Email Basics: Send, Organize, and Avoid Common Mistakes
Email is still one of the most useful tools for receiving receipts, contacting organizations and keeping a written record of a conversation. It can also feel overwhelming: messages pile up, attachments disappear into downloads, and it is not always obvious who can see a reply.
This guide explains the everyday basics, from sending your first message to organizing an inbox and recognizing suspicious requests. Email apps differ, so use these principles alongside your provider’s current help pages for specific buttons and settings.
What is an email address?
An email address identifies a mailbox. In a fictional address such as alex@example.com, the part before the @ identifies the mailbox and the part after it identifies the domain. You give the address to people or services that need to send you messages.
Your email account is protected by a password or another sign-in method. The address itself is not a password. Because an email account often receives password-reset links for other services, protecting it is particularly important.
You can use email through a web browser or a dedicated application. The mailbox may be the same even when the interface looks different. Some people have separate personal, work and school accounts; check which account is active before sending or sharing a file.
Understand the main folders
Inbox is where new incoming messages usually appear. Sent contains messages you have sent, while Drafts holds messages that have not yet been sent. Trash or Deleted Items contains messages you have removed, often for a limited period.
Spam or Junk contains messages the provider suspects are unwanted or harmful. Filters are not perfect, so a legitimate message can land there and a suspicious message can still reach the inbox. Check the folder when you are expecting a missing message, but be careful with unfamiliar links and attachments.
Some providers use labels, categories or an archive rather than traditional folders. Archiving generally removes a message from the main inbox without necessarily deleting it, but the exact behavior depends on the service. Search and the provider’s help pages can help you find archived messages.
Write and send a message
- Choose Compose or New message. Confirm that you are sending from the intended account.
- Enter the recipient’s address. Check spelling and the suggested contact before selecting it; autocomplete can choose the wrong person.
- Add a clear subject. A short subject such as “Question about Tuesday’s appointment” helps the recipient understand the topic.
- Write the message. Explain the purpose, include relevant details and state any action or reply you need.
- Add an attachment only if needed. Confirm that you selected the correct file and that the recipient is authorized to receive it.
- Review before sending. Check recipients, tone, links and attachments, especially when the message contains sensitive information.
A concise message can still be polite. For example: “Hello, could you confirm the appointment time for Tuesday? Thank you.” If a request is complex, use short paragraphs or a list rather than one long block of text.
Once sent, an email may be copied, forwarded or stored by recipients. Some services offer an undo-send delay, but it is not a reliable way to recall a message after delivery. Treat the final review as your main opportunity to catch mistakes.
To, Cc and Bcc explained
To is generally used for the main recipients. Cc, or carbon copy, includes additional people who should see the message. In a typical message, people in the To and Cc fields can see those addresses.
Bcc, or blind carbon copy, lets you include recipients whose addresses are not normally shown to the other recipients. This can be useful for a small group announcement when people should not receive each other’s addresses. However, Bcc is not a complete privacy guarantee: recipients can still forward the content, and reply behavior or provider features can vary.
Before sending a group email, consider whether everyone needs every address and whether the message contains private information. For newsletters or large lists, use an appropriate service and follow applicable consent and privacy requirements instead of sending bulk mail from a personal inbox.
Reply, reply all and forward
Reply usually sends a response to the original sender. Reply all generally includes the sender and other visible recipients. Check the recipient list before replying, particularly when a group conversation contains personal or sensitive information.
Forward sends an existing message to another person. Review the entire thread and any attachments before forwarding: earlier messages may contain private details that the new recipient should not see. If necessary, summarize the relevant information instead of forwarding the whole conversation.
A long thread can drift away from its original topic. If the subject changes significantly, consider starting a new message with a clear subject. This makes the conversation easier to find later and reduces confusion about who needs to participate.
Attachments and file-sharing links
An attachment is a file sent with a message. Common examples include documents, images and PDFs. Email providers often limit attachment size, and different services may have different restrictions. For a large file, a controlled sharing link may be more practical.
Before attaching a file, open it and confirm it is the intended version. Check whether it contains comments, hidden sheets, personal details or other information the recipient should not receive. A file name alone does not tell you everything inside.
For a cloud-sharing link, review who can access it and whether they can view or edit. A link that anyone can open can be forwarded beyond the intended recipient. Revoke access when it is no longer needed, while recognizing that a recipient may already have saved a copy.
