email - MacTech Solutions

Beware of Scam Party Invitations from Hijacked Accounts

Terry McAdams — Fri, 04 Sep 2026 20:03:40 +0000

The latest scam making the rounds preys on your trust and sociability. You receive what appears to be a party invite from a friend via an invitation service like Paperless Post or Punchbowl. The email legitimately comes from your friend’s account, which has been compromised, but clicking any link in it takes you to a fake site that asks for your email credentials. (You have to love the “SAFE TO OPEN” line in the example below.) If you supply your email password, your account becomes the next one hijacked, and the scammer can then use email-based password resets to access your financial and other sensitive accounts. To protect yourself, be suspicious of invitations that lack basic details like date and location, preview links before clicking (hover on a Mac, touch and hold on an iPhone or iPad), and never enter your email password on any site other than your email provider’s own login page. Most importantly, enable two-factor authentication on your email accounts—it stops these takeovers in their tracks.

(Featured image generated by Adam Engst with ChatGPT)

Social Media: A convincing party invite scam uses hijacked email accounts to send you fake invitations from people you know. Learn how to spot the red flags—and why enabling two-factor authentication on your email is the best defense.

How to Share Sensitive Information Securely over the Internet

Terry McAdams — Fri, 03 Jul 2026 22:50:54 +0000

At some point, most of our communications shifted from analog to digital: letters and phone calls became emails, texts, and video calls. With analog methods, we could generally assume that our private communications would remain private. Few people were going to steam open a letter or wiretap a phone line. The Internet changed that—digital communications, if not properly protected, can be intercepted in bulk far more easily.

Not all everyday communications require strict privacy. Most of us prefer privacy, of course—few people want their dinner plans published for the world to see—but there are typically no consequences of exposure greater than mild embarrassment (McDonald’s again?). But even ordinary people regularly need to share information that could damage their relationships, finances, or careers if it fell into the wrong hands.

Passwords are the most obvious example because their entire point is secrecy. But other sensitive data includes credit card details, bank account numbers, tax documents, retirement planning materials, and health-related information. When you need to share such data, how do you do it securely?

Data at Rest and in Transit

Before exploring specific solutions, you need to think about how information is protected when it’s in transit between systems and when it’s stored somewhere:

In transit: To prevent eavesdropping, focus on communication channels that are encrypted between you and the destination:

Between your app and a server: Nearly all Internet-enabled apps, including all Web browsers, use SSL/TLS to protect their connections to servers. A lock icon in a Web browser’s address bar indicates HTTPS encryption, or you can look for https at the start of a website’s URL.
End-to-end encryption: Even better is end-to-end encryption, which ensures that not even the service provider can decrypt your traffic. iMessage (blue-bubble conversations), WhatsApp, and Signal provide end-to-end encryption protection (though WhatsApp archives are readable by other Meta apps). SMS messages are not encrypted at all, and RCS conversations only support encryption with the latest Apple and Google updates, plus carrier support. Both SMS and RCS appear as green-bubble conversations.

At rest: Stored data—whether on your computer, at remote email servers, or in the cloud—needs protection too. Two approaches help:

Per-file encryption: Encrypt data before sending so even if an attacker figures out how to access the file, it can’t be decrypted without a password. Send the password through a completely different communication channel (called “out-of-band”)—for example, share an encrypted file via email but send the password via Messages.
Time- or access-expiring links: Send a link to the information that expires after a short period or after a limited number of views, thereby shrinking the window during which a breach could occur.

Choosing the Right Solution

The best approach for any given communication depends on four factors:

Audience: What are your recipients’ technical capabilities? Messages is easy and secure, but only Apple users can access it. Email reaches everyone but offers less protection. A password-protected PDF is probably easier for less-technical users than an encrypted disk image.
Content type: Sharing a password differs from sharing a document, which in turn is different from sharing a collection of files.
Importance: How problematic would it be if the sensitive information you’re sharing fell into the wrong hands? There’s a world of difference between the password for a club discussion forum and the credentials to your retirement account.
Persistence: Does your recipient need to glance at something only once, or do they need to retain a copy permanently?

