at least if you no longer can access your account, or you get banned, or whatever, you don't loose your address (since you can just move to another provider).

Also, use an email client on your PC (such as Thunderbird) and configure it to keep a copy of all your emails locally (and possibly have the PC backed up). That way if you loose access to your account you don't loose access to your mail, that you can even upload again in the new provider server.

Re:Ask HN: Gmail account security by kelnos on Sunday January 23, 2022 @08:52PM (#30052748)
I agree with the advice to get your own domain, and then use a service to manage email for it. But don't use GSuite/Google Workspaces/whatever they're calling it now. Your Google account will be somewhat crippled and will be missing a bunch of features, because Google has just decided GSuite accounts should not have those features.

And you can't convert your account to a regular Google account. I really want to untangle all this, but there's no way to (for example) export your Google Photos sharing settings and import them into a new account. I have hundreds of GPhotos albums, with many of them shared with various people, and if I migrate to a new, regular Google account, I'll have to manually set up all those sharing settings again. And this is just one of many difficulties; I'm assuming I'll also lose all my Hangouts/Chat history as well, with no ability to import the old history.

But I'll be doing all this sometime soon, as Google has decided to finally pull the rug out from under those of us who signed up for GSuite when it was free (well, "Google Apps for Your Domain", as it was known back then), and will start charging later this year.

This is all incredibly frustrating, and the level of lock-in is pretty severe after more than a decade of having this account. If I could do it all over again, knowing what I know now, I would have created a Google account without GMail[0], using my email on my custom domain, and hosted my mail somewhere else. Though, admittedly, back when GMail was first a thing, webmail otherwise universally sucked.

[0] https://accounts.google.com/signupwithoutgmail?hl=en

Re:Ask HN: Gmail account security by rdschouw on Sunday January 23, 2022 @09:11PM (#30052863)
Yea it is odd that not all Google accounts are the same.

My favorite is that I cannot migrate my Nest account to a Google account because it does not support Google Workspaces accounts. I use it with my own domain and it is my private Google account.

Re:Ask HN: Gmail account security by Gareth321 on Monday January 24, 2022 @03:28AM (#30054855)
>export your Google Photos sharing settings and import them into a new account. I have hundreds of GPhotos albums, with many of them shared with various people, and if I migrate to a new, regular Google account, I'll have to manually set up all those sharing settings again.

If you think this is bad you should check out iCloud. They're all as scummy as each other about locking in users so the friction to leave is sufficiently high.

Re:Ask HN: Gmail account security by tsm on Monday January 24, 2022 @05:14AM (#30055615)
> Google has decided to finally pull the rug out from under those of us who signed up for GSuite when it was free…and will start charging later this year.

Do you have a citation for this? I heard last year they were going to start charging for new accounts, but that since I set it up on my domain in 2008 I was grandfathered into the free plan indefinitely.

Re:Ask HN: Gmail account security by ftrobro on Monday January 24, 2022 @07:50AM (#30056986)
The email has not been sent to everyone yet, but it mentions "transition all remaining users".

https://news.ycombinator.com/item?id=29996432

Re:Ask HN: Gmail account security by JamesAdir on Sunday January 23, 2022 @11:35PM (#30053790)
I had this week to transfer a small account of 2.5GB between 2 google workspace accounts. All paid accounts. It took 3 days to transfer the 2.5GB account with Google's data migration process. Downloading and uploading the emails with Thunderbird would have taken maybe 3 hours at most.
Re:Ask HN: Gmail account security by harel on Monday January 24, 2022 @08:04AM (#30057080)
That's true about GSuite being crippled compared to Gmail, but I accepted that as the price to pay for having my main email use my own domain.
Re:Ask HN: Gmail account security by Hnrobert42 on Sunday January 23, 2022 @09:50PM (#30053154)
What features does GSuite lack?
Re:Ask HN: Gmail account security by WillPostForFood on Sunday January 23, 2022 @10:26PM (#30053393)
Two that affect me: can't use it with Nest, can't buy family plan YouTube subs.
Re:Ask HN: Gmail account security by rr808 on Sunday January 23, 2022 @10:50PM (#30053522)
Family sharing of Youtube TV is another one.
Re:Ask HN: Gmail account security by dimitrisscript on Friday January 28, 2022 @01:19AM (#30111261)
Can't share Google home access with another user.
Re:Ask HN: Gmail account security by Arnavion on Sunday January 23, 2022 @07:46PM (#30052284)
And if you don't run a local mail client like Thunderbird, make sure to take a Google Takeout backup as frequently as your threshold for losing recent mail. The backup of GMail includes all your mail in a standard .mbox format.
Re:Ask HN: Gmail account security by Masema on Sunday January 23, 2022 @08:16PM (#30052500)
I did this! Kind of. I bought a domain and was lucky enough to get in to a custom domain email (and more) service with a big company years ago when they had a free version.

Unfortunately... it was Google (so kind of hiring the wolf to care for my sheep, as it turns out).

