Guide · 9 min read

Aliases vs Temp Mail: Addresses You Keep, Not Burn

Temp mail is the right tool for a one-off download and the wrong one for anything with a login. Where the line sits, and why we block throwaways too.

YeyMail Team ·

There is a version of this question with an easy answer. You need an address to get one PDF from one site you will never visit again, and you want no relationship with them afterwards. Temp mail is built for exactly that, it costs nothing, and it takes about four seconds.

There is also a version with a harder answer, and most people arrive at it by accident. They used a throwaway for something that turned out to matter, the address evaporated on schedule, and months later a password reset went to a mailbox that no longer existed.

This page is about where the line between those two sits. It is not an argument that one tool is bad. Temp mail and email aliases solve adjacent problems and they fail in completely different ways, and knowing which failure you can live with is most of the decision.

What temp mail actually is

A temp mail service hands you an address without asking for anything. You open a page, an address is already generated, and mail sent to it appears in a web inbox on that same page. There is no account, no password and no recovery. The address and the mailbox are the same object, and both are designed to go away.

The details vary more than people expect. Guerrilla Mail's about page says the current version keeps all incoming email for one hour, and that its addresses never expire, so the address outlives the mail rather than the other way round. Temp-Mail's help pages say messages are stored for one day on the free plan and up to 30 days with a premium subscription. Mailinator's public system auto-deletes after a few hours. The advertised lifetime is a product decision at each service, not a property of the category, and it is worth reading the page rather than assuming ten minutes.

The privacy model varies too, and it is usually weaker than the word private would suggest. Mailinator's documentation for public mailboxes is blunt about it: all inboxes and emails are in the public domain, readable and deletable by anyone. Its FAQ repeats that any person can read them and that you should not expect privacy. Guerrilla Mail says anyone who knows your inbox ID may access your inbox. Neither of these is a defect. It is the design, and both services say so on the tin.

Which makes the honest case for temp mail easy to state. It is the right tool when the mail has no value to you after you have read it and no value to anyone else at all. A whitepaper behind a form. A forum you are posting to once. A voucher code. Checking that your own signup flow sends the email it is supposed to send. In each of those the evaporation is the feature. You are not trying to manage a boundary with the sender, you are trying to have no relationship with them, and a service that forgets you within the hour does that better than anything you would have to remember to clean up later.

It is also free and instant, and it needs no account at all. Several alias services have free tiers of their own, set out in the alias service comparison, but every one of them starts with a signup, and ours is paid. Any fair comparison starts there.

Why sites block disposable domains

Blocking throwaway addresses at signup is ordinary practice, and the tooling for it is public and cheap to adopt. The disposable-email-domains project on GitHub is one of the widely used lists, describing itself as a list of disposable and temporary email address domains often used to register dummy users in order to spam or abuse some services. PyPI wrote in June 2024 that prohibiting known throwaway domains from creating accounts was one of the most impactful mechanisms it had, using that public list alongside an internal one. Commercial vendors sell the same capability as a subscription; IPQualityScore says high risk domains are added to its disposable email blacklists every hour.

Two things follow from that. The first is that a rejection at signup is not a malfunction of the temp mail service. It is the other side of the transaction working as designed, and it will keep happening on anything involving payment, trials, reviews or reputation.

The second is that these lists are approximate by construction. The GitHub project says outright that it cannot guarantee every entry can still be considered disposable, only that the domains were disposable at some point, and a removal is a pull request you have to open with reasons attached. Because the underlying judgement is really "does this look like a throwaway", ordinary alias domains sometimes end up caught in the same net, which is a separate and more irritating problem covered in when a site rejects your alias.

We block disposable domains at our own signup

This is the part where it would be easy to be selective, so here it is plainly. YeyMail blocks disposable email domains at signup, using the same kind of list, for the same reasons as every site in the section above.

The reasoning is not more principled than theirs. An account whose only contact address expires within the hour cannot be recovered, cannot be warned that a card has failed, and cannot be reached when something goes wrong with mail delivery. A free trial that asks for no card is also precisely the thing throwaway addresses get used to farm, and the cost of that ends up on the people who pay. So we do what they do.