Eight Secure Sharing Methods

With all that in mind, here are eight secure methods of sharing information that you can employ in different situations:

Use a secure portal when available: Doctors, lawyers, accountants, and other professionals who regularly receive sensitive information often use secure customer portals or services like DocuSign for sending messages, documents, and files. Use whatever system they provide unless you have good reason to doubt their IT competence.
iMessage, Signal, or WhatsApp: For quick sharing of sensitive information, these end-to-end encrypted messaging services work well. They’re particularly useful for sending information that isn’t useful on its own—for instance, send a login URL and username via email but the password separately via Messages.
Self-destructing links: Services like 1ty.me and One-Time Secret generate encrypted links that contain text. Once the recipient views the link, the server deletes the data, and the link self-destructs. If the recipient reports the link was already used, you know it was compromised. Be aware that some email systems automatically scan links, which could trigger premature self-destruction.
Password manager sharing: 1Password, Bitwarden, and some other password managers (but not Apple’s Passwords) offer secure sharing features that make it easy to share credentials with someone who needs to access a particular account. You can create links with expiration dates, limit access to specific email addresses, and cause links to self-destruct after being viewed once.
Password-protected PDF: For documents that could be printed, create a password-protected PDF. From nearly any app, choose File > Print, click the PDF menu at the bottom, and choose Save As PDF. In the Save dialog that appears, click Security Options, select “Require password to open document,” and enter a strong password (online services can remove weak passwords). Share the file however you like, but send the password through a different channel, preferably via an expiring link.
Password-protected disk image: For Mac users sharing files that can’t easily become PDFs, or for sharing collections of files, create a password-protected disk image. In Disk Utility, create a new compressed disk image (File > New Image > Image from Folder), choose an encryption option (256-bit for more sensitive information), and enter a strong password. Again, share the password separately, ideally via an expiring link.
Password-protected Zip archive: A password-protected Zip archive serves the same purpose and may be easier for Windows users to extract. Apps like Keka and BetterZip can create these. For the fastest approach, open Terminal, type zip -er ~/Desktop/filename.zip (with a space at the end), drag in the files you want to compress, press Return, and enter your desired password when prompted.
Time-expiring cloud storage links: Some cloud storage services offer links that expire after a specified time. Dropbox Professional supports this feature, enabling you to share files while ensuring that links become useless in the event of a breach.

There’s no one-size-fits-all solution for securely sharing sensitive information. Match your approach to the sensitivity of the data, your recipient’s capabilities, and how long they need access.

(Featured image by iStock.com/metamorworks)

Social Media: Need to share passwords, financial details, or sensitive documents securely? Email alone isn’t safe enough. Learn eight practical methods—from self-destructing links to encrypted disk images—that protect your data in transit and at rest.

Businesses, Don’t Overlook Email Backup

Terry McAdams — Mon, 10 Feb 2025 17:30:57 +0000

Cloud-based email services such as Google Workspace and Microsoft 365 dominate the market for organizational email for good reason. Dealing with the constant onslaught of spam and online attacks is hard, as those traumatized by running mail servers in the “good old days” can attest.

While email service providers excel at their primary functions of sending, receiving, and storing emails, they prioritize availability and uptime over backup and recovery. Depending solely on their built-in protection systems can leave organizations vulnerable to data loss. Although it’s exceedingly rare for email service providers to lose data due to system failures—all modern email systems are distributed and replicated in virtualized storage—they cannot safeguard against every risk. Here are some scenarios we’ve encountered where a separate email backup solution was useful:

