Blog

If your inbox feels like a losing battle against promotional emails, phishing attempts, and newsletters you don’t remember subscribing to — you’re dealing with one of the internet’s oldest problems. According to Kaspersky, nearly 45% of all emails sent worldwide are spam. That’s roughly 15 billion spam messages per day, and your inbox is catching its share.

The obvious solution — creating a new email address — is almost never practical. You’ve got years of accounts, contacts, password resets, and important services tied to your current address. The real solution is to protect the email you already have while preventing new spam from reaching you in the first place.

This guide covers both: how to clean up the spam you’re already getting, and how to stop new spam at the source — so your inbox stays manageable without starting over.

Table of Contents

1. Why You’re Getting So Much Spam
2. Strategy 1: Stop the Leak at the Source
3. Strategy 2: Clean Up Existing Subscriptions
4. Strategy 3: Supercharge Your Spam Filters
5. Strategy 4: Remove Your Email from Data Broker Lists
6. Strategy 5: Block Email Tracking
7. Strategy 6: Long-Term Email Hygiene Habits
8. Putting It All Together: The Anti-Spam Playbook
9. Key Takeaways
10. FAQs

Why You’re Getting So Much Spam

Before you can fix the problem, it helps to understand where it comes from. Spam doesn’t appear randomly — it has specific sources:

Data breaches

Your email has likely appeared in multiple data breaches. According to Have I Been Pwned, over 14 billion records have been exposed in known breaches. Check your email with our free data breach checker — you might be surprised how many times it’s been leaked. Each breach puts your address on new spam and phishing lists. For a detailed look at the consequences, see our guide on what happens when your email gets leaked.

Data brokers and list sharing

When you buy something online, subscribe to a newsletter, or create an account, many companies share your data with “trusted partners.” These partners share with their partners. Within weeks, your email can propagate across dozens of marketing databases you never directly interacted with.

Web scraping

Bots continuously crawl websites, social media profiles, public directories, and forums for email addresses. If your email is publicly visible anywhere online, it’s been harvested.

Legitimate signups that went sideways

That online store you bought from three years ago? They may have changed their marketing practices, been acquired by a company with aggressive email tactics, or simply decided to email you more frequently. Legitimate companies can become spam sources over time.

Strategy 1: Stop the Leak at the Source

The most effective long-term anti-spam strategy isn’t fighting spam after it arrives — it’s preventing your real email from being exposed in the first place. This is where email aliases come in.

An email alias is a forwarding address that routes messages to your real inbox without revealing your actual address. When spam starts arriving at an alias, you disable it — instantly and permanently. Your real address stays clean because it was never exposed.

How to implement this

1. Sign up for an alias service like Alias Email (free tier includes 10 aliases and 1 custom domain).
2. From today onward, use a unique alias for every new signup. Shopping gets one alias, newsletters get another, social media gets a third.
3. Reserve your real email for trusted contacts only — friends, family, employer, bank.
4. When an alias starts getting spam, disable it. One click. The spam stops immediately.

This creates a clear separation: people get your real email, services get aliases. The wall between the two is what keeps your inbox clean long-term.

What about existing accounts?

You can gradually migrate existing accounts to aliases. The next time you log into a service, update your email to an alias. Over a few months, you’ll shift the majority of your commercial accounts off your real address — dramatically reducing future spam.

Strategy 2: Clean Up Existing Subscriptions

For spam you’re already receiving, take a systematic approach:

Unsubscribe from legitimate senders

Most marketing emails from real companies include an unsubscribe link at the bottom. Under GDPR (in Europe) and CAN-SPAM (in the US), legitimate companies must honor these requests within 10 business days. Look for the small “Unsubscribe” or “Manage preferences” link — it’s usually at the very bottom of the email in light gray text.

Never unsubscribe from suspicious emails

This is critical: if an email looks like spam or phishing, do NOT click the unsubscribe link. In illegitimate emails, the “unsubscribe” link often just confirms that your address is active and monitored — which makes it more valuable to spammers. Instead, mark these as spam using your email client’s report button.

Use bulk unsubscribe tools cautiously

Services that promise to unsubscribe you from everything at once (like Unroll.me) require full access to your inbox to work. Consider the trade-off: you’re giving another company access to all your email to solve a spam problem. A better approach is manual unsubscription from the worst offenders combined with alias protection going forward.

Create alias in seconds

Start protecting your inbox now — it’s free!

Create my first alias

Strategy 3: Supercharge Your Spam Filters

Your email provider’s spam filter is your first line of defense. Here’s how to make it work harder:

Report spam consistently

Every time you mark a message as spam, you train your provider’s machine learning model. Gmail, Outlook, and other major providers use these reports to improve filtering for everyone. Don’t just delete spam — report it.

Create custom filters for repeat offenders

If certain senders keep getting past the spam filter, create specific rules:

• Gmail: Open the email → click the three dots → “Filter messages like these” → choose “Delete it” or “Skip Inbox.”
• Outlook: Right-click the email → “Rules” → “Always move messages from…” → select your trash or junk folder.
• Apple Mail: Mail → Preferences → Rules → “Add Rule” → set conditions and actions.

Block specific senders

Most email clients let you block addresses directly. In Gmail, open the email, click the three dots, and select “Block [sender].” This is the nuclear option for persistent offenders.

Enable advanced phishing protection

Gmail offers advanced phishing and malware protection in settings. Outlook has similar