Tools
A throwaway address
that receives real mail.
Take an inbox, watch it fill up live, read what lands with tracking images blocked, then let it expire. No account, no password, and nothing to unsubscribe from afterwards.
Connecting
Lease
Inbox
Reference
What you are actually holding
- Address
- Twelve characters with no vowels, so a generated one cannot spell anything. Type your own instead if you would rather. Anything works except the names a domain has to keep reachable, like postmaster and abuse.
- Token
- The address is not the credential. Taking an inbox hands this browser a signed token, and every read is checked against it. Nothing else about the lease is stored, so a lost token cannot be recovered. Anybody who knows the address can take a token for it too, but theirs only opens mail that arrives after they took it.
- Lease
- An hour to start, an hour per extension, never more than a day. When it runs out this page can no longer open the inbox. The address is not held back, so anybody can take it again and read what arrives after they do, and each message is deleted a day after it arrives.
- Limits
- No cap on the mail an inbox receives, and none on how many addresses you take. Every message that arrives is listed. The only limit is time: twenty-three extensions, and never more than a day.
Remote images are stripped out of every message before it is put on screen, so opening one here does not tell the sender you opened it. Attachments are listed by name, type and size, and nothing here downloads or opens them. Anyone can post anything to an address that has been published.
Questions this raises
This inbox is the same mail server your real one would run on.
Same delivery path, same parser, same spam scoring, same reader with the tracking images already stripped out. The only difference is the hour on the clock and the domain being ours instead of yours. Point your own domain at it and the address stops expiring.
Google Workspace