Recover from human error: This is the big one. People often accidentally delete important messages or clean out old messages too aggressively, inadvertently including critical conversations in a mass deletion. Backups ensure that these messages can be retrieved.
Ease employee turnover: When employees leave, it’s essential to deactivate their email accounts for security reasons. However, information in their accounts may be vital for ongoing projects or legal purposes. Backups preserve this data for future access.
Mitigate cyber threats: Phishing attacks are commonplace today. If an employee falls victim to one, their email account could be compromised and data lost. Worse still, the attacker could install malware—even ransomware, though that’s not a significant real-world concern for Apple-only installations—that could result in email data loss. While training employees to recognize and avoid phishing attacks is crucial, backups provide an essential safety net for anyone who makes a mistake.
Facilitate data migration and archiving: Organizations often need to migrate email data from one system or user to another. While it’s rarely necessary or desirable to migrate everything—all the mail from the past year may be sufficient—it can be helpful to maintain archival access to historical communications.

In fact, both Google and Microsoft explicitly state that they store data for only a limited time and recommend employing a backup service. (The specifics may differ, but generally, you can retrieve a deleted email within 30 days, after which it may be recoverable for an additional 14 or 30 days.) Numerous companies provide email backup services, many of which are quite similar. The list below highlights some of the most common services, but we encourage you to reach out for recommendations based on your email service provider and organization size.

CloudAlly offers unlimited data retention and extends its backup capabilities beyond email to encompass platforms such as Box, Dropbox, and Salesforce.
CubeBackup focuses exclusively on Google Workspace and Microsoft 365. It provides a cost-effective solution by allowing users to utilize their own local or remote storage.
Backupify and Datto SaaS Protection are from the same company and offer the same backup capabilities, but they serve different market segments. Datto further enhances its branded services with a range of business continuity and data protection tools.
Dropsuite provides unlimited storage and also supports QuickBooks Online backup. It features a flexible backup cadence, with email backups up to 12 times per day.
MSP360 Managed Backup is a feature-rich solution that, while more complex and potentially more expensive than those from competitors, offers extensive customization and supports a wide range of storage providers.
Spanning goes beyond Google Workspace and Microsoft 365 with Salesforce backups. It offers highly granular restores, enabling the recovery of individual emails. Its FLEXspend feature simplifies backup expenditures when transitioning between platforms.
SpinBackup offers disaster recovery services at an affordable price point, and its developer, Spin.ai, provides a wide range of security solutions beyond backup, including data leak and ransomware protection.
Synology Active Backup includes free add-ons for Google Workspace and Microsoft 365 that back up cloud data to a Synology NAS. It’s an excellent solution for avoiding ongoing expenses.

As important as an email backup solution is for protecting against data loss, we urge you to proceed carefully when selecting one. If you end up with data that exists solely in a particular solution, legal retention requirements or the inability to export data in a non-proprietary format may lock you into paying for it indefinitely. Ideally, keep all data live so you can transition to a different solution to meet changing needs. Again, please contact us for help picking the most appropriate solution for your needs.

Protect Your Email — and Meet Compliance Requirements

Whether you’re managing a business, a professional office, or your personal communications, dedicated email backup and archiving are critical for protecting important information — and in some cases, meeting legal or regulatory compliance.

At MacTech Solutions, we can help you choose the right backup solution, set up compliant email archiving, or both — depending on your needs.

Stop by our store in Finishing Touch Plaza here in Wichita Falls, give us a call, or visit our website to schedule an appointment — although appointments are never required.

We’re your trusted local experts — ready to help you safeguard your email and your peace of mind.

(Featured image by iStock.com/Rasi Bhadramani)

Protect Domains That Don’t Send Email from Email Spoofing

Terry McAdams — Thu, 29 Aug 2024 17:11:05 +0000

We recently wrote an article for those who manage their own Internet domain names about using SPF, DKIM, and DMARC to prevent your domains from being used in phishing attacks and enhance the deliverability of legitimate email. But what about other domains you own but don’t use for email? To make phishing attacks more believable, spammers sometimes forge email so it appears to come from parked domains that aren’t protected. You can use SPF, DKIM, and DMARC to ensure that forged email that seems to come from your unused domains isn’t accepted. The details are too specific to go into here, but Cloudflare has an excellent article outlining what you need to do.

