Back to knowledge base

Tempy.email vs Plus Addressing — Which Is Better?

Gmail's + trick is clever: [email protected] lets you filter emails and track who's selling your address. But it has one fatal flaw: your real email is right there in plain sight.

Disposable email gives you a completely separate address with zero connection to your identity.

How Plus Addressing Works

Most email providers support "plus addressing":

Real email: [email protected]

With plus addressing:
[email protected] → goes to [email protected]
[email protected] → goes to [email protected]
[email protected] → goes to [email protected]

All emails go to the same inbox. You can create filters to organize them, and track which services sell your email.

Sounds great, right?

The Problem: It's Trivially Easy to Strip

Any programmer (or spammer) can remove the +something part in 2 seconds:

// Spammer's email list cleanup script
function getRealEmail(email) {
  return email.replace(/\+.*@/, '@');
}

getRealEmail('[email protected]')
→ '[email protected]'

Your "protection" is gone. Now they have your real email.

Real-World Issues with Plus Addressing

Issue 1: Sites Block It

Many sites detect and reject plus addresses:

Email: [email protected]
❌ Error: Please enter a valid email address

They know you're trying to use a throwaway. Some sites explicitly block it in their validation regex.

Issue 2: Data Breach Exposure

When a site gets breached:

Leaked database:
- [email protected]
- [email protected]
- [email protected]

Attackers see the pattern, strip the +netflix, and now have:

Real emails:
- [email protected]
- [email protected]
- [email protected]

Your real address is in the breach.

Issue 3: Email Selling

Site sells their email list:

Sold to marketing company:
→ [email protected]

Marketing company's script:
→ [email protected]

Now on 47 other marketing lists.

Issue 4: Reveals Identity

If you use plus addressing for multiple services:

Dating site: [email protected]
Job site: [email protected]
Forum: [email protected]

All leaks reveal the same base email: [email protected].

Attackers can correlate your activity across sites:

  • "This person uses dating apps, job boards, and tech forums"
  • Cross-reference with other breaches
  • Build detailed profile of [email protected]

How Disposable Email Is Different

With tempy.email, you get a completely separate address:

[email protected]

No connection to your real identity:

  • Can't be stripped to reveal real email (because there is no "real email")
  • Expires after 10 minutes (attackers can't use it even if they want to)
  • Unique subdomain per address (can't be correlated with other signups)
  • Not tied to any permanent account

After a Breach

Plus addressing breach:

Leaked: [email protected]
Attacker strips it: [email protected]
Spams your real inbox: ✅ Works

Disposable email breach:

Leaked: [email protected]
Attacker sends spam: ❌ Address expired months ago
Email bounces

Feature Comparison

Feature Plus Addressing Disposable Email
Hides real email ❌ No (trivially stripped) ✅ Yes (no connection)
Auto-expires ❌ Never ✅ 10 min (configurable)
Works on all sites ❌ Many block it ✅ Most sites accept
Prevents spam ❌ After stripping, yes ✅ Address is dead
Privacy from breaches ❌ Real email exposed ✅ Throwaway address
Correlation resistance ❌ Same base email ✅ Unique each time
Requires account ✅ Need Gmail/email ❌ No account needed
Long-term use ✅ Yes ❌ Temporary only

When to Use Each

Use Plus Addressing When:

  • ✅ Trusted long-term services (Netflix, Amazon, Spotify)
  • ✅ You want filtering in your main inbox
  • ✅ You trust the service won't sell your email
  • ✅ You need permanent access to those emails

Plus addressing is organizational, not security.

Use Disposable Email When:

  • ✅ One-time signups
  • ✅ Free trials
  • ✅ Sketchy sites you don't fully trust
  • ✅ Downloading "free" content
  • ✅ Newsletter signups you might not want long-term
  • ✅ Testing or throwaway accounts
  • ✅ Maximum privacy needed

Disposable email is actual privacy.

The Hybrid Approach

Smart email hygiene uses both:

Tier 1: Real email → Banks, work, critical services
Tier 2: Plus addressing → Trusted subscriptions (Netflix, Amazon)
Tier 3: Disposable email → Everything else

Example:

Bank: [email protected] (real)
Netflix: [email protected] (alias, trusted)
Random forum: [email protected] (disposable, untrusted)

This way:

  • Banks reach your real email
  • Netflix emails are filtered (but you don't mind receiving them)
  • Random sites can't spam you at all (address is dead)

Technical Reality

Plus addressing is convenience, not security.

It's like locking your front door but leaving a key under the mat with a sign saying "KEY HERE."

Sure, honest people won't use it. But anyone who wants to will find your real email in seconds.

Disposable email is like using a different house for sketchy visitors. They can't find your real home even if they try.

The Bottom Line

Plus addressing is good for:

  • Organizing legitimate emails
  • Tracking who sells your address
  • Long-term trusted services

Plus addressing is NOT good for:

  • Actual privacy
  • Preventing spam from determined senders
  • Protecting against data breaches
  • Hiding your identity

Disposable email is better when you want:

  • Real privacy
  • Zero spam
  • No long-term relationship with the site
  • Protection from breaches

Use the right tool for the job. For most one-time signups and untrusted sites, disposable email wins.

Try it: Next time a site asks for your email, use tempy.email. Your real inbox will thank you.

Updated February 12, 2026