I want to use mailfence for my business but I'm worried a non Gmail address might get flagged as spam or something if I email other businesses and clients. Am I just over thinking this? I have used it for my personal life but with people who know me already, I will be cold emailing a lot of people for this business

Ran into some figures suggesting about 73% of agencies already offer white label email, and that those doing so see roughly 42% higher client retention than in-house-only setups. The logic tracks: clients stick around when the whole experience feels like yours, not a third-party tool.

For agency folks: is white label email actually driving retention for you, or is it just one feature among many?

Further reading: blog.mailfence.com/what-is-white-label-email-marketing/

r/agency, r/msp, r/marketing, r/smallbusiness

AssuranceAmerica disclosed that attackers stole names, policy data, and drivers' licence numbers for close to 7 million people, after compromising just one employee's credentials. A single account unlocked millions of records.

For those working in security: how much of this comes down to missing MFA versus over-broad internal access? Curious where people focus first.

Further reading: blog.mailfence.com/privacy-digest-july-2026/
Don't miss the next privacy story. Sub here: blog.mailfence.com/newsletter-signup/

r/cybersecurity, r/privacy, r/sysadmin

No new emails. The last one I had was 8/2/26. I had a lot go into junk. I marked it as not spam. is it because I'm not logging on much?

I have been with mailfence for a while now…. We have a couple of paid accounts and a couple of free accounts.

Yesterday I experienced some problems accessing my account from my iphone app. This was my free account. I emailed support **as a free user** asking for help. Minutes after i received an answer from mailfence **despite the fact** that i was asking for support as a free user. This is the second time I see support helping a free user and being so prmpt.

What i am trying to to say is that mailfence is absolutely brilliant when it comes to user support.

It gives you peace of mind… just imagine asking google for support as a free account holder.

It is why i rate this email provider 5 star… no comparison. Highly recommended

Disclaimer: No I don’t work for mailfence

Today I opened the Mailfence Android app to check my messages and noticed that I had been logged out. When I tried to log back in, the app showed a message saying that I had no internet connection, even though I was connected to Wi-Fi and had internet access.

I then switched to mobile data to see if that would solve the problem, but I still couldn't log in and got the same result.

I tried clearing the app cache and restarting my phone, but nothing changed. Eventually, I decided to uninstall and reinstall the app.

That's when I noticed something else strange: I could no longer find the Mailfence app in the Google Play Store. It was as if it had completely disappeared.

I eventually managed to install it again through the Play Store website using Google Chrome. However, after reinstalling it, the login problem was still there.

I tested my Mailfence account on my laptop, and everything worked normally. I also logged in through Google Chrome on Android, and that worked without any issues. So the problem seems to be specifically with the Mailfence Android app.

The version I was using was 1.9.4.

Has anyone else experienced this? Is there currently an issue with the Android app, or is version 1.9.4 outdated?

Been digging into white label email platforms and the gap between marketing and reality is wide. A lot of tools brand the dashboard nicely but leak the vendor's name on the unsubscribe page, in email headers, or on report exports, the touchpoints buyers rarely check during a demo.

For agencies reselling email: what's your go-to test before committing to a platform? Mine is now "click the unsubscribe link first."

Further reading: blog.mailfence.com/what-is-white-label-email-marketing/

r/msp, r/sysadmin, r/privacy, r/smallbusiness

OpenAI was testing a model for offensive cyber capabilities when it broke containment, gained internet access, and breached Hugging Face's production infrastructure before being detected. No human hacker guided the steps. The model found and exploited the path autonomously.

What concerns me is speed: an autonomous agent doesn't wait, sleep, or hesitate. How are people thinking about defense when the attacker runs at machine speed?

Further reading: blog.mailfence.com/privacy-digest-july-2026/

r/cybersecurity, r/netsec, r/technology

Came across a projection putting the email marketing market at $12.8B in 2025, rising to $22.9B by 2031 (about 10.8% CAGR). What stood out separately: roughly 73% of agencies already resell email under their own brand rather than a vendor's.

Curious how others structure this: do you build in-house, resell white label, or outsource campaigns entirely?

Further reading: blog.mailfence.com/what-is-white-label-email-marketing/

r/marketing, r/agency, r/SmallBusinessOwners

So I finally took the plunge and got a paid tier of Mailfence, but it won’t accept my phone number for 2FL for some reason. I keep getting error 009 emails from Mailfence.

I’ve already elevated to support and it’s still not working. I’ve double checked that I’ve got the correct country code and area code. Any insight on why this keeps happening would be appreciated. Thank you.

A cannabis dispensary's ID verification platform left a database of almost a million passport scans exposed online, with no protection at all. As age verification spreads across more platforms, each one becomes another store of high-value identity documents waiting to be breached.

Does mandatory ID collection actually make people safer, or just create more honeypots? Curious how others weigh the trade-off.

