Email aliases and disposable email addresses both hide your real address, but they do different jobs. Use an alias when you want the sender to be able to reach you for years without learning your real address, and a disposable inbox when you want one message now and nothing after that. An alias is a forwarding label: mail sent to it lands in your ordinary mailbox. A disposable inbox is a separate mailbox hosted by someone else, which holds the message for a while and then stops existing.
That single structural difference decides every practical question about them: replies, lifespan, recovery, and which sites will accept them.
The real difference is where the mail lands
Both tools stop a company from seeing yourname@gmail.com. What happens next is not the same at all.
With an alias, the mail is yours. It travels through the alias provider and lands in your inbox, so you can reply (the provider rewrites the reply so it appears to come from the alias), search it in three years, and notice if something arrives from a sender you had forgotten about. The cost is that the relationship is permanent until you cancel it, and that someone now holds a mapping between the alias and your real address.
With a disposable inbox, the mail is not yours and never was. It sits on the provider's server, you read it in a browser, and when the address expires the mailbox and its contents go with it. Nothing is forwarded, nothing is stored on your side, and there is no mapping to your real address because you never supplied one. The cost is that you have no way back: no replies that arrive anywhere you will see later, no password reset in six months, no proof of purchase.
| Email alias | Disposable email | |
|---|---|---|
| Where mail lands | Your own inbox, forwarded | A separate inbox on the provider's server |
| Lifespan | Until you switch it off | Minutes to hours, then gone |
| Replies | Yes, rewritten to come from the alias | No; the inbox is receive-only |
| Revocation | Disable the alias; mail to it bounces or is discarded | Automatic at expiry; nothing to switch off |
| Password resets later | Yes | No |
| Who holds your real address | The alias provider | Nobody |
| Accepted by signup forms | Mostly, except some known alias domains | Often blocked by disposable-domain lists |
The four options, concretely
Plus-addressing (free, already in your account)
Gmail, Outlook, Proton, Fastmail and most other providers deliver mail sent to yourname+shop@example.com straight to yourname@example.com. Nothing to set up: invent the tag at the moment you type it, then filter on it later. It is genuinely useful for sorting mail and for finding out who leaked an address, because the tag you used travels with the leak.
It is not a privacy measure. Your real address is sitting in plain sight on the left of the plus sign, and stripping the tag is one line of code that bulk-mail tools have been doing for years. A fair number of signup forms also reject the + character outright. Treat plus-addressing as labelling, not hiding; our guide to Gmail plus addressing covers what it is good for.
Apple Hide My Email
When you use Sign in with Apple, you are offered a random @icloud.com address that forwards to whatever address is on your Apple account. With a paid iCloud+ subscription you can also generate these addresses on demand for forms that have no Apple button at all. Replies work, each address can be labelled and switched off individually, and the whole thing is managed in system settings.
The limits are the obvious ones: it ties your aliases to an Apple account you presumably intend to keep, and it is comfortable only inside Apple's ecosystem. If you later leave, the addresses leave with you.
Dedicated alias services
SimpleLogin, Addy.io and Firefox Relay all do one job: generate an address, forward it, let you reply through it, let you disable it. The paid tiers add unlimited aliases and, the feature that actually matters, aliases on a domain you own, which means nobody can tell your addresses are aliases and you can move providers without losing them. Several of these projects are open source and can be self-hosted if you want the mapping on your own machine.
This is the right tool for accounts you intend to keep: a bank, an airline, a utility, a shop you reorder from. You get a distinct address per company, which contains any future leak to that one company, and you still get the mail forever.
Disposable inboxes
A disposable inbox gives you an address and a readable mailbox with no account, no password and no forwarding. You open a page, the address already exists, and mail sent to it appears in front of you within seconds. It is the only one of the four that holds the message somewhere other than your own mailbox, and the only one that disappears on its own.
That makes it right for a specific and very common situation: a site demands an email address, you want the one thing behind the confirmation link, and you have no intention of hearing from them again. A download, a PDF gated behind a form, a forum you will post in twice, a one-off discount code, a wifi portal. Our comparison of temp mail, VPNs and aliases goes further into what each of those actually conceals.
