Choose an email provider and decide what you'll use it for

The first step is picking which email service to use. The three largest are Gmail (owned by Google), Outlook (owned by Microsoft), and Yahoo Mail. Each one is free, works on phones and computers, and lets you send and receive messages from anyone. The main difference is what happens to your data: Gmail scans your messages to show you targeted ads. Outlook and Yahoo do less scanning but still collect information about your activity. If privacy matters most to you, ProtonMail encrypts your messages by default, though it has fewer features and costs money for the full version.

Before you create an account, think about what you'll use this email for. Some people keep one email for shopping and bills, another for work, and a third for social media and newsletters. This separation makes it harder for companies to build a complete picture of your online life. It also means if one account gets hacked, the others stay safe. You don't need to decide this perfectly now — you can always create more accounts later.

Key Takeaways

  • Gmail, Outlook, and Yahoo are the most common free options; Gmail shows you ads based on your messages, while Outlook and Yahoo collect less data but still track your activity.
  • Your password should be at least 12 characters long, use uppercase and lowercase letters, numbers, and symbols, and be different from passwords you use elsewhere.
  • Write down your recovery email and phone number somewhere safe — these are how you regain access if you forget your password or someone takes over your account.
  • Turn on two-factor authentication in your account settings so that logging in requires both your password and a code from your phone.
  • Check your account recovery settings once a year to make sure the backup email and phone number are still current.

Create your account with a strong password

Go to the website of the provider you chose. Look for a button that says "Create account" or "Sign up" and click it. You'll be asked for a name, a username (the part before @gmail.com or @outlook.com), and a password. For the name, you can use your real name or a nickname — this is what people see when you send them messages. For the username, pick something you can remember and that doesn't reveal personal information like your birth year or full address.

Your password is the most important part. Make it at least 12 characters long. Use a mix of uppercase letters, lowercase letters, numbers, and symbols like ! or #. An example of a strong password is BlueSky$Autumn92 — it's long, it mixes different types of characters, and it doesn't use your name or birthday. Never use the same password for multiple accounts. If one service gets hacked, a criminal can use that password to break into your other accounts. If you have trouble remembering many passwords, use a password manager like Bitwarden or 1Password, which stores them securely and fills them in for you.

Add a recovery email and phone number

After you create your account, the provider will ask you to add a recovery email and a recovery phone number. This is how you get back into your account if you forget your password or if someone else takes it over. Use a recovery email that you check regularly and that is different from this new email account. For the phone number, use one that you own and control — not a shared family phone or a number you might change soon.

Write these details down somewhere safe, like a notebook you keep at home or a password manager. Do not store them in a text file on your computer with no password protection. If you lose access to your recovery email and phone number, the email provider may not be able to help you regain control of your account, even if you can prove it's yours.

Turn on two-factor authentication

Two-factor authentication means you need two things to log in: your password and a code from your phone. This protects you even if someone steals your password. After you've created your account and added recovery information, go to your account settings. Look for a section called "Security" or "Account security." Find the option for two-factor authentication or "2FA."

Most providers offer two methods: an authenticator app or a text message code. An authenticator app like Google Authenticator or Microsoft Authenticator is more find because it works even if someone has your phone number. Text message codes are easier to use but less find. Choose whichever one you'll actually use — security that you abandon is worse than no security at all. Once you turn it on, the provider will show you backup codes. Write these down and store them somewhere safe. If you lose your phone, these codes let you log in while you get a new one.

Set up your email on your phone and computer

If you want to check your email on your phone, you'll need to add your account to your phone's email app. On an iPhone, go to Settings, then Mail, then Accounts, then Add Account. On an Android phone, open Gmail or your email app and tap Add Account. The app will ask for your email address and password. If you turned on two-factor authentication, you may need to create a special password just for your phone — the app will tell you how.

On a computer, you can log in directly to the website (Gmail.com, Outlook.com, or Yahoo.com) in your web browser. You can also add your account to desktop email software like Thunderbird if you prefer to read all your emails in one place. Whichever method you use, make sure you log out when you're done on a shared computer. On your own computer, you can stay logged in.

Review your privacy and security settings

Once your account is set up, spend 10 minutes looking at your privacy settings. In Gmail, go to Settings and look for "Privacy and security." In Outlook, it's under Settings and then Privacy. You'll see options for things like whether your profile is public, whether the provider can use your data for ads, and what information is shared with third-party apps. Turn off anything you don't want — for example, you can usually disable ad personalization so the provider doesn't scan your messages to show you targeted ads.

Check what apps and websites have permission to access your email. Look for a section called "Connected apps" or "App passwords." Remove any apps you no longer use. This reduces the number of places where your email account could be compromised. You don't need to change these settings every week, but checking them once a year is a good habit.

Keep your account information up to date

Your recovery email and phone number are only useful if they're current. If you change your phone number, update it in your account settings right away. If you create a new email address, update your recovery email too. Set a reminder on your calendar once a year to check these details — it takes two minutes and could save you hours of trouble if you ever lose access to your account.

If you notice anything unusual — like emails you don't remember sending, login attempts from places you don't recognize, or apps you didn't authorize — change your password when ready and turn on two-factor authentication if you haven't already. Most providers have a "Recent activity" or "Login history" page where you can see where and when your account was accessed. Check this if you're worried something is wrong.

Frequently Asked Questions

Can I use a fake name when I create my email account?

Yes. The name field is just what people see when you send them messages — it doesn't have to be your legal name. Using a nickname or a made-up name gives you more privacy. However, if you plan to use this email for banking, shopping, or official documents, use a name that matches your identity so there's no confusion later.

What should I do if I forget my password?

Click "Forgot password" on the login page. The provider will send a reset link to your recovery email or text a code to your recovery phone number. Click the link or enter the code, and you can create a new password. This is why storing your recovery email and phone number safely is so important — without them, you may not be able to get back in.

Is it safe to use my email address as my username?

Most providers use your email address as your username automatically, so you don't have a choice. This is fine — your email address is already public when you send messages to people. The important thing is that your password is strong and unique.

Do I need to pay for email?

No. Gmail, Outlook, Yahoo Mail, and most other major providers are free. They make money by showing you ads or collecting data about your activity. Paid email services like ProtonMail offer more privacy, but they cost money and aren't necessary for most people.

What happens if my email account gets hacked?

Change your password when ready from a different device. Check your recovery email and phone number to make sure they haven't been changed. Look at your recent activity to see if the hacker sent emails or changed your settings. If you use this email for banking or shopping, contact those companies to let them know. Turn on two-factor authentication if you haven't already — this makes it much harder for someone to take over your account again.