Step 01
Create a labeled alias
Add the site name before you paste it.
Free · Private · No tracking No. 01
Stop giving out your
real email.
Emcognito creates unlimited anonymous aliases that forward to your real inbox. Reply from any alias. Burn it whenever you want.
Emcognito is a free anonymous email service that creates unlimited disposable aliases on the emcognito.com domain. Each alias forwards messages to your real inbox while keeping your address private. You can reply directly from any alias, suspend addresses you no longer trust, or delete them permanently — all from a passwordless dashboard. Free for the first 100 forwards every month; paid plans start at $2/mo.
Free forever for up to 100 forwards/month No credit card Passkey sign-in — no passwords, ever
Updated Edited by Yoni Cigan, founder
How it works
Three steps. About thirty seconds.
Step 02
Use it anywhere
Sign up. Subscribe. Sketchy site? Use a fresh one.
Websitenewsletter@shop.example
Aliasm3vn@emcognito.com
Your inboxyou@gmail.com
Step 03
Trace, reply, or burn
If spam appears later, the alias shows where it started.
- Replyfrom the alias
- Suspendpause forwards
- Deleteburn it forever
Free for the first 100 forwards every month — no credit card.
Alias intelligence
When spam shows up, know where it started.
Emcognito does more than make throwaway addresses. Label each alias by source, watch for noisy addresses, and clean up the ones that no longer earn a place in your inbox.
Source labels
Tag aliases by store, app, newsletter, job board, or trial so the history is obvious later.
Leak signals
Spot sourced aliases getting unusual volume and review the likely signup path before it spreads.
Cleanup suggestions
Find quiet addresses with no forwards and suspend or delete them before the list gets messy.
Examplem3vn@emcognito.comshop.examplelikely source, not absolute proof
Why trust us
A privacy product is only as good as the team behind it.
Emcognito started because I was tired of handing out my real email to every website that asked for one. I wanted a single tool that gave each site its own throwaway address, forwarded mail back to me, and let me delete the address the moment a site started misbehaving. That's the whole product.
We don't read your mail, we don't sell anything to anyone, and the code that does the forwarding is small enough that you can ask exactly what it does and get a straight answer.
— Yoni (Cigan), founder
Passwordless by default
Magic links and passkeys only — there's no password for an attacker to phish or leak.
Encrypted in transit, encrypted at rest
HTTPS for the website and API. Outbound forwards use SMTP over TLS to Amazon SES. Account and alias records are encrypted at rest in DynamoDB.
We forward, we don't archive
Each message is deleted from the forwarder the moment it leaves for your inbox. Nothing is copied to a database, an S3 bucket, or a staff-readable mailbox.
Hosted on AWS, US-East
Account and alias data live in a single AWS region (us-east-1). No third-party trackers on this site.
Rate card
Pay for forwards. Aliases stay free.
Every tier ships with unlimited anonymous aliases. You only pay for forwarded mail — the part that actually costs us to run.
Free
$0forever100 forwarded emails / month
- Unlimited anonymous aliases
- Suspend / resume any alias
- Footer ad on forwarded mail
Plus
Most popular$2/ month2,500 forwarded emails / month
- Everything in Free
- No footer ads on forwards
- Reply from your alias
- Priority delivery
Pro
$4/ month15,000 forwarded emails / month
- Everything in Plus
- Pay-as-you-go above the cap
- Priority email support
Annual billing saves about 17%, and Pro can opt into pay-as-you-go overage at half a cent per send. See full pricing →
Common questions
The objections worth answering.
Is my email content readable by Emcognito?
No. The forwarder writes each incoming message to a temporary file, hands it to Amazon SES for delivery to your real inbox, and deletes the file the moment SES accepts it. The same delete step runs on every other branch — suspended aliases, quota-exceeded sends, bounces — so a message never sits on disk longer than the forward itself.
Nothing about the body is copied to DynamoDB, S3, CloudWatch, or any internal mailbox. There is no staff UI that can read forwarded mail, because there is nothing to read after the forward completes.
What happens to messages sent to a deleted alias?
They're silently dropped. The sender doesn't get a bounce, so they can't tell whether the address ever existed — your anonymity stays intact.
Can the recipient figure out my real email?
No. Mail forwarded to you carries the alias as the destination, and replies you send through Emcognito leave from the alias too. Your real address is never on the wire.
How is this different from Gmail's “+” aliasing or Apple Hide My Email?
Gmail “+” aliases all share your real address — anyone can strip the suffix to recover it, and you can't disable a single alias when it gets sold to a spam list.
Apple Hide My Email is great inside Apple's ecosystem, but it ties every alias to your iCloud account and you only get unlimited if you pay for iCloud+. Emcognito's aliases live independently of any platform account, on a domain you can use from any device.
How does Emcognito compare to SimpleLogin, Firefox Relay, or addy.io?
The clearest difference is what the free tier limits. SimpleLogin's free plan caps you at 10 aliases and Firefox Relay's at 5 (both current as of May 2026), so once you've labeled a handful of sites you start reusing addresses. Emcognito never caps aliases — Free, Plus, and Pro all include unlimited anonymous aliases — and meters forwarded mail instead, starting at 100 forwards a month on the free tier.
All of them forward mail to your real inbox so a site never sees your address. Pick Emcognito when you want a labeled alias for every signup without ever counting them; pick an open-source service like SimpleLogin or addy.io when a publicly auditable codebase is your first priority.
Can Emcognito tell me who sold or leaked my email?
It can help you identify the likely source. Use a different alias for each site and label it when you create it. If spam starts arriving through that alias, the source label shows which signup path exposed it.
Treat that as strong evidence, not absolute proof. A sender could mistype an address, share it internally, or have it exposed through a breach.
What happens to my aliases if Emcognito shuts down?
We'll give 60 days' notice and stop charging immediately. During the wind-down, every alias keeps forwarding so you have time to rotate the addresses you actually care about.
Where is data stored, and what's your retention policy?
Account records, alias records, and sign-in tokens live in DynamoDB in a single AWS region (us-east-1). Sign-in tokens expire in 15 minutes; passkey challenges in 5 minutes; bounce-event keys in 7 days; everything else stays only as long as your account does.
Mail bodies are not stored. They exist on the forwarder host only while a single forward is in flight and are deleted as soon as Amazon SES accepts the message. There is no body field in any database table and no archival bucket.
From the blog
Privacy worth reading.
Short, opinionated guides on anonymous email, disposable vs alias workflows, leak tracing, and stopping spam for good — written for people who want a private email alias for every signup form on the internet. Weighing the alternatives? We line Emcognito up against SimpleLogin, Firefox Relay, and Apple Hide My Email.
Ready to stop the spam?
Takes 30 seconds. No credit card.
Create my first alias — free100 forwards/month, then $2 if you want more