Core identity
Use a long-term email with strong verification.
SIGN-UP SAFETY
You don’t need to give the same real email to every website
Email isolation isn’t about putting every signup behind a disposable address. It’s about matching the address to the consequences of the account: keep a reliable recovery path for core identities, use revocable forwarding identities for ongoing relationships, and reserve temporary addresses for tasks that end today.
Ongoing relationship
One forwarding identity per site.
Short-term task
Use an address with a clear expiration.
After a breach
Migrate the account before retiring the old address.
Start by sorting accounts into three tiers
The test isn’t how well-known a site is, but what happens if you lose access to that address.
Core identity tier
Use a long-term email you control for banking, government services, work, healthcare, and primary accounts. Enable a strong password and multifactor authentication. Recovery is the priority here.
Ongoing relationship tier
Shopping, subscriptions, and communities may keep sending messages without being worth exposing your primary address. Create a separate alias for each platform so you can trace the source and pause it independently.
Short-term task tier
Trials, downloads, and one-time confirmations usually finish the same day. A temporary inbox reduces one exposure of your real email, but it should never carry an account you may need to recover later.
A pre-signup decision table
| Account impact | Recommended address | Main reason |
|---|---|---|
| Critical recovery | Long-term email | Stable control and strong verification |
| Ongoing notifications | Forwarding alias | Isolate the source and pause it when needed |
| Ends today | Temporary address | Reduce one exposure of your real email |
Will you need to recover it later?
If so, don’t use an address that will expire. Recovery messages must go to a receiving path you can control long term.
Will it keep sending notifications?
A relationship that continues sending mail but can be replaced is a good fit for an alias. If spam increases, pause only that alias without affecting other accounts.
Does the task end today?
For situations you won’t need after confirmation, use a temporary inbox and save anything essential while it’s available.
Does it involve money or identity?
For payments, identity details, or valuable assets, use a long-term email with stronger account protection.
If your email is already exposed, close the loop in order
Identify the source first
Check which address received the spam. A separate alias can point directly to the platform that may have leaked it.
Move the recovery path next
Sign in to important accounts, change the email, and confirm that the new address is active. Don’t delete the old address first, or you could get locked out of verification flows.
Retire the old identity last
Only pause or delete the old alias after confirming that no essential notifications still depend on it. For a temporary address, let it expire naturally and remove local copies.