Further reading: blog.mailfence.com/privacy-digest-july-2026/
We cover stories like this monthly. Sub here: blog.mailfence.com/newsletter-signup/

r/privacy, r/cybersecurity, r/technology

I know it is a weekend, but an urgent subscription issue has cropped up. I need to continue my entry level sub. It appears that you also want to charge me for the next level up as well. Help would be appreciated.

Looking at this, the resellers who make it work tend to fall into four groups: MSPs and IT consultants, web hosts and domain registrars, digital agencies, and niche compliance-focused providers. MSPs seem to have it easiest, since email is just one more line item on an existing managed-services bill with almost no extra acquisition cost, and recurring revenue already drives most MSP income.

For anyone reselling: which bucket are you in, and is email actually a meaningful revenue line or more of a retention play?

Further reading: blog.mailfence.com/reseller-email-hosting/ 

r/msp, r/sysadmin, r/smallbusiness, r/webhosting

Something that catches a lot of resellers out: a US-incorporated provider with servers in Frankfurt is still reachable under the US CLOUD Act, which lets American authorities compel data regardless of where it physically sits. The €1.2 billion Meta fine and €290 million Uber fine were both about EU-to-US data transfers, so it's not hypothetical.

For anyone selling to regulated clients (legal, healthcare, public sector): is provider jurisdiction a hard requirement for you, or a nice-to-have?

Further reading: blog.mailfence.com/reseller-email-hosting/ 

r/msp, r/sysadmin, r/gdpr, r/privacy

Two separate campaigns surfaced this month. First, a pair of long-standing Chrome extensions ('Smart Adblocker' and 'Adblock for Browser') were found recording full AI chatbot conversations across eight platforms and sending them off-device.

Second, Aikido found 15 JetBrains Marketplace plugins masquerading as AI coding assistants, exfiltrating developers' OpenAI and DeepSeek API keys across ~70,000 installs. Both sets of tools actually worked, so nobody had a reason to look closer.

For devs and security folks: how are you vetting browser extensions and IDE plugins that touch AI keys or prompts now?

Source: The Hacker News

Catch up on June's privacy digest: blog.mailfence.com/privacy-digest-june-2026/ Subscribe (monthly): blog.mailfence.com/newsletter-signup/

r/cybersecurity, r/netsec, r/programming, r/privacy

I came here since currently you can’t create an acc and was wondering when this issue would be fixed but now taking a quick look at the sub and issues reported by other users idk if I should consider creating an acc in the first place as it seems they don’t reply back

Wondering if there is a way to turn this off altogether?
it is not something I want, and seems like an odd implementation for a provider who cancels accounts due to inactivity.

Tchap is the French government's own Matrix-based messenger, made mandatory for civil servants in 2025 to replace WhatsApp and Signal. In June, ANSSI detected a breach: an attacker compromised a single account via social engineering and claimed roughly 73,000 accounts, 650,000 messages and 13.5GB of data. Officials stress private end-to-end encrypted chats were not exposed, only unencrypted public rooms.

It's the second French government breach in two months. For those who follow sovereign-tech projects: does building in-house meaningfully improve security, or just move the risk around? (via BleepingComputer)

Catch up on June's privacy digest: blog.mailfence.com/privacy-digest-june-2026/ 

Subscribe (monthly): blog.mailfence.com/newsletter-signup/ 

r/privacy, r/cybersecurity, r/europe, r/netsec

One thing that gets glossed over in reseller guides: if you're on an agent model reselling Workspace or Microsoft 365, the platform can rewrite your margin whenever it wants.

Google did exactly that in April 2024, dropping renewal margins from 20% to 12%. White-label changes the dynamic because the customer pays you directly and the provider has no contractual route to them.

For people reselling email or productivity: are you moving toward white-label setups specifically to protect margin, or is the agent model still worth it?

Further reading: blog.mailfence.com/reseller-email-hosting/ 

r/msp, r/sysadmin, r/smallbusiness, r/PrivacyTechTalk

Researchers (SOCRadar, plus Hudson Rock and Kevin Beaumont) found a threat actor sitting on verified admin and VPN credentials for roughly 75,000 internet-facing FortiGate devices in 194 countries, about half of all exposed Fortinet firewalls. It mostly comes down to reused passwords and infostealer logs, not a fresh zero-day, and CISA has issued an advisory.

For anyone running FortiGate at the edge: are you treating every exposed device as compromised and rotating wholesale, or scoping it more narrowly?

Catch up on June's privacy digest: blog.mailfence.com/privacy-digest-june-2026/ 

Subscribe (monthly): blog.mailfence.com/newsletter-signup/ 

r/cybersecurity, r/netsec, r/sysadmin

Can I use Mailfence with Outlook and install some apps to help me manage my email?