For more information, give us a call! 940-767-MACS (6227) MacTech Solutions, 4020 Rhea Rd, Suite 3B, Wichita Falls. We’re open Monday thru Friday, 10am to 6pm

(Featured image based on an original by iStock.com/Igor Kutyaev)

It’s Usually OK to Share Full-Size Images in Email and Messages

Terry McAdams — Fri, 05 Jul 2024 13:35:14 +0000

In the early days of the Internet, when most people connected via slow modems, saving bandwidth was a big deal. You could watch images load on Web pages, and you’d have to wait to download a large email attachment before the rest of your email would appear. For most people, in most situations, bandwidth isn’t nearly as big of a deal anymore. The average Internet download speed in the US is nearly 250 megabits per second, such that most Web pages load instantly, email just appears, and we think nothing of having multiple video streams playing at once.

All that’s by way of saying that you don’t have to shrink images that you share in email or Messages in most cases, and doing so can cause problems for recipients. The most common issues people run into are images being too small or fuzzy to see, not matching the dimensions needed for a website, or being too low quality to save for posterity.

There are exceptions. Smaller or lower quality images may make sense when sending or receiving in rural areas with slow Internet connections, places with no Wi-Fi and tenuous cell service, and remote locations with only satellite Internet. In those cases, you’ll either realize that messages are taking a long time to send or hear from the other party that it’s a problem. But, most of the time, it’s best to send actual size images, so let’s look at how you ensure that.

Sending Actual Size Images in Email

How do you ensure you’re not sending downsized images in email? In Mail on Apple’s devices, the details vary slightly depending on which device you are using, but in each case, you want to use the Actual Size option. Neither Gmail nor Outlook suffers from this problem. Here’s what you need to know for each of these email clients:

Mail on the Mac: When you drop an image into a Mail message, an Image Size menu specifies the size at which it will be sent. Small resizes the longest side to 320 pixels, Medium to 640, and Large to 1280. Actual Size sends the original image, which is what you want. The Image Size menu remembers its setting, so if you send one image in a smaller size, you probably want to reset it to Actual Size for the next one. If you attach multiple images in a single message, they’ll all be resized similarly.
Mail on the iPad: On the iPad, when you add an image to a message, you’ll see a note in the header information that says something like “Images: 2.9 MB.” Tap anywhere in the header to reveal extra header fields, including an Image Size line with options for the different sizes. Small and Medium work as on the Mac, resizing the longest side to 320 and 640 pixels, and Actual Size sends the original, which is generally what you want. However, Large resizes the image to half the size of the original if appropriate or leaves it alone if not. Multiple images will be resized to the selected size.
Mail on the iPhone: Because of the iPhone’s smaller screen size, Mail on the iPhone asks how to resize the image(s) after you tap the send button. The results are the same as on the iPad, described above.
Gmail on the Web: You don’t need to do anything when sending images in Gmail to prevent them from being resized. Although Gmail lets you visibly resize an image with handles and offers Small, Best Fit, and Original options when you click, none of them change the file size or resolution of the image being sent. Only some receiving email apps (including Gmail and Outlook, but not Mail) will display the sent size. Regardless of the visible size, opening an attached image reveals that it’s the original. Note that Gmail has a 25 MB limit on attachments and may refuse to send a message with more than that or may resize images to make them fit. If you need to send an image at a particular size using Gmail, resize it before attaching—see below for a tip on how to do that.
Outlook on the Mac: You can visibly resize images sent in Outlook on the Mac, but doing so affects only the displayed size, not the file size or resolution of the attached image. Email clients receiving an Outlook-resized image may do so at the sent size, but opening it reveals that it’s the original image. If you need to send an image at a smaller size, resize it before sending—read below for help.

