Productivity

The 10-Minute Email Hygiene Checklist

Most inbox advice fails because it asks too much of you. Nobody is going to spend a weekend archiving 14,000 messages. But ten focused minutes? That you can do, and it's enough to meaningfully improve your security, cut most of your spam, and make your inbox a place that works for you instead of against you. Set a timer and work through the steps below in order. Each one takes one to three minutes, and none of them require you to delete anything.

Minutes 0–2: Check Your Breach Status

Before you tidy anything, find out what's already exposed. Go to Have I Been Pwned and type in your email address. It checks your address against billions of records from known data breaches and tells you exactly which services leaked your details and when.

If your address shows up — and after a few years online, it usually does — don't panic. Do this:

• Change the password on the breached service immediately.
• If you reused that password anywhere else, change it there too. This is the step people skip, and it's the one that matters most, because attackers routinely try leaked passwords on other sites.
• Make a mental note of which old accounts you no longer use. You'll deal with them in a minute.

Minutes 2–4: Lock the Front Door

Your email account is the master key to everything else — every "forgot password" link on the internet routes through it. Enable two-factor authentication (2FA) on your email right now if you haven't already. In Gmail it's under Security → 2-Step Verification; in Outlook it's under Security → Advanced security options.

Prefer an authenticator app or a hardware key over SMS codes. Text messages can be intercepted through SIM-swapping attacks, and app-based codes take about the same amount of effort. Two minutes here buys you more protection than any other step on this list.

Minutes 4–7: Tame the Flood

Three filters handle most of the noise in a typical inbox. Set them up now:

• Newsletters: create a filter that catches messages containing "unsubscribe" (nearly every legitimate mailing list includes the word) and sends them to a "Reading" folder, skipping the inbox. They're still there when you want them; they just stop interrupting you.
• Receipts and order confirmations: filter messages with subjects like "your order," "receipt," or "payment confirmation" into a "Receipts" folder. Tax season will thank you.
• People you actually know: create a filter or priority rule that flags mail from your contacts, or from a short list of addresses that matter — your boss, your bank, your family. Everything else becomes background.

Next, open your inbox and unsubscribe from the top five offenders — the senders whose messages you delete without reading, every single time. Scroll to the bottom of one message from each and click the unsubscribe link. Five clicks, roughly ninety seconds, and a real chunk of your daily clutter disappears.

Then set up the habit that prevents the flood from coming back: a dedicated address for signups. Some people create a separate free account for newsletters, trials, and one-off downloads. Others prefer to grab a disposable address from a service like TempInbox.online whenever a site demands an email for something they'll use once. Either way, your real address stops landing in marketing databases and breach lists in the first place.

Minutes 7–9: Stop Tracking and Cut Old Access

Turn off automatic image loading in your email settings. Marketing emails embed invisible tracking pixels in their images; the moment your client loads them, the sender learns that you opened the message, when, and often roughly where you were. Blocking remote images by default means you choose which messages get to phone home. In Gmail it's Settings → General → Images → "Ask before displaying external images."

Then review what has access to your account. Look for two things:

• Connected apps and third-party services — the sites you once signed into with "Continue with Google" or connected to your Outlook account. Revoke anything you don't recognize or no longer use.
• App passwords and old sessions — sign out of devices you've sold, lost, or forgotten about. Most providers show a list of active sessions; prune it.

Minute 10: Make It Stick

The checklist above resets your inbox. This step keeps it that way. Open your calendar and create a recurring monthly event: "Email hygiene, 5 minutes." When it fires, do three things — unsubscribe from whatever new senders crept in, empty or archive your Reading folder, and glance at your connected apps. That's it.

Ten minutes today, five minutes a month after that. Your inbox stays clean not because you fought it into submission once, but because you built a small routine that does the fighting for you.