That has a real cost and it is worth naming rather than dressing up. If your only address today is a throwaway, you cannot open an account with us, and the reasoning does not make it less annoying in the moment. It is the same trade-off you have just been reading about from the other side, and selling privacy does not exempt us from it. A service built on addresses that are meant to last has the same reasons as anyone else for not wanting addresses that are meant to vanish pointed at it.

The password reset trap

The concrete harm from a throwaway is almost never the moment you use one. It arrives much later, and by then the cause is hard to see.

You sign up somewhere with a temp address and it works. The account becomes real: an order history, a saved card, a subscription, a review with your name on it. Then the address expires, and nothing appears to break, because nothing is being sent to it. The failure is silent, and it stays silent until the day you need to reset the password and the reset goes to a mailbox that has not existed since the spring.

On many services that is the end of the account. Recovery flows are built on email, and everything else is an exception. Support can sometimes help if you can prove ownership another way, with a receipt or a card or a phone number already on file, and often they cannot, because proving ownership without the email is exactly what an attacker would also be attempting.

There is a sharper version of this. Where inboxes are public and the names are reusable, the address does not merely stop working, it becomes available to somebody else. Mailinator states that its public inboxes are readable by anyone, and Guerrilla Mail states that anyone who knows the inbox ID may access it. If an old account of yours is still pointed at a name on a domain like that, whoever types the name in can request a password reset and read it. That is the whole reason a throwaway is fine for a download and wrong for anything with a login attached. If you are auditing which of your accounts are exposed this way, email aliases and password managers covers how to work through the list.

What an alias keeps

An alias is a permanent address that forwards to the inbox you already use, explained at more length in what is an email alias. It hides your real address the way a temp address does, and then it keeps four things a temp address gives up.

  • Permanence. The address still resolves in three years, so account recovery still works, so the account is still yours.
  • Replies. Mail can be answered from the same address with no setup, because the reply address is rewritten on every forward, so an alias works for correspondence and not only for confirmation emails. The documented exception is reply all: the other people on the thread are ordinary addresses in your mail app, so replies to them go out from your real account.
  • Ownership. There is an account behind it. Nobody else can claim the name, and the mail lands in your inbox rather than on a page anyone can open.
  • Attribution. One alias per site means the next unexpected sender identifies who leaked or sold you, which is impossible when the address is shared or already gone.

That last point is also the argument against the usual middle path of one spare Gmail account for everything untrusted, which is covered separately in why a second email account will not save you.

The off switch replaces the burn

The appeal of a burner is the burning. But the thing you actually want is not for the address to cease to exist. It is for the mail to stop. Expiry is simply the crudest way of arranging that, and it takes your account recovery with it as a side effect.

An alias gives you the second thing without the first. Switch the alias off and the mail stops arriving, while the address stays registered to you, so nobody else can pick it up and so you can switch it back on if it turns out the sender had something you needed. It is an editable decision rather than a one way door.

How the off state is implemented matters more than it sounds. A disabled alias can refuse the message during the SMTP conversation, in which case the sending server is told the address does not accept mail and the sender gets a delivery failure. Or it can accept the message and quietly discard it, in which case the sender believes it arrived. Both of them stop the mail reaching you, and the trade-off runs both ways. Refusing at SMTP time tells the person on the other end that nothing arrived, which matters when the sender is a bank, a doctor's surgery or a small business that would otherwise keep writing into nothing, but it also tells anyone probing your addresses which ones are still live. Silently discarding reveals nothing to a prober, at the cost of leaving a genuine sender believing the message landed. Neither is wrong; they optimise for different senders, and it is worth knowing which one your service does before you rely on it.

Side by side

DimensionTemp mailAlias
Cost and setupFree, no account, instantFree tiers exist, account needed
Address lifetimeHours to days, varies by servicePermanent until you delete it
Who can read the mailSometimes anyone who knows the nameYour own inbox
ReplyingRarely, and not as a real threadYes, except reply all, which leaves from your real account
Account recoveryBreaks when the address goesKeeps working
Accepted at signupOften blockedUsually accepted, occasionally not
One-off download or a forum postEither is fineEither is fine

The last row is the honest end of it. For a genuine one-off, the two tools are interchangeable and the free one wins on effort. The distinction only starts to pay when the address is attached to something you would mind losing, and the trouble is that you rarely know at signup which of the two you are doing.

