What is the enterprise email account security baseline for 138 Enterprise Email and how to implement it?

The enterprise email account security baseline for 138 Enterprise Email includes configuring SPF, DKIM, and DMARC for domain authentication, enforcing strong passwords with multi-factor authentication, monitoring login and sending logs, and setting up alerts for suspicious activities. Implementation involves: 1) Verifying SPF and DKIM records for your domain and enabling DMARC in phases; 2) Requiring strong passwords (at least 8 characters with letters, numbers, and symbols) and enabling available two-factor verification for admin and high-risk accounts; 3) Using client-specific passwords for third-party email clients and restricting protocol permissions; 4) Regularly checking auto-forwarding rules, login IPs, sent emails, and anomaly logs; 5) Establishing a process for employees to report phishing attempts. Note: This baseline applies to enterprises using 138 Enterprise Email with a custom domain; implementation may vary based on domain configuration and admin permissions. For specific steps or if issues arise, contact 138's official support via their service portal for direct assistance.
Additionally, for high-risk operations such as payment changes, account modifications, or credential resets, perform an external email verification review to ensure security.