How it works

Your key

You write down a 12-word secret phrase once. Every address key is derived from it, so one phrase brings back all your addresses. There is no account and no email on file.

Open the dashboard with your phrase on any device, or save it on a device you trust. Saving is optional and locks the copy with a PIN.

An address

Each address is a locker with its own key. The server holds the public half. The private half stays with you.

Addresses are random words and digits. Nothing in an address links it to you or to your other addresses.

Mail arrives

The server checks who sent it (SPF, DKIM, DMARC), locks it with the address’s key, and keeps only the locked copy. The plain text is dropped.

The first site wins

The first site that sends a verified mail is tied to the address. Mail from anywhere else is set aside in a separate list, still locked, until you decide.

This is why one address belongs to one site. If it leaks, it leaks from there.

How long an address lasts

A free address lasts 30 days. Extend it any time to get 30 days from today. If it expires, you have 7 days to extend it. Until then the address and its mail stay, and mail that arrives is held back by the sender and tried again. After that the address and its mail are deleted.

A paid address lasts as long as your plan. When the plan ends it goes back to free.

Keeping mail

For each address you choose how long mail is kept: 1 day on the free plan, more on the paid plan. You can also have mail deleted 5 minutes after you view it. A message that is about to be deleted shows a countdown and a Keep button.

Attachments stay inside the locked message and are never shown or opened.

Opening it

Your device proves it holds the key, downloads the locked mail and opens it. Codes and links are pulled out on your device.