We are used to get access to our bank accounts, social networks and much more via our e-mail adresses. For SMB and Enterprises however, email addresses are most often a targeted entry point for advanced persistent threat (APT) attacks.But how good are we at protecting our email accounts?There will always be a compromise between security and usability. Still remember times when you needed to obtain and enter all information about smtp/pop/imap servers in order to configure your email account? Now it is as simple as typing your email and password. Although you can already rely on technology that simplifies your life, it will always remain complex and sophisticated in it’s core. Therefore there is always a huge security risk when trying to implement it.In our presentation we will disclose a severe vulnerability of email clients, as well, as software services that could let an attacker access sensitive user information, sometimes even including usernames and passwords.We’ll also demonstrate how improper email client implementations leak user credentials and what software developers, server administrators and users can do to prevent it.Attendees will see a live data feed with popular email clients and which email client leaks which data. We will demo Apple iPhone wiping using above mentioned vulnerability.