Skip to content
Chebu

Security

Your mail, kept to the people meant to see it.

How Chebu protects your account, your messages, and the addresses you share with your team.

  • Passkeys

    Sign in with Face ID, Touch ID, Windows Hello, or a security key instead of typing a password. A passkey is tied to chebu.io, so a look-alike site can't trick you into handing it over. You can register more than one device and remove any of them from security settings.

  • Two-step verification

    Add a six-digit code from an authenticator app to every password sign-in. Even if someone learns your password, they can't get in without your phone. Set a recovery email too, so you can get back in if you lose the device.

  • App passwords

    Apple Mail, Outlook, and your phone each get their own app password for IMAP and SMTP. Your main password never has to be stored in a mail app. Lose a laptop and you revoke just that one password, while everything else keeps working.

  • Emails can't run code

    Every message is displayed inside a sandbox that blocks scripts. A malicious email can't run code in your browser, read your session, or act on your behalf. You still see the formatting and images the sender intended.

  • Spam checks on every message

    Every incoming message is checked before it reaches your list and placed in Inbox or Spam. Junk stays out of your way, and you can open the Spam folder whenever you want to double-check.

  • Access by invitation

    People only see the addresses they were invited to. Search results are limited to the accounts you can access, so a shared inbox never exposes anyone else's mail. Remove someone from an address and their access ends right away.

A five-minute security checklist

Most account takeovers start with a reused password. These steps close the common gaps for you and your team.

  1. 1Add a passkey on the devices you use most.
  2. 2Turn on two-step verification with an authenticator app.
  3. 3Set a recovery email you check regularly.
  4. 4Create a separate app password for each mail app.
  5. 5Publish SPF, DKIM, and DMARC for every domain you send from.
  6. 6Review who has access to shared addresses when people change roles.

Deliverability for your domain

Chebu lists the SPF, DKIM, and DMARC records your domain needs and checks that they're published, so receiving servers can tell your real mail from forgeries. Read our guide to SPF, DKIM, and DMARC for the details.

Spend less time in email tools.

Set up your inbox, your domain, and your team in one sitting.

Create your accountSign in