The YeyMail takeaway
If you want addresses that stay

YeyMail is an alias service built on the assumption that you keep the address rather than burn it. Aliases forward to the inbox you already use, and replying needs no setup because the reply address is rewritten on every forward. The documented exception is reply all, since the other people on the thread are ordinary addresses in your mail app and replies to them go out from your real account. Starting new conversations from an alias uses per-alias SMTP on port 587, at 100 a day on Starter and unlimited on Plus. The kill switch is the replacement for burning an address. It refuses mail during the SMTP conversation with a no such address response, so the sender gets a rejection rather than having the message accepted and dropped. Nothing is queued or filtered. It is never paywalled and it keeps working after you cancel. Starter is $0.99 a month or $9.48 a year, Plus is $4.99 a month or $47.88 a year, and there is no free tier. There is a free 7-day trial that takes no card, with the Starter feature set on lighter limits: 25 shared-domain aliases, one custom domain, and at most 20 forwarded messages a day, with webhooks, catch-all and shared aliases switched off for the duration. Aliases are truly unlimited only on domains you own. On the shared yeymail.com domain the ceiling is 500 on Starter and 5,000 on Plus, counting every address ever created there including the ones you have deleted. If you stop paying, nothing is deleted. Shared-domain aliases keep forwarding up to 20 messages a day indefinitely, you cannot create new ones, custom domains pause so senders get delivery failures, and replies drop to zero. And as above, we block disposable email domains at signup, so you will need a real address to open the account.

Start free — one alias per signup7-day trial · No credit card

Sources

Common questions

Is temp mail safe to use?

It is safe for what it is designed to do, which is receive one message you do not care about. It is not private in the ordinary sense: Mailinator's documentation states that its public inboxes are readable by anyone, and Guerrilla Mail states that anyone who knows your inbox ID may access it. Treat anything sent to a temp address as readable by strangers, and never send anything to one that you would mind being read.

Can I use a temp mail address for an account I want to keep?

You can create the account, but you should assume you will lose it. Password resets and account recovery run on email, so when the address expires the recovery path expires with it, and you usually find out months later at the worst possible moment. Where the inbox name can be reused by someone else, it is worse than losing access, because the next person to take the name can request the reset themselves.

Why did a site reject my alias when it is not a temp mail address?

Blocklists work by pattern and by domain reputation, and they are approximate. The widely used disposable-email-domains list says it cannot guarantee every entry still counts as disposable, and forwarding domains sometimes get swept in alongside genuine throwaways. Using an alias on a domain you own helps, because your own domain is not on the published throwaway lists, though it is no guarantee, since some checks also score domain age and reputation and a freshly registered domain has neither.

If aliases are permanent, what replaces burning an address?

Switching the alias off. The mail stops arriving, but the address stays registered to you, so nobody else can claim it and you can turn it back on if you need to. Check how your provider implements the off state: refusing during the SMTP conversation tells the sender the message did not get through, whereas accepting and silently discarding leaves them believing it arrived.

Do you block disposable email domains at your own signup?

Yes. We use the same kind of blocklist as the sites described in this post, for the same fraud and recoverability reasons. An account whose only contact address expires within the hour cannot be recovered or warned about a billing problem, and a trial that asks for no card is an obvious target for throwaway signups. The cost is that someone whose only address is a throwaway cannot register with us.

Is one spare free inbox a reasonable middle ground?

It solves less than it looks. A single spare account still mixes every sender together, so you cannot tell which service leaked your address when spam starts, and you cannot cut off one sender without disrupting the rest. It also concentrates risk, because one breach of that inbox exposes everything you routed through it.

Keep reading

Guide
What Is an Email Alias? A Plain-English Guide
Troubleshooting
When a Website Rejects Your Email Alias: Why, and the Fix
Guide
Why a Second Email Account Will Not Save You