And now they're cutting off all of us free tier folks. Which I can't fault them for, but still blame them for. Because I'm petty and entitled or whatever.

Re:Ask HN: Gmail account security by Osiris on Sunday January 23, 2022 @08:36PM (#30052652)
Same here and it's a massive problem because nearly all of my digital presence is associated with, not just that email address, but that Google account specifically.

I'll lose important things like my Google Voice number that I've had for a decade unless I pay for a business account.

Re:Ask HN: Gmail account security by marwatk on Monday January 24, 2022 @12:13AM (#30053955)
You can transfer your Google Voice account to a regular GMail account despite their documentation claiming otherwise. See:

https://github.com/marwatk/gsuite-to-gmail/#google-voice

Re:Ask HN: Gmail account security by Spooky23 on Sunday January 23, 2022 @09:20PM (#30052929)
Keep in mind you can port out a Google Voice number, also if you pay for Apple services domain hosting is free for iCloud+ users now, although you don’t get as many addresses.

It is very frustrating. I did a lot with Google Apps on that domain, and migrating that stuff out to a consumer account is a painful process.

Re:Ask HN: Gmail account security by kadoban on Sunday January 23, 2022 @09:17PM (#30052907)
You can port your number out. I'm working on doing that myself. I think Google charges like $3 for some reason to do it, but whatever.
Re:Ask HN: Gmail account security by somehnguy on Sunday January 23, 2022 @09:22PM (#30052952)
Same situation here. Have you done the research yet to decide on a new service, or are you planning on starting to pay?

For me ideally I would like to move to something else (even paid) just because someday Google deciding to block me for whatever reason scares me quite a bit after having everything for the last decade attached to this account. I would like to export my emails, switch my domain to the new service, and import everything - but I have no idea how realistic that will be yet.

Re:Ask HN: Gmail account security by r3trohack3r on Monday January 24, 2022 @12:34AM (#30054055)
I’ve been really happy with ProtonMail. I use their professional account with a catch-all email address on my domain, and I give each vendor I interact with their own dedicated email address (I.e. [email protected], [email protected], etc.)

It lets me track who is sharing my email address and gives me control over that (set up simple filter to automatically delete any email received at [email protected] when I start getting spam on it).

It’s been really effective - such a part of my day-to-day flow now I can’t go back.

The transition was pretty painless. I setup an email forward from gmail to my proton inbox using [email protected], every email I received at that address I’d go update my contact information with. After a bit, I was able to turn off the forwarding. Basically the classic strangulation pattern for microservice migrations applied to email.

Re:Ask HN: Gmail account security by mkl on Monday January 24, 2022 @05:24AM (#30055709)
That sounds pretty good. I do something similar but use POP and Thunderbird, which I'm looking to move away from. Does ProtonMail automatically set the From address when you start writing an email to a company you have a dedicated address for?
Re:Ask HN: Gmail account security by Hard_Space on Monday January 24, 2022 @12:15AM (#30053969)
Having had my primary Gmail account blocked twice in the last two months, apparently through VPN usage, I became sufficiently terrified to decide to start to move all my email to my own domain.

I adopted Fastmail for my domain email, and it has been a good experience (I do know that Fastmail is a five-eyes company with all the related issues around privacy, and I researched alternatives for several weeks, but I guess in the end I was willing to trade privacy for ease-of-use, uptime and various other factors).

Now I am looking into getting away from other Cloud-provided backups such as Prime Photos, iCloud, etc., moving to self-hosted NAS storage.

Re:Ask HN: Gmail account security by velosol on Monday January 24, 2022 @09:27PM (#30067115)
The only alternative I found to Fastmail that was somewhat competitive in terms of tech & security features and not one of those countries was mailbox.org but their webmail is not Fastmail's and Germany isn't far behind those 5.
Re:Ask HN: Gmail account security by marwatk on Monday January 24, 2022 @12:15AM (#30053967)
I've been working on this but my family is pretty hung up on Google Photos so we're migrating most things there trying to preserve as much as possible. We're doing Google One family. As much as Google has annoyed me with the change, the other options weren't any better (O365, iCloud+, random non-FAANG services)

I'm documenting everything here if you're interested:

