Security at Dispatch.
How we protect sign-in, handle email content, and give you control over your sessions.
Two-factor sign-in
Sign in with your password and a time-based code from your authenticator app. Recovery codes provide a way back in if you lose access to your authenticator.
Isolated email content
Email HTML is sanitized and shown in an isolated frame. This limits what message content can do within your Dispatch workspace.
You control remote images
Images hosted by a sender are blocked by default. You choose when to load them, reducing automatic requests to outside servers as you read.
Attachment checks
Attachments are scanned before download or sending. Access stays blocked while a check is pending, unavailable, or reports a threat. Scanning reduces risk but cannot detect every harmful file.
Protected credentials
Stored mailbox credentials are encrypted. Connections to mail providers use TLS, with certificate identity checks enabled in the standard production configuration.
Session controls
Review active sessions and sign-in history, including device information, IP addresses, and local timestamps, from Sign-in activity. Use the account menu to sign out on this device or revoke all your sessions.
Report a security issue
If you notice a potential vulnerability, email a description and the steps needed to reproduce it. Please keep passwords, recovery codes, and private email content out of your report.
Email a security reportAbout your email data
Dispatch processes email content to display, organize, and send messages. Encryption of stored credentials does not mean that email content is end-to-end encrypted.
Your email provider also has its own security and privacy practices. Our privacy policy explains the information Dispatch processes and how it is used.
Read the Privacy Policy