The Privacy Stack: Temp Email, VPN, and Password Manager

Most privacy advice is either too paranoid (run your own mail server, use Tails OS, never touch Google) or too vague ("be careful about what you share online"). Neither is useful.

This guide is about three specific tools that cover most of what actually leaks about you day to day. Together they take about 20 minutes to set up. You don't need to be technical.

What Actually Leaks About You

Before picking tools, it helps to know what you're protecting against. Three categories cover the vast majority of everyday privacy exposure:

Your email address — collected by every app, newsletter, and service you try. Sold, shared, leaked, and used to track you across the web.
Your IP address — ties your browsing to your physical location and ISP account. Used by advertisers, data brokers, and sites to build behavioral profiles.
Your passwords — if you reuse them (most people do), one breach exposes everything.

These aren't theoretical risks. Email addresses and passwords appear in breach databases by the billions. IP tracking is how ad networks follow you across unrelated websites. Fixing all three is straightforward.

Tool 1: Disposable Email

What it does: Gives you a temporary inbox that receives real email, so you can verify accounts and access services without handing over your real address.

Why it matters: Your email is the single most reused piece of personal data on the internet. Every company that has it can sell it, leak it, or spam it. The less you hand it out, the less exposure you have.

How to use it: tempy.email — open it, get an address instantly, use it for sign-ups you don't trust, let it expire. No account needed. No tracking. Self-hosted analytics only.

When to use it: Free trials, newsletter sign-ups, one-time downloads, competitions, anything where you don't want ongoing contact.

When not to use it: Accounts you need long-term — bank, email provider, work tools. For those, use an alias (see below) or your real address depending on how much you trust the service.

The upgrade — email aliases: If you want permanent protection rather than temporary, services like SimpleLogin let you create permanent aliases that forward to your real inbox. You can disable any alias individually if a company starts spamming you. Think of it as disposable email that doesn't expire.

Tool 2: VPN

What it does: Routes your internet traffic through a server in another location, hiding your real IP address from the sites you visit and your ISP.

Why it matters: Your IP address is a persistent identifier that ad networks, data brokers, and websites use to track you. It's also tied to your physical location — anyone who can see your IP can roughly locate you. A VPN breaks that link.

What it doesn't do: A VPN doesn't make you anonymous if you're logged in. If you sign in to Google with a VPN active, Google still knows it's you. VPNs protect your IP — not your identity at the account level. That's what the disposable email is for.

How to choose one:

The main things that matter:

No-logs policy — the VPN shouldn't store records of what you do. Look for independently audited no-logs claims.
Jurisdiction — VPN companies based in countries with strong privacy laws (Switzerland, Iceland, Panama) are harder to compel to hand over data.
Speed — cheap VPNs are often slow. Slower is fine for browsing, but painful for video.
Price — expect to pay $3–8/month for a reputable service. Free VPNs typically make money by selling your data, which is exactly what you're trying to avoid.

Well-regarded options: Mullvad (flat €5/month, accepts cash, no account email required), ProtonVPN (Swiss, has a free tier), NordVPN, Surfshark (cheapest reputable option on long plans).

When to use it:

Public Wi-Fi, always
Any browsing you'd prefer your ISP not to see
Accessing services that track users by IP
Reducing the data available to ad networks

Tool 3: Password Manager

What it does: Stores all your passwords in encrypted form and generates strong unique passwords for every account.

Why it matters: Password reuse is how most account takeovers happen. One breach at a random forum from 2019 gives an attacker the keys to your email, your bank, and everything else if you used the same password. A password manager fixes this completely — every account gets a random 20-character password that appears nowhere else.

What most people worry about: "If someone hacks my password manager, they have everything." True — but password managers are significantly harder to breach than the average website, and the master password never leaves your device. The risk of one strong vault is far lower than the risk of reusing 5 weak passwords across 200 sites.

Options:

Bitwarden — open source, free tier covers almost everything, optional self-hosting. Best default choice for most people.
1Password — polished apps, family plans, travel mode. $3/month.
Proton Pass — from the ProtonVPN/ProtonMail team, good if you're already in that ecosystem.

How to start: Install Bitwarden, import any passwords your browser has saved, and start generating new ones when you next log in to anything. It doesn't have to be all at once.

How They Work Together

Each tool addresses a different layer:

Layer	What Leaks	Tool
Account	Your email address	Disposable email / alias
Network	Your IP and location	VPN
Credentials	Your passwords	Password manager

None of them overlap or replace each other. A VPN won't protect your email. A password manager won't hide your IP. Disposable email won't help if your other accounts all have weak passwords. You need all three to cover the main vectors.

A practical example:

You want to try a new AI writing tool. Here's the full flow with the stack active:

VPN is running — your IP is masked from the site
Open tempy.email — get a disposable address
Sign up with the disposable address
Password manager generates a strong random password for the account
Verify via tempy.email
Use the tool
If you don't want it: walk away. The temp address expires, the password was unique, the IP was masked.

That site now has a dead email, a hashed unique password, and an IP that belongs to a VPN exit node in another country. Not you.

What This Stack Doesn't Cover

To set expectations correctly: this is an everyday privacy stack, not an anonymity system.

It won't protect you from a determined state-level adversary
It won't anonymize you if you're logged into accounts tied to your real identity
It won't protect against device fingerprinting (browser extensions like uBlock Origin and Firefox's strict tracking protection help here)
It won't prevent your real accounts from being breached at the service level

For everyday use — avoiding spam, reducing ad tracking, protecting against credential stuffing, limiting data broker exposure — this stack handles the majority of the risk.

Getting Started This Week

Day 1: Install Bitwarden. Import your browser's saved passwords. Done.

Day 2: Sign up for ProtonVPN (free tier) or Mullvad. Turn it on when you're on public Wi-Fi. Turn it on permanently when you're comfortable with it.

Day 3: Next time you sign up for anything, open tempy.email first instead of typing your real address.

Three days. Three tools. Most of your everyday privacy exposure addressed.