Protecting your primary email address

Most people’s real address is already in dozens of databases. The goal is not to erase that history; it is to stop adding to it while keeping the accounts that matter recoverable.

Separate addresses by tier

The most effective single change is to stop using one address everywhere:

• Tier 1 — critical. Banking, payments, tax, government, medical, and your domain or hosting registrar. One address you control, with strong authentication. Never a disposable one.
• Tier 2 — accounts you keep. Shopping, subscriptions, work tools. An alias at a domain you own, or a dedicated address with a filter.
• Tier 3 — low-stakes. Trials, one-off downloads, newsletters, forums. A temporary address is exactly right here.

The point of the tiers is that a breach in tier 3 cannot reveal the address tied to tier 1.

Use aliases where you want permanence

An alias is a second address that forwards to your real inbox. It is permanent, so it works for accounts you intend to keep. It also lets you turn off forwarding for a single alias when a sender starts misbehaving — which is something you cannot do with your primary address.

Aliases and temporary addresses are complements, not substitutes. Temporary is for interactions you expect to end; an alias is for accounts you expect to keep.

Block remote images by default

Most tracking is invisible: a one-pixel image in an email reports that you opened it, when, and from which IP address. Blocking remote images by default removes that signal. If a service shows images directly from the sender, that is a design choice worth knowing about.

Do not reuse an address to “simplify”

Reusing a temporary address across several signups re-links them. If the reason you used a disposable address was to keep two things separate, reuse undoes it.

Check what a breach actually exposes

When a service you use announces a breach, what matters is which tier that address belonged to. A leaked tier-3 address costs you nothing: you abandon it and move on. A leaked tier-1 address costs you a recovery process. This is the whole argument for tiering, and it is why “one address for everything” is expensive.

Avoid the identity leaks

Small habits undo good tooling:

• Do not put your name in a custom prefix.
• Do not screenshot an inbox with the token visible.
• Do not paste an inbox link into a public channel.
• Do not leave a public share link enabled after you are done.

The realistic position

You will not remove your address from the databases that already hold it. What you can do is make sure the next ten signups do not add another copy, and that the addresses tied to things that matter are not the ones you hand out casually.

That is achievable, and it is most of the benefit.