Burner Email: What It Is and Whether It’s Traceable

A “burner email” is an address you give to one signup instead of your main one, so you can walk away from it later. The term covers three things: a temp inbox on a website such as Mailinator or YOPmail, a second free account you rarely check, and an alias you create for one service and switch off when you’re done with it. For that last kind, CatchNone gives each signup its own address that lasts until you delete it and keeps its mail out of your main inbox, on iPhone, iPad, and Mac.

They differ in who can read the mail and how long the address lasts. The short version: some temp inboxes can be opened by anyone who types the address, none of these options makes you untraceable, many sites refuse known temp-mail domains, and a temp address is a poor fit for any account you’ll keep. If the inbox disappears, you can’t get a reset link; if it’s public, anyone who opens it can. This guide is about email addresses, not the phone-number apps that share the name.

Temp, throwaway, disposable, alias: what the terms mean

So what is a throwaway email address? Where services use the word, it usually means a temp inbox. YOPmail lists “throw-away address” among the names for services like its own, and Clerk’s developer documentation calls disposable addresses “throwaway inboxes.” Some people mean a second account instead.

The word echoes the prepaid “burner phone”, which Merriam-Webster describes as “usually intended to be disposed of after use.” The dictionary has no entry for the email version, so every site uses the word its own way: temp-mail sites for inboxes that last minutes or days, alias services for addresses that last until you retire them. If aliases are new to you, start with what an email alias is and how it works.

Is temp mail safe, and who else can read the inbox?

For a one-off message with nothing personal in it, usually yes. For anything with your name, a delivery address, order details, or a sign-in link, no: on a public inbox, whoever opens it next sees the same message.

Temp inboxes work in one of two ways. Name-based services let you type any name and open that inbox, with no password. Session-based services give your browser a random address and tie the inbox to that browser. The name-based kind is public by design, and the services say so themselves.

According to each service’s own documentation, as of September 2026:

Another popular service, temp-mail.io, tells you not to use temp mail for important email such as your bank account, “because other people can see this message (if you don’t delete it).” Maildrop says that even if you watch the inbox yourself, “it is extremely likely that someone else could be watching that inbox as well.”

For a service not listed here, check its FAQ for the same three things: whether an inbox has a password, how long mail stays, and whether the address can be opened again later.

Can temp mail be traced back to you?

Yes, in several ways. A temp address keeps your main inbox out of the signup. It does nothing about your connection, and what you do with the address leaves a trail.

1. The site you sign up to sees your IP address and device, whatever address you type. Google’s privacy policy, for example, lists IP address among the details it collects when you use its services.
2. The temp-mail service sees your connection too. Maildrop says “all email and web connections to Maildrop are logged.” YOPmail’s privacy policy lists your IP address among the data it collects and says it may disclose personal data “if required to do so by law.” Mailinator says it doesn’t store IP addresses, then adds that “this could change if law enforcement compels it.” The inbox pages can carry third-party trackers as well: Guerrilla Mail says its site uses Google Analytics and Google AdSense cookies, and YOPmail’s policy lists “beacons, tags, and scripts.”
3. The sender, through remote images. A tracking pixel can tell the sender when a message was opened and from which IP address, which is what Apple’s Mail Privacy Protection is built to stop. Whether a web temp inbox loads remote images depends on the service. More in what email pixel tracking reveals.
4. Anyone else reading a public inbox sees whatever the site sent: your username, an order, or a link that signs you in.
5. Anything you send. Each mail server that accepts a message adds a Received line that should include the IP address it came from, and later servers must not change or delete it (RFC 5321, section 4.4). Guerrilla Mail’s terms say it adds an X-Originating-IP header with your own IP address to mail sent from it.

Aliases can be traced too. The alias service knows which real address sits behind each alias, and it answers legal requests: Apple’s US legal process guidelines say basic customer information for Hide My Email “can be obtained with a subpoena or greater legal process.” An alias keeps your address from the sites you sign up to, not from the service that runs it.

Why sites block temp-mail addresses

Because it’s easy and it cuts abuse. The open-source disposable-email-domains list had 8,971 domains on September 25, 2026, including mailinator.com, maildrop.cc, yopmail.com, guerrillamail.com, sharklasers.com, 10minutemail.com, temp-mail.org, and emailondeck.com. Any site can use it.

• PyPI, the Python Package Index, blocks registrations from domains on that list and calls it “one of the most impactful mechanisms” it has against abuse.
• Clerk, a sign-in service many apps are built on, gives developers one setting that blocks “all addresses that are known to be disposable,” and another that blocks a second signup that only adds a +tag to an address already registered.
• Temp-mail services keep adding domains to stay ahead. YOPmail says “a new domain name is added every day,” and temp-mail.io rotates domains “to avoid blacklisting.” So an address that worked last month may be refused now, or stop receiving mail.

Alias domains such as duck.com, mozmail.com, simplelogin.com, and privaterelay.appleid.com weren’t on the list that day. But it’s one list among many. Mozilla’s Relay FAQ says some sites won’t accept an address with a subdomain, and others accept only Gmail, Hotmail, or Yahoo.

Temp mail on Instagram and Facebook

It may get through at signup, but it’s a poor choice for an account you want to keep. Meta doesn’t publish a list of email domains it refuses, so no one outside Meta can tell you which temp addresses will work. Facebook’s Terms ask you to “provide accurate information about yourself” and to “create only one account (your own).” And even when a temp address gets through, the confirmation code and every later security email go to it, so use an address you’ll still be able to open.

What happens if you need to reset the password?

One of two things, depending on how the inbox works.

• You’re locked out. A session-based address such as EmailOnDeck’s usually lasts most of a day, and once it’s gone, so is the only way to receive a reset link. EmailOnDeck’s own FAQ warns that if you forget your password a year later, “you will no longer have access to your temporary email address,” which can make the site hard or impossible to get back into. A temp domain that has been rotated out can do the same.
• Someone else gets in. Name-based public addresses never go away. Mailinator says “every possible address @mailinator.com already exists,” YOPmail inboxes “are never deleted,” and Guerrilla Mail addresses “never expire.” Anyone who knows or guesses the address can open that inbox, so they can also ask the site for a password reset and read the link. Short or common names are the easiest to guess. If the account holds a saved card or your messages, someone else can take it over.

Google’s advice for recovery addresses applies to any account: choose one “you use regularly.” If you might ever sign in again, use an address that only you can open and that will still exist.

Temp mail for verification codes: what works

For a one-time code on a site you won’t visit again, a temp inbox works, as long as the site accepts it.

1. Open a session-based inbox (EmailOnDeck is one), or pick a long random name on a name-based service. Guerrilla Mail’s own advice is that “it’s best to use a random address.”
2. Paste the address into the site and request the code.
3. Keep the tab open until the code arrives. Closing the browser or clearing cookies can lose a session inbox.
4. If the site refuses the address, it’s probably using a blocklist. Switch to an alias rather than trying one temp domain after another.

Don’t use a temp inbox for a code that protects an account you’ll keep.

Is there temp mail that doesn’t expire?

Yes, but only the public kind. On Mailinator, YOPmail, and Guerrilla Mail an address never expires, and neither does everyone else’s access to it: that’s the takeover problem above.

If you want an address that lasts and stays private, the answer isn’t temp mail at all. It’s an alias, which is what a “permanent disposable email” really is: it lasts until you switch it off. As of September 2026:

• CatchNone keeps each alias’s mail in its own app on iPhone, iPad, and Mac, badged with the alias it reached. Nothing is forwarded, so there’s no forwarding to break. @catchnone.com addresses need Premium and no domain, DNS, or mailbox; on a domain you own, the Free plan includes up to 10 aliases, and Lite and Premium have no limit.
• DuckDuckGo Email Protection is free and creates @duck.com addresses on the fly that forward to your inbox, removing several kinds of hidden trackers on the way.
• SimpleLogin’s Free plan has 10 aliases and lets you reply from them. Premium, with unlimited aliases, is $36 a year or $4 billed monthly (pricing).
• Proton Pass includes 10 aliases with Proton Free.
• addy.io’s Free plan has unlimited standard aliases, 10 active shared-domain aliases, and a 10 MB monthly bandwidth limit. Replying and sending from an alias are paid-only.
• Firefox Relay’s free tier allows up to 50 masks under Mozilla’s subscription terms, though Relay’s own plan table still says 5.
• Apple’s Hide My Email is part of iCloud+, which starts at $0.99 a month in the US.

Two more options cost nothing. A plus address at your current provider, such as jane+shopping@example.com, lasts as long as your account, but anyone can delete the tag to find your real address, and some sites refuse the +. A second account keeps a whole area of your life apart, with its own password; see how many email accounts you should have. For the alias services side by side, see email alias services compared.

Temp inbox, alias, or second account: which to use

For shops and newsletters in particular, see what to use as a junk email address. For other situations, from public profiles to domain records, see how to hide your email address.

When a temp inbox is the right tool

When three things are true: you’ll never need to sign in again, nothing sent there identifies you, and the site accepts the address. A one-off download and a forum thread you want to read once are good examples. Otherwise an alias costs little or nothing and is far less likely to lock you out.

Where CatchNone fits

CatchNone gives each signup an address of its own that lasts until you delete it. Unlike a temp inbox, only you can read its mail, in its own app, away from your main inbox. Every message shows the alias it reached, so a leaked or sold address shows up, and remote images, including most tracking pixels, stay blocked until you load them. With Premium, the service assigns random @catchnone.com addresses such as abcde-12345@catchnone.com, with no domain, DNS, or mailbox to set up. Switch one off and senders get a bounce; delete one and it’s never given to anyone else. On a domain you already own, the Free plan includes up to 10 aliases, and Lite and Premium have no limit. Download CatchNone, available for iPhone, iPad, and Mac.

CatchNone is receive-only, so signup mail stays in its own app and you answer from your usual account. It checks for mail when you open it and sends no notifications. It doesn’t make you anonymous: a @catchnone.com account is tied to your App Store subscription, and CatchNone’s service on Cloudflare keeps its mail for 30 days. If Premium ends, new mail to those addresses is deleted on arrival until you subscribe again and open the app, so keep bank and account-recovery mail on your real address or a domain you own.

FAQ

Does temp mail delete itself?

The messages usually do; the address often doesn’t. As of September 2026, Mailinator deletes public mail after several hours, Guerrilla Mail after 1 hour, and YOPmail after 8 days; Maildrop clears an inbox that gets no new mail for 24 hours.

Does temp mail have a password?

Public ones don’t, by design: Mailinator, Maildrop, YOPmail, and Guerrilla Mail open an inbox by its name. Session-based services such as EmailOnDeck tie it to your browser instead, so clearing cookies can lose it.

Can you get a temp inbox back after closing it?

On a name-based service, yes: type the same name, which anyone else can also do. On a session-based one, only sometimes. EmailOnDeck says you need your email token, and the address must not have been wiped yet, which usually happens a couple of days after it’s created.

Can you send email from a temp address?

Mostly not. Mailinator and temp-mail.io only receive. YOPmail lets you reply to messages you receive, but new mail can go only to other YOPmail addresses. EmailOnDeck’s free service sends only to its own addresses, and it says sending to anyone needs its paid Pro version. Guerrilla Mail can send, but adds your IP address to what you send. To reply without showing your main address, use an alias service that supports replies, such as SimpleLogin, whose Free plan includes them.