Leaks, DMs and The Case For a Private Email

Every creative scene runs on messages. A verse gets sent as a voice note at two in the morning. A lookbook goes out as a transfer link with no password on it. A manager forwards a contract as a photo of a screen, because that was faster than finding a scanner. The work moves quickly because it has to, and the admin catches up later (if it catches up at all, let's be honest).

It's fine until something leaks and your unreleased track turns up on a Discord server three weeks before the drop, or a set of raw images lands on a forum. The material passed through a dozen inboxes and group chats, several of them belonging to people who left the project months ago, and one of those accounts had a password that had been sitting in a breach dump since 2019.

Creative work leaves a paper trail

Creating generates documents. Splits, licences, invoices, release forms, sample clearances, and the message where somebody agreed to a percentage that nobody wrote down properly afterwards.

Designers tend to understand this better than most. Speaking to New Wave, Hana Yagi described the irreversible nature of making, the way a sheet of metal cannot be whole again once it has been cut. Your correspondence behaves the same way. Once a file has been sent, you no longer control where it travels, and the only part still under your influence is the account it left from.

What actually goes wrong

The threat is rarely sophisticated. Ofcom's research into people's experiences of using online services tracks how routinely UK internet users encounter scams and phishing, and creatives make an obvious target because their inboxes are public by necessity. You want promoters, labels and press to reach you. So does everybody else.

A convincing note from a fake booking agent. A sync opportunity that does not exist. A festival application form hosted on a domain one character off the real one. One click, one reused password, and somebody now has your sent folder.

Why a private email is worth the switch

Separating your working correspondence from the address in your Instagram bio is the cheapest thing you can do for your own security. A dedicated private email for contracts, masters and anything financial means a compromised public-facing account does not hand over the business side at the same time.

It also makes handovers easier. When a project ends you can pass across one clean folder, rather than trawling five years of personal messages for the files a label needs by Friday.

Security habits that beat tools

Turn on two-factor authentication for the account that matters most, today, before you finish reading this. Stop sending finals through channels you cannot revoke. Give collaborators access rather than copies wherever the platform allows it. Take ten minutes when a project wraps to work out who still holds keys to what.

None of this is glamorous and none of it will make you better at what you do. It just means that when the work finally lands, the story people tell about it is the work itself.