Phishing - What It Is and How to Prevent It With Google Workspace

There are a few ways you can prevent phishing with Google Workspace:

Use 2-Step Verification.

• With 2-Step Verification, even if your password is compromised, hackers won’t be able to log in to your account, thanks to the extra security step.

Use the Password Alert Chrome extension.

• With the Password Alert extension, users get an alert any time their Google password is entered into a non-Google website. Then they get prompted to change their password. 
• The extension compares a user’s keystrokes to their password. If there is a match and it’s not on a Google site, the extension is triggered. 

Allow only trusted apps to access your data.

• Highly recommended – this prevents users from granting access to malicious third-party apps.

Disable POP and IMAP access.

• Prevent people from using less secure third-party email clients to check their email.
• Keep them in Gmail, which is much safer and has built-in phishing protection features.

Enforce work profiles for Android users.

• Ensure that personal data is separate from company data on Android devices.
• Furthermore, this allows you to make sure only allowed apps can access your company data.

Report phishing.

• If you suspect a user may already have become the victim of phishing, you must immediately reset their password. In addition, always report phishing emails. 
• In Gmail, open the message. Then on top, next to the Reply button, click the little arrow and select Report phishing. 
• If you incorrectly marked an email as phishing, follow the steps above but click ‘Report not phishing.’

Contact Google Workspace Support

• If you ever doubt the legitimacy of an email you receive, contact support immediately and they will look into it for you.

Last but definitely not least, check out these additional security services

• Some of these services include stronger phishing protection features.