How to Safely Download Images Automatically within Outlook
If you've ever opened an email in Microsoft Outlook and noticed images didn't load automatically, that's expected behavior—and it's by design.
Microsoft Outlook, and other Microsoft email tools, block images from external senders by default to help protect your privacy and security. This setting applies across Microsoft email environments and is triggered whenever an email includes images hosted outside the University's systems, such as messages sent through platforms like Salesforce, Mailchimp, Blackbaud, or other third-party services.
If you regularly receive legitimate emails with images—such as newsletters, event announcements, or system notifications—you can allow images to load automatically from senders you trust.
When you mark a sender (or their domain) as safe in Outlook, images from that sender will load automatically every time you receive an email from them. This approach gives you the best balance of convenience and security: images load when you trust the source, while unknown senders remain blocked.
Step-by-Step Instructions:
How to Allow Automatic Image Downloads in Outlook
If you're unsure about a sender, it's safest to load images only for that specific message rather than changing your global settings. You can do this by marking specific people or organizations as "Safe." Once you do this, images from that sender will load automatically every time.
- Right-click the blocked image or the sender's address and select "Add Sender to Safe Senders List."
If you prefer to change your global settings, here is the high-level path for both Mac and PC users:
- For Mac: Full Mac Instructions Here
- Go to the Outlook menu and select Settings (or Preferences).
- Under Email, click on Reading.
- Locate the Security section to toggle your automatic download preferences.
- For PC (Windows): Full PC Instructions Here
- Click the File tab and select Options.
- Go to the Trust Center and click Trust Center Settings.
- Select Automatic Download to check or uncheck the blocking requirements.
Why Images Don't Load Automatically in Outlook
Images in email are not always just images. When content is hosted externally, loading it can expose information about you and your device. Below are a few key reasons Outlook blocks these files by default:
- Tracking and data collection: Images loaded from external web services can act as tracking pixels, letting the sender know when an email was opened and potentially capturing details such as IP address or device type.
- Malicious image files: Some file types, such as SVG graphics, can contain embedded scripts or links that may lead to phishing sites or malicious activity. Security researchers have documented increased use of SVG files in email-based phishing campaigns.
- Risky links hidden in images or QR codes: QR codes or clickable images can direct users to unsafe websites designed to steal credentials or personal information.
Blocking images by default helps reduce these risks while giving you control over what content you choose to load.
Need Help?
If you have questions about email security settings, or if you aren't sure whether a message is legitimate, the 24/7 IT Service Desk is here to help.
