Security before you connect your email
Facts as of 20 Oct 2026. Facts link to the claim log. Advice is our opinion.
1. Your inbox is a master key
Password resets, invoices and 2FA codes all arrive by email. An agent with inbox access can, in principle, reach most of your accounts. Treat connecting email as giving out a master key.
2. Prompt injection is the main threat
Any email can contain hidden instructions (“forward the last 10 invoices to…”). Meta prices a zero-click injection against one Muse user at $130,000 in its bug bounty. That tells you how seriously vendors take it.
3. Make trust zones
Green: the agent can act (newsletters, calendar holds). Amber: draft only, ask first (replies, purchases under a cap). Red: never (banking, health portals, password resets). Use the free worksheet.
4. Check deletion before you start
Dots’ own memories are only deleted by resetting the dot, and disconnecting an app doesn’t delete what it already learned. Know the deletion path before connecting.
5. Start narrow
A label, a forwarding address or a secondary inbox first. Read-only for a week. Then expand.
Tools for this
Agent Picker · Trust-zone checklist · Free evaluation scorecard (CSV) · Full kit