Which one for which job?
| Use case | Alias | Disposable | Real address |
|---|---|---|---|
| Bank, payroll, tax, insurance, domain registrar | Only on a domain you own | Never | Yes |
| Shops, airlines, subscriptions you will use again | Yes | No | Works, but leaks |
| Free trial that might become a paid account | Yes | Only if you will never keep it | Works, but leaks |
| One confirmation link in the next two minutes | Overkill | Yes | No |
| Gated download, wifi portal, one-off discount code | Overkill | Yes | No |
| Testing your own signup emails | No | Yes, one per test run | Never |
| Forum or marketplace where people must reply to you | Yes | No; replies have nowhere to go | Works |
| A form you suspect exists only to harvest addresses | No | Yes | Never |
Worked example: an alias for a shop you reorder from
In SimpleLogin, Addy.io or Relay, create a new alias, name it after the shop, and paste it into the signup form. Order confirmations and delivery notices forward to your real inbox. When you need to query an order, reply from your own mail client: the service turns your reply into one that appears to come from the alias, so the shop still never sees your real address. If the shop later sells its list, disable that one alias in the provider's dashboard and the spam stops the same day, while every other alias keeps working.
Worked example: a disposable inbox for a gated PDF
Open the MailboxTemp homepage; an address already exists on the page. Copy it into the download form and submit. The confirmation arrives in the inbox below the address, usually within seconds, with any one-time code already picked out; click the link, save the PDF, and close the tab. Sixty minutes after the address was created it stops accepting mail and its contents are deleted. You never typed a real address, so there is nothing to disable, nothing to unsubscribe from, and nothing for the publisher to sell.
Worked example: your real address, with a label
For a bank or a registrar, use your real address but make it findable: sign up as yourname+acmebank@example.com, then in Gmail choose Show search options, put the plus address in the To field and create a filter that labels matching mail. Recovery emails, statements and fraud alerts all reach the one mailbox you guard most carefully, and the label tells you instantly if the bank's address ends up somewhere it should not.
Where does each one break?
Aliases break on the mapping. Someone (Apple, SimpleLogin, Mozilla, or you if you self-host) holds a record linking the alias to your real address, and that record is a target. They also break quietly: an alias forwards for years, so a list sold in 2029 still reaches you unless you remember to turn the alias off, and most people never do.
Disposable inboxes break on permanence and on secrecy. Once the address expires, the mail is gone and no support ticket will bring it back; we wrote about why a temp mail cannot be recovered because people ask after the fact. On most services the address is also reachable by anyone who types it, so a confirmation code sitting in one is not private for as long as it exists. That is a reason to use them for throwaway signups and not for anything you would mind a stranger reading; the trade-offs are laid out in what a disposable address can and cannot protect.
Both break on rejection. Plenty of sites maintain blocklists of disposable domains, and a growing number also block the better-known alias providers. An alias on your own domain is the only version of this that is effectively unblockable, which is one more argument for paying for a custom domain if you are going to rely on aliases at all.
The bottom line: most people should use both
The two tools are not competing for the same signups. Sort by one question: will I ever need mail from this sender again? If yes, an alias, because you want delivery to keep working and you want to be able to reply. If no, a disposable inbox, because the best way to not be on a list in two years is to have handed over an address that stopped existing.
A reasonable setup is three layers:
- Your real address for the handful of accounts that are effectively identity documents.
- Aliases on a domain you own for the few dozen companies you deal with repeatedly.
- A disposable inbox for everything else.
The third layer absorbs most of the volume, and it is the one that needs no maintenance at all.
Sources
- Apple Support: How to use Hide My Email with Sign in with Apple.
- SimpleLogin documentation, including how replies are sent through an alias.
- Gmail Help: Create rules to filter your emails, the filter steps used in the third example.
- Fastmail Help: Plus addressing and subdomain addressing.
- Proton Support: Addresses and aliases.
- RFC 5233, Sieve Email Filtering: Subaddress Extension, the standard describing how the part after the separator in a plus address is handled.