BSI study examines security of popular email apps — Apple Mail included

Germany’s Federal Office for Information Security (BSI) has analyzed widely used email clients to assess their core security functions. The study looked at a set of 12 programs, including Apple Mail, because email clients routinely handle sensitive content such as private messages, invoices and contracts.

The BSI used uniform criteria to evaluate central protections and secure handling of messages. While the detailed report lists findings per client, the review focused on features that matter most for everyday safety and privacy.

Security aspects assessed

• Support for encryption standards (end‑to‑end options such as PGP/S‑MIME and transport security like TLS).
• Phishing and spoofing protections, including detection and warning mechanisms.
• Attachment handling and sandboxing to limit the impact of malicious files.
• Automatic update mechanisms and patching for timely vulnerability fixes.
• Privacy and data‑handling settings, plus account and authentication options (2‑factor authentication).

These are the kinds of controls the BSI highlights as crucial because email clients are a primary vector for fraud and data theft. The agency’s approach helps users and administrators compare apps using consistent security benchmarks.

What users should do

• Enable TLS and, where possible, end‑to‑end encryption for sensitive correspondence.
• Keep your email client and OS up to date to receive security patches promptly.
• Use strong passwords and enable two‑factor authentication on email accounts.
• Be cautious with unexpected attachments and verify sender addresses before acting on requests for sensitive data.

For more information, consult the BSI’s guidance on secure email usage: BSI. You can also read the original coverage on ifun.de: iFun.

Discussion: Which email client do you trust most for handling sensitive messages — and what security feature matters most to you?