Transitioning to domestic email by 2025 is set to be completed.
This legislation has been under consideration for a while. During the summer, there were talks about shifting to Russian email by the end of 2023. However, recently the State Duma made the decision and postponed its enforcement until January 1, 2025. More specifically, a law was passed prohibiting registration on domestic websites using foreign email (such as Google).
What changes will occur for internet users in a year, and why is this law necessary? Let’s explore this together with our expert, Sergey Kovalyov, the head of the information security department at AND-pro Company.
What will change now?
The extension of the deadline for transitioning to Russian email wasn’t random. It was done to give users enough time to shift towards domestic resources. For regular users, this isn’t too challenging, but for IT companies, this period is necessary. Within a year, they can adapt their information systems for user authentication and solve technical complexities.
The essence is that the law will impact not only domestic internet resources but also mobile applications. Starting January 1, 2025, authentication on websites and apps will be possible using: a Russian phone number, through State Services, the Unified Biometric System, and via email registered in Russian services (that is, services where over 50% are under Russian control). However, Sergey Kovalyov clarified that fundamentally, nothing will change:
‘Practically, nothing will change. Neither for those already registered on Russian internet resources nor for those planning to create an account on any Russian site. Old accounts won’t be disabled. Some may argue that this step is an attack on anonymity on the Web, another method of audience tracking, or playing on patriotic sentiments and, in fact, foolishness. However, by registering through foreign emails and services, you are already granting access to even more personal information than the credentials of any Russian service.’
Many users have indeed started to worry about their personal data. According to deputies of the State Duma, the primary goal of the law is to ‘enhance the security of personal data’ and ‘reduce the risks of integrating services from unfriendly countries into Russian resources.’
Moreover, many individuals have multiple email addresses. ‘Yandex’ is no less popular than Google’s services, so Russians won’t face significant inconveniences. Another registration method is through the popular social network VK, which is also used by the majority of our country’s citizens.
What about old email accounts, and will they still be needed?
As already mentioned, the law doesn’t prohibit using foreign email, and existing accounts will remain unaffected. What to do with old email? Nothing new—just keep using it!
Furthermore, resources often require backup email for communication, and that’s exactly where foreign emails can be used without any issues. In other words, the main thing is to create a new account according to the new rules, but any additional data can be left at your discretion.
Regarding large companies, they also need not worry about their old foreign resources. They can serve as insurance and reserves for the future.
For authorization on websites and in applications starting January 1, 2025, an email registered in Russian services will be required.
Why do we need such a law?
First and foremost, this law is about data security. We are talking about account data no longer leaving the country. They will stay within our borders.
‘Any information is a certain amount of money. If you make purchases online and/or search for goods or services and leave the address of a foreign mail service for feedback, the service’s databases will be enriched with your preferences. What you’re looking for, what interests you, when you use information network resources, how many hours a week you spend online, etc. Believe me, even if postal service employees don’t personally read your correspondence, a robot ‘reads’ it. It analyzes, accumulates, catalogs, anonymizes by replacing Ivanov I.I. with IDxxxxxxxx, but nevertheless, the information about this IDxxxxxxxx will be commercialized later. Place an order for a TV, and for a month, you’ll be bombarded with advertisements from electronics stores and streaming services,’ added Sergey Kovalyov.
The second goal of the law is not to suddenly lose access to Russian sites. Sergey explained that the owner of a foreign service can cut off all accounts belonging to Russian users at any moment. Some may think this is unrealistic, but practice shows it’s entirely possible.
And it’s not just about ordinary people accepting the service’s conditions ‘as is’ on a free basis, but also about commercial users who have already paid for certain services. So, the problem is not that it’s impossible to make a payment, but that already paid-for services will become unavailable, and accounts will be blocked.
‘For example, a data leak occurs, and you need to change your password. The link to change the password will be sent to an email to which you have no access. Also, electronic receipts, discount coupons, and other necessary information. Some are afraid that Russian services are less reliable, and news of database breaches here and there pops up? No, only Russian services are hacked. The same Amazon, Walmart, Apple, BMW, Goldman Sachs, Microsoft, and about 2000 other world’s largest companies were hacked. And this is just for 2022 and 2023. Based on the ‘national’ attribute, someone hacks services only by order. In reality, the largest services with the maximum user data are the ones primarily hacked, which can then be easily sold. In case of a breach, the service administration will be primarily concerned with restoring data of fellow citizens. All foreign users will have the lowest priority,’ explained the head of the information security department at AND-pr.
In Sergey’s opinion, there is also a third goal—to minimize population manipulation. Suppose you were looking for a heart medication, and then you come across articles and videos stating that in Western countries, the population has fewer heart problems, they live happier lives, and it’s time to change something.
‘Let it seem funny, and no one will engage in such nonsense—unfortunately, they will. Internet resources of the media have already proven their worth as a “revolutionary platform.” No need for overt agitation and sending agents—waves of dissatisfaction can be raised by the efforts of the population of another country pursuing its interests. It’s not fast, not a couple of years. But in the long term, with 15-20 years of targeted pumping, significant shifts in public consciousness can be achieved,’ concluded Kovalyov.
Thus, before criticizing the new law, it’s worth considering: what will change for you? Essentially, nothing. In reality, many Russian users have domestic email addresses and accounts, so the new law won’t complicate life. You just need to understand it, and we’ve helped you with that.
by Vitaly Bogdanov