https://github.com/marwatk/gsuite-to-gmail/#google-voice

Re:Ask HN: Gmail account security by KarlKemp on Sunday January 23, 2022 @10:54PM (#30053556)
I switched to Apple's (paid) iCloud+(?) and it was entirely smooth, even though it was still in beta at the time (or alpha: the signup notification I got still had editorial comments in it).
Re:Ask HN: Gmail account security by lifeformed on Sunday January 23, 2022 @11:29PM (#30053758)
Zoho has a free tier that allows a domain.
Re:Ask HN: Gmail account security by justatdotin on Sunday January 23, 2022 @08:50PM (#30052743)
whoa! thanks for the heads up :/
Re:Ask HN: Gmail account security by Andrew_nenakhov on Sunday January 23, 2022 @07:45PM (#30052277)
I usually do use emails only on my own domains, but in this specific instance I wanted an account that could not be easily traced to me (nothing illegal, just some investigative activity), and this was how I've found out how erratic and merciless our new Google AI overlords are.
Re:Ask HN: Gmail account security by luke2m on Sunday January 23, 2022 @08:05PM (#30052419)
https://purelymail.com/ is cheap and great, albeit still in beta.
Re:Ask HN: Gmail account security by AnonC on Sunday January 23, 2022 @10:22PM (#30053371)
I looked at Purelyemail recently and it looked attractive for what it does and what it provides for a low price of $10 a year (compared to Fastmail and others, which can be quite expensive for more than one user/mailbox). But the fact that there’s just one person behind it makes me uncomfortable to consider it for any serious use. But that also probably works in favor of the low price.
Re:Ask HN: Gmail account security by jfoster on Sunday January 23, 2022 @08:34PM (#30052627)
And be careful not to have your domain recovery procedure tied to the same email account that you might need to recover.
Re:Ask HN: Gmail account security by 10729287 on Monday January 24, 2022 @02:39AM (#30054601)
The issue with running your own domain is that it could be blacklisted by google (and Facebook) if you get hacked, and then you're fucked big time. I encountered that because of an outdated Wordpress. Domain was blacklisted everywhere on the internet. Luckily I didn't have email set up on it.
Re:Ask HN: Gmail account security by Gareth321 on Monday January 24, 2022 @03:35AM (#30054898)
>Domain was blacklisted everywhere on the internet.

Well this is horrifying. Of course, not much worse than Google unilaterally and permanently banning a Gmail account.

Re:Ask HN: Gmail account security by annexrichmond on Monday January 24, 2022 @02:53AM (#30054664)
I guess one potential downside is if you mess up and forget to renew the domain on time and some jerk (automated system) buys it up and tries to resell it for a ridiculously high price. Happened to me even on my firstnamelastname.com domain.
Re:Ask HN: Gmail account security by krsdcbl on Monday January 24, 2022 @06:46AM (#30056405)
Honestly i really like Gmail as a client, but I've read too many Google horror stories over the years. Therefore I've always had this setup: own domain & mailbox at a trusty provider, and then just forwarding copies to a gmail account + sending via smtp

that way I've got the comfort of gmails features but always have a "real" mailbox to fall back to if anything happens

Re:Ask HN: Gmail account security by rr808 on Sunday January 23, 2022 @10:51PM (#30053538)
The only problem is now you have to make sure you dont get your domain hijacked. This was the reason I went back to gmail (and outlook).
Re:Ask HN: Gmail account security by elorant on Sunday January 23, 2022 @08:37PM (#30052658)
Or get a paid e-mail service where you can have support. I use Fastmail for this exact reason.
Re:Ask HN: Gmail account security by jlcoff on Sunday January 23, 2022 @10:30PM (#30053407)
Won't work though, big email providers have made it a nightmare to run your own email.
Re:Ask HN: Gmail account security by YeBanKo on Monday January 24, 2022 @12:27AM (#30054013)
And what email address did you use, when registered your domain?
[dead]
Re:Ask HN: Gmail account security by djbusby on Sunday January 23, 2022 @07:41PM (#30052256)
Not FUD, putting your eggs in the Google basket "considered harmful" - unless you pay (Gmail for your domain). I had a similar lockout but on my paid account, got fixed in about 48h. It's happened to like 10 other folk I know over the last 2-3 years
Re:Ask HN: Gmail account security by stavros on Sunday January 23, 2022 @08:04PM (#30052410)
I don't know if it's FUD, but it's true. It happened to a person I know, and in her case, the resolution was "ask around until a friend of a friend of a friend of a friend works at Google".

She literally had to ask her friend, who asked me, I asked one of my friends to ask one of his friends who works at Google to put in an internal ticket. It was thankfully resolved quickly (she lost access to all her work materials), but the process is insane.

Use your own domain with Fastmail. Yesterday.

Re:Ask HN: Gmail account security by hotpotamus on Sunday January 23, 2022 @08:10PM (#30052457)
Indeed, I only consider myself tangentially in the tech world, but I do have access to a private facebook group with many old co-workers and sometimes this sort of request will go out to current FB or Googlers. Inevitably some will complain that it's inappropriate and should go through official channels and others will point out that this back channel is often the only real resolution.
Re:Ask HN: Gmail account security by sofixa on Sunday January 23, 2022 @11:14PM (#30053667)
Google now have support, including phone and chat, via Google One ( basically if you pay for extra storage for Gmail/GDrive/Photos/etc.).
Re:Ask HN: Gmail account security by stavros on Monday January 24, 2022 @03:47AM (#30054969)
Interesting, I wonder if you can somehow pay after you're locked out.
Re:Ask HN: Gmail account security by rovr138 on Sunday January 23, 2022 @08:07PM (#30052438)
> It was thankfully resolved quickly (she lost access to all her work materials),

More than your own domain, BACKUPS.