Bring Your Own Device (BYOD) is now the norm. Employees check work email on personal phones, tablets and home laptops because it’s convenient, and businesses save on hardware. But every personal device that touches company email is a device your IT team doesn’t fully control.
The BYOD risks
- Weak device security. Personal phones may have no lock screen, outdated software or risky apps.
- Lost and stolen devices. A misplaced phone can expose an entire mailbox.
- Shared devices. Family members may use the same tablet or laptop.
- Data leakage. Attachments end up in personal cloud storage, messaging apps or photo galleries.
- Leavers. When employees leave, company email may remain on their personal devices.
Why server-side protection is essential
You can’t inspect every personal phone, so security has to start before email reaches the device. When spam, phishing and malware are filtered on the server, every device is protected equally, whether it’s a new company laptop or a three-year-old personal phone.
Building a BYOD email policy
A clear, simple policy sets expectations for everyone. Include:
1. Minimum device requirements: screen lock, current operating system, no jailbroken or rooted phones.
2. Approved apps: use the company’s approved email app.
3. Authentication: two-factor authentication is mandatory.
4. Data handling: no forwarding company email to personal accounts; no storing confidential files in personal clouds.
5. Lost devices: report within a set time, such as one hour.
6. Leaving the company: access is revoked and company data removed from personal devices.
7. Privacy: be clear about what the company can and can’t see on personal devices.
Technical controls that help
- Two-factor authentication so only the real user can sign in, even on a new device.
- Country-based login restrictions to block access from unexpected regions.
- Centralised account control so administrators can reset passwords and revoke access instantly.
- A dedicated secure email app that keeps business mail separate and consistent.
Balancing security and privacy
Employees are rightly protective of their personal phones. Focus controls on the email account rather than the whole device wherever possible. Explaining that the goal is to protect company and client data, not to monitor personal lives, builds trust and cooperation.
Offboarding checklist
When someone leaves:
1. Disable or reassign their mailbox.
2. Change shared passwords they knew.
3. Revoke active sessions and app access.
4. Confirm company data has been removed from personal devices.
How Smardove supports BYOD
Smardove protects every mailbox on the server with SpamFoo AI antispam, AI classification and virus scanning, so personal devices get the same protection as company ones. Two-factor authentication and country-based login restrictions secure every login, administrators can manage accounts centrally, and the Smardove app gives staff a dedicated, secure way to read work email on Android and iOS.
| Make BYOD safe for your business. Contact Smardove to secure business email on every device. |