Avoiding Lower-Quality Images in Messages

Although it may seem confusing, keeping images from being resized in email is pretty straightforward. Ensuring that you send full-quality images in Messages is trickier because there are multiple variables in play:

Turn off Low Quality Image Mode: Make sure you turn off Settings > Messages > Low Quality Image Mode on the iPhone and iPad. (The Mac has no comparable setting.) This mode downsizes images sent via iMessage (blue bubble conversations), making them smaller and lower quality. Only turn it on if it’s paramount that you save bandwidth due to a slow connection or data cap.
Avoid sending via SMS/MMS: There’s no need for Low Quality Image Mode for messages sent via SMS (green bubble conversations) because the MMS technology used to send images for SMS conversations has size limits that vary by carrier, usually between 500 KB and 3.5 MB. Messages automatically resizes and compresses images to fit within carrier limits. You have no control over this process, which is likely to be unpredictable. If you need to send someone a full-quality image, use email instead of SMS. Happily, in iOS 18, Messages will support the RCS standard that allows full-quality images.
Prefer high-speed connections: Although Apple doesn’t document anything along these lines, some suggest that Messages may reduce image size or quality when using slow networks. If you (or your recipient) experience issues while using weak cellular connectivity, try again when connected to the Internet via high-speed Wi-Fi.

Bonus Tip: How to Resize an Image Manually

Let’s flip the problem around. Say you use Gmail or Outlook and need to send an image with specific dimensions or a smaller file size than the original. How do you do that easily? Preview! That’s right, Apple’s Preview works well for resizing images and shrinking file sizes.

To resize an image you have open in Preview, choose Tools > Adjust Size and enter the desired width or height into the appropriate field. As long as Scale Proportionally is selected, Preview will automatically set the other dimension to resize the image proportionally. You can choose other units, but pixels is generally best. Preview even reports on the resulting size at the bottom. After you click OK, save the image.

What if you want to reduce an image’s file size without changing its dimensions? With the image open in Preview, choose File > Export, choose JPEG from the Format menu, and move the Quality slider to the left to increase the JPEG compression. Preview reports on the new file size each time you move the slider. You’ll want to export a few tests to determine the best combination of file size and quality.

Generally speaking, changing an image’s dimensions is a better way to reduce file size than increasing compression.

But really, in most cases, just send the original image.

For more information give us a call! MacTech Solutions is always happy to help our customers navigate the world of technology in any way we can. 940-767-MACS (6227) MacTech Solutions, 4020 Rhea Rd, Suite 3B, Wichita Falls. We’re open Monday thru Friday, 10am to 6pm

(Featured image by Adam Engst)

Find Some Ham Amidst Your Email Spam

Terry McAdams — Tue, 18 Jun 2024 18:10:58 +0000

Spam filters work pretty well—99% of the messages in your spam mailbox are probably spam. But it’s frustrating to miss an important message that was caught by an overeager spam filter. Here’s an easy way to find many good messages, also known as “ham,” amidst all the spam. Think of keywords that might appear in legitimate email to you: the name of your city, major employers in your area, nearby colleges, companies whose products you use, their products, and so on. Then search for those terms inside your spam mailbox, either one at a time or, if your email app supports it, as a single search with OR statements for each keyword, like this Gmail search (use your actual town name and so forth): in:spam townName OR employerName OR clubName OR companyName. Of course, your keywords will appear in some spam messages, but if the searches reveal ham messages you would otherwise have missed, they’re worthwhile. Be extra cautious around any message that wants you to click a link, log in, or provide private information. The fact that your spam filter caught a message is a red flag.

As always, MacTech Solutions is here to help! Give us a call at 940-767-MACS (6227) or stop by 4020 Rhea Rd, Suite 3B, Wichita Falls. We’re open Monday thru Friday, 10am to 6pm

(Featured image by iStock.com/Igor Kutyaev)