Do not open unexpected attachments simply because the sender name looks familiar. Accounts can be compromised and display names can be imitated. If a file or request is unusual, confirm it with the sender using a known contact method.
Keep the inbox manageable
Start with a few useful categories rather than dozens of folders. You might separate receipts, personal correspondence and ongoing projects, or use labels if your provider supports them. Choose a system that helps you find a message again without requiring constant filing.
Use search for a sender, subject or distinctive phrase. Many services offer filters for dates, attachments or unread messages. Search features differ, so consult the provider’s help page when you need a more specific query.
Consider a short routine: deal with urgent messages, archive those you may need later and delete what you no longer need. Unsubscribe from legitimate newsletters you no longer want using the provider’s built-in controls where available. Be cautious with unsubscribe links in obviously suspicious messages; reporting spam may be safer.
Recognize suspicious email
A phishing email tries to persuade you to click a link, open a file, pay or share a secret by pretending to be a trusted person or organization. Warning signs include unexpected urgency, unusual payment instructions, a request for a password or verification code, and a link that does not match the claimed service.
These signs are not a perfect test. A polished message can be fraudulent, and a real account can be taken over. If a bank, delivery company or colleague asks you to act urgently, open the official app or contact the person using a number you already know rather than using the message’s contact details.
Do not approve an unexpected sign-in prompt or give a one-time code to a caller who claims to be support. CISA’s phishing guidance explains how these messages work and why independent verification matters.
Protect the account
Use a long, unique password and enable multi-factor authentication where available. A password manager can help you create and store unique credentials. Where supported and practical, a phishing-resistant method such as a security key or passkey can offer stronger protection against certain fake-site attacks.
Review the account’s recovery email, phone number and backup methods. Remove old details you no longer control. Store recovery codes safely and check that you can sign in on a new device before replacing the only device you normally use.
Periodically review recent account activity and connected sessions if your provider offers those controls. Unexpected forwarding rules or unfamiliar devices can be signs that you need to investigate. Use the provider’s official security process if you suspect someone has accessed the account.
What if an email goes to the wrong person?
Act promptly. If the service offers an undo-send window and it is still available, use it, but do not assume the message was recalled. Contact the unintended recipient through an appropriate channel and ask them not to use or share the information.
If the email contains sensitive business, customer or personal data, follow your organization’s incident procedure immediately. You may need to notify an administrator or privacy team. For a shared cloud link, revoke access or change permissions, while recognizing that a recipient might already have downloaded a copy.
Afterward, review the cause. Disabling an incorrect autocomplete suggestion, slowing down before selecting recipients or using a deliberate approval step for sensitive messages can prevent a repeat.
Common email problems
If a message does not arrive, check the address, spam folder and whether the sender received a delivery error. Search for the sender or subject. A full mailbox, a filtering rule or a temporary service issue can also affect delivery. Avoid repeatedly sending sensitive information while you investigate.
If you cannot open an attachment, check its file type and whether you have a compatible app. Do not install an unfamiliar program from a random download page just to open a file. Ask the sender for a safer or more common format if appropriate.
If an account is locked, use the provider’s official recovery process. Do not pay an unsolicited “recovery service” or give your password to someone who contacts you unexpectedly. On a managed work account, contact the designated help desk.
Frequently asked questions
Does deleting an email delete it for the recipient?
No. Deleting a message from your mailbox generally does not remove copies already delivered to other people. Provider-specific recall features have limitations and should not be relied on as a guarantee.
Is Cc the same as Bcc?
No. Cc recipients are generally visible to other recipients; Bcc recipients are normally hidden from them. Check your provider’s behavior and the recipient list before sending.
Can I have more than one email address?
Yes. People often use separate personal and work addresses. Keep their passwords, recovery methods and intended uses clear, and follow employer policies for work information.
Should I click every unsubscribe link?
No. An unsubscribe option in a newsletter you recognize can be useful, but a suspicious message may use links to lure you elsewhere. Use the provider’s spam or reporting controls when in doubt.
A simple routine to start
Secure your primary email account, review its recovery options and practice sending a low-stakes message to a trusted person. Then create a small organization system and check recipients before every sensitive send. These habits make email easier to use without turning the inbox into a full-time job.
Further reading: CISA: Recognize and report phishing; FTC: Protect your personal information. Features and terminology vary by provider.
