Your email address is the single most connected piece of information you own online. It's the key to almost every account you have — and most people hand it out dozens of times a month without a second thought. Here's why that matters, and what you can actually do about it.
Need a throwaway address right now?
Generate a temporary inbox in one click — keep your real email out of it. No sign-up.
Get a temp email →Your email is a master key
Think about what your main email address actually controls. It's the recovery route for your bank, your social media, your shopping accounts, and very likely your gaming accounts too. Anyone who gets into your inbox can trigger "forgot password" resets across your entire digital life. That makes your address far more valuable — to marketers, data brokers and attackers alike — than it first appears.
How your address ends up everywhere
Every time you sign up for a free trial, download a "free" resource, enter a competition, or create a throwaway account, your address gets added to a list somewhere. From there it spreads in ways you never agreed to:
- Sharing and selling. Many sites pass details to "partners" — which is how one sign-up turns into mail from companies you've never heard of.
- Data breaches. When a company you trusted gets hacked, your address (and often your password) ends up in dumps that circulate for years.
- Data brokers. Entire businesses exist to compile profiles of people, with your email as the anchor that ties the pieces together.
The real risks
This isn't just about an annoying inbox. A widely-circulated address means more spam and phishing, and phishing is how a huge share of account takeovers begin. If you've reused the password attached to that address, a single breach can unlock multiple accounts through credential stuffing. And the more places your address appears, the easier it is to build a profile that links your separate accounts and activity into one identity.
⚠️ Your email is often your username too. If your login is your email address and you've used that same address and password combination on multiple sites, you're one breach away from losing several accounts at once.
A simple system: three types of email address
You don't need to overhaul everything. You just need a tiered approach that matches how much you trust each type of sign-up:
Tier 1: Your real inbox
Banks, government services, your actual workplace, your GP, close contacts. This address is private, and you only give it to things you genuinely trust and need long-term access to. The goal is to keep it off most marketing lists entirely.
Tier 2: A secondary address
Shopping, subscriptions, loyalty cards, forums, apps you actually use. Set up a free Gmail, Outlook, or — better — a Proton Mail account specifically for this. Keeping it separate from your Tier 1 address means a breach of one doesn't compromise the other.
Tier 3: Temporary addresses
Free trials, one-off downloads, gated content, anything you'll only use once. A temporary email address receives the verification, you complete the sign-up, and the address disappears — taking any future marketing with it. No trail, no spam, no breach risk on that sign-up.
Checking if your address has already been breached
Visit haveibeenpwned.com — it's free and checks your address against billions of known breached records. If your address appears, change the password on any account that used that combination, prioritising anything financial, your main email, and any account that uses the same password elsewhere.
Frequently asked questions
Can I just unsubscribe from everything?
Unsubscribing works for legitimate marketing emails from companies you recognise. It doesn't help with spam from companies you've never heard of (who don't respect unsubscribes), and it can actually confirm to some spammers that your address is active. For genuinely unwanted senders, blocking or filtering is more effective than unsubscribing.
Is a temporary email actually private?
No — temp email inboxes are public by design. Anyone who knows the address can read the messages. They're useful for keeping your real address off a list, not for receiving sensitive information. Never use one for anything that matters.
What's the difference between a temp email and an email alias?
A temp email disappears after use and can't receive future mail. An email alias (like Apple's Hide My Email or SimpleLogin) forwards to your real inbox permanently — useful when you want to receive future mail from that sender but don't want to expose your real address. Both have their place depending on what you need.