Free tools Windows power users keep installed
One-click scans. No signup required.
Before clicking, pause and check who sent the message, where its links lead, and whether the request makes sense. If anything is unexpected, verify it through a website or contact route you already trust—not through details in the email.
What makes an email phishing?
Phishing is an attempt to impersonate a trusted organization or person to steal information or gain access to an account. A message may imitate a bank, workplace, familiar service, colleague, friend, or relative. It might ask for personal or financial details, push you to follow a link or download a file, or prompt you to act on an account.
As an Amazon Associate I earn from qualifying purchases.
A convincing logo, polished layout, familiar name, or lack of a warning banner does not prove a message is genuine. Google’s Gmail guidance on avoiding and reporting phishing recommends checking the message itself and avoiding suspicious links or requests even when no warning appears.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsWarning signs to check before interacting
- Pressure or secrecy: The message demands immediate action, payment, a password reset, or secrecy. Urgency alone does not prove fraud, but it is a reason to stop and verify independently. Google puts it plainly: “Scammers use emotion to try to get you to act without thinking.”
- A request for sensitive information: Be wary of unexpected requests for passwords, personal details, or financial information.
- An unexpected link or attachment: Treat a surprise download, file, or link cautiously, especially if the message gives little explanation or pressures you to act.
- A mismatch in sender details: The displayed name may look familiar while the full email address does not match the claimed organization or person.
- An unusual request from someone you know: A message from a colleague, friend, or family member asking for money, credentials, or another unexpected favor could come from a compromised account.
How to inspect the sender and a link safely
Check the full sender address
Look beyond the name shown in the inbox. Compare the full email address with the organization or person the message claims to represent. If your email service exposes authentication or message-header details, Google recommends checking those as well; these details can help assess a message, but they are not a reason to follow a suspicious request.
Preview the destination without opening the link
On a computer, hover your pointer over a link without clicking and inspect the destination shown by your email or browser. If the destination is unexpected or does not fit what the link text promises, do not open it. On devices where hovering is unavailable, avoid tapping the link; open the relevant service independently instead.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
To reach an account, use a saved bookmark or type its known address yourself, or open the service’s official app. Do not use a link in a questionable email to sign in or provide credentials.
Verify surprising requests through a known route
If a message claims that an account needs attention, go directly to the service’s official website or app and check there. For a request that appears to come from a person you know, contact them using a phone number or another communication channel you already use—not by replying to the email. A familiar sender can be compromised, so an unusual request deserves a separate confirmation. Gmail’s guidance on scam warnings advises reporting suspicious messages and alerting the apparent sender through another channel.
Rank #2
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What to do with a suspicious email
- Stop: Do not reply, click links, download attachments, or enter personal information.
- Report it to your email provider: In Gmail on a computer, open the message, select More, then choose Report phishing. Other providers have their own reporting controls; use the option in your current mail interface.
- Alert a familiar sender separately: If the message appears to come from a colleague, friend, or relative, tell them through a known alternative channel that their account may be sending suspicious messages.
If you already clicked or entered information
If you only opened a link, stop interacting with the page and do not enter credentials or personal details. Navigate to the service independently if you need to check your account. If you entered a password, go directly to the account provider’s official site or app, change the exposed password, and review the account’s security activity. If you reused that password elsewhere, change it on those accounts too.
Google’s account security guidance recommends reviewing account security and using stronger second-step verification. It identifies security keys and Google Prompts as options beyond text-message codes. Exact recovery steps depend on the provider, account, and device; use the provider’s official recovery process if you cannot sign in.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Extra safeguards—and what they do not tell you
Email services may filter suspected spam or show warnings, and Google describes Gmail as designed to identify phishing. Chrome Safe Browsing can also warn about unsafe sites. These safeguards are useful, but an unflagged message is not proof of safety: still inspect unusual requests and avoid suspicious links.
For compatible accounts and devices, passkeys are designed to resist phishing better than passwords. A FIDO2 security key is a physical option for account authentication; Google describes security keys as its strongest 2-Step Verification option and says its Advanced Protection Program uses them to help protect against phishing. A key can strengthen sign-in security, but it does not determine whether an email is fraudulent. Availability and setup depend on the service and your devices.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchQuick Recap
Rank #4
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
