Phishing attacks exploit human vulnerabilities to breach security defenses by either stealing a victim’s credentials or by luring a victim to give away their security details. These attacks have emerged as a primary threat, making the networked world increasingly vulnerable. The evolution of phishing from rudimentary schemes to highly targeted and sophisticated tactics can lead to operational disruptions and even catastrophic failures. In response to this threat, the paper proposes a comprehensive framework for mitigating phishing attacks on email. This includes email filtering and multi-factor authentication wherein the user’s credentials are safeguarded using a custom lightweight hash function. The security of the proposed hash function has also been analysed.