← All writing

Most disposable email is not private at all

31 July 2026 · 4 min read

The usual disposable-mail site works like this: you pick or are given an address, and the inbox for that address is shown to whoever asks for it. There is no login, which is the appeal, but it also means the address is the only thing standing between your messages and a stranger.

Why that matters more than it sounds

Addresses on these services are short and drawn from a small pool. Anyone can sit and enumerate them. People have collected password resets, invoices and identity documents this way, not by breaking anything, just by typing.

It gets worse when the address is predictable. If a site hands out sequential or dictionary-word local parts, guessing is trivial.

What a private version looks like

• The inbox is opened by a secret link, not by the address.
• Knowing the address lets you send mail there and nothing else.
• Local parts are random enough that enumeration is pointless.
• Messages are deleted on a schedule that is actually enforced.

TMailr works that way: the address is public by design because you hand it out, and the token in your link is the only thing that reads the inbox. If you lose the link, we cannot show you the mail either, which is the point.