The FastMail Security Mindset
I was a very happy FastMail customer until a hacker asked them to reset my password. After _incorrectly_ answering a handful of questions asked by the FastMail support, the recovery email address was changed and a password reset link sent. From there, the hacker attempted password resets on other services.<p>Initially, FastMail was dismissive that this was a simple &quot;mix-up&quot; and didn&#x27;t disable access to the hacker for 7.5 hours after my report.<p>To their credit, FastMail gave me a list of the email accessed and the message headers of the messages the hacker sent from my account (and then deleted -- unrecoverable).<p>Until and unless FastMail addresses the human factor of security, their technical security mindset is of secondary importance.