When a company buys hosting for its website, it often creates its email accounts in the same package. It looks practical and cheap. In our view it is one of the most common — and potentially most expensive — mistakes companies make.
A website always carries risk
Every public website can be attacked or taken over by third parties, however many precautions you take. An outdated plugin, a weak password or a vulnerability in another site on the same server is enough. Precautions reduce the risk; they cannot remove it.
Email is your company’s memory
Today a company’s email holds everything: quotes, contracts, price lists, customer details, bank correspondence and password-reset links. All your real-world information now lives inside your email.
If email sits on the same server as the website, an attack on the site can reach that memory too. If the server is blacklisted, your emails stop arriving. If the hosting is suspended, email stops along with the site.
Our rule: keep them apart
We never recommend it, and we do not let any client run website and email on the same hosting. The website runs on its own server, email on a reliable, separate email infrastructure. If one has a problem, the other is unaffected. We do the same in our own company.
Separation costs less than one incident
The separation may look like an extra cost at first. It is nothing compared with a data leak, customer details reaching third parties or days without email.
If you are not sure how your current website and email are set up, we can check together and plan a migration without downtime.
Related service
Web, Mobile App & Software