Tempy.email vs Plus Addressing — Which Is Better?
Gmail's + trick is clever: [email protected] lets you filter emails and track who's selling your address. But it has one fatal flaw: your real email is right there in plain sight.
Disposable email gives you a completely separate address with zero connection to your identity.
How Plus Addressing Works
Most email providers support "plus addressing":
Real email: [email protected]
With plus addressing:
[email protected] → goes to [email protected]
[email protected] → goes to [email protected]
[email protected] → goes to [email protected]
All emails go to the same inbox. You can create filters to organize them, and track which services sell your email.
Sounds great, right?
The Problem: It's Trivially Easy to Strip
Any programmer (or spammer) can remove the +something part in 2 seconds:
// Spammer's email list cleanup script
function getRealEmail(email) {
return email.replace(/\+.*@/, '@');
}
getRealEmail('[email protected]')
→ '[email protected]'
Your "protection" is gone. Now they have your real email.
Real-World Issues with Plus Addressing
Issue 1: Sites Block It
Many sites detect and reject plus addresses:
Email: [email protected]
❌ Error: Please enter a valid email address
They know you're trying to use a throwaway. Some sites explicitly block it in their validation regex.
Issue 2: Data Breach Exposure
When a site gets breached:
Leaked database:
- [email protected]
- [email protected]
- [email protected]
Attackers see the pattern, strip the +netflix, and now have:
Real emails:
- [email protected]
- [email protected]
- [email protected]
Your real address is in the breach.
Issue 3: Email Selling
Site sells their email list:
Sold to marketing company:
→ [email protected]
Marketing company's script:
→ [email protected]
Now on 47 other marketing lists.
Issue 4: Reveals Identity
If you use plus addressing for multiple services:
Dating site: [email protected]
Job site: [email protected]
Forum: [email protected]
All leaks reveal the same base email: [email protected].
Attackers can correlate your activity across sites:
- "This person uses dating apps, job boards, and tech forums"
- Cross-reference with other breaches
- Build detailed profile of
[email protected]
How Disposable Email Is Different
With tempy.email, you get a completely separate address:
[email protected]
No connection to your real identity:
- Can't be stripped to reveal real email (because there is no "real email")
- Expires after 10 minutes (attackers can't use it even if they want to)
- Unique subdomain per address (can't be correlated with other signups)
- Not tied to any permanent account
After a Breach
Plus addressing breach:
Leaked: [email protected]
Attacker strips it: [email protected]
Spams your real inbox: ✅ Works
Disposable email breach:
Leaked: [email protected]
Attacker sends spam: ❌ Address expired months ago
Email bounces
Feature Comparison
| Feature | Plus Addressing | Disposable Email |
|---|---|---|
| Hides real email | ❌ No (trivially stripped) | ✅ Yes (no connection) |
| Auto-expires | ❌ Never | ✅ 10 min (configurable) |
| Works on all sites | ❌ Many block it | ✅ Most sites accept |
| Prevents spam | ❌ After stripping, yes | ✅ Address is dead |
| Privacy from breaches | ❌ Real email exposed | ✅ Throwaway address |
| Correlation resistance | ❌ Same base email | ✅ Unique each time |
| Requires account | ✅ Need Gmail/email | ❌ No account needed |
| Long-term use | ✅ Yes | ❌ Temporary only |
When to Use Each
Use Plus Addressing When:
- ✅ Trusted long-term services (Netflix, Amazon, Spotify)
- ✅ You want filtering in your main inbox
- ✅ You trust the service won't sell your email
- ✅ You need permanent access to those emails
Plus addressing is organizational, not security.
Use Disposable Email When:
- ✅ One-time signups
- ✅ Free trials
- ✅ Sketchy sites you don't fully trust
- ✅ Downloading "free" content
- ✅ Newsletter signups you might not want long-term
- ✅ Testing or throwaway accounts
- ✅ Maximum privacy needed
Disposable email is actual privacy.
The Hybrid Approach
Smart email hygiene uses both:
Tier 1: Real email → Banks, work, critical services
Tier 2: Plus addressing → Trusted subscriptions (Netflix, Amazon)
Tier 3: Disposable email → Everything else
Example:
Bank: [email protected] (real)
Netflix: [email protected] (alias, trusted)
Random forum: [email protected] (disposable, untrusted)
This way:
- Banks reach your real email
- Netflix emails are filtered (but you don't mind receiving them)
- Random sites can't spam you at all (address is dead)
Technical Reality
Plus addressing is convenience, not security.
It's like locking your front door but leaving a key under the mat with a sign saying "KEY HERE."
Sure, honest people won't use it. But anyone who wants to will find your real email in seconds.
Disposable email is like using a different house for sketchy visitors. They can't find your real home even if they try.
The Bottom Line
Plus addressing is good for:
- Organizing legitimate emails
- Tracking who sells your address
- Long-term trusted services
Plus addressing is NOT good for:
- Actual privacy
- Preventing spam from determined senders
- Protecting against data breaches
- Hiding your identity
Disposable email is better when you want:
- Real privacy
- Zero spam
- No long-term relationship with the site
- Protection from breaches
Use the right tool for the job. For most one-time signups and untrusted sites, disposable email wins.
Try it: Next time a site asks for your email, use tempy.email. Your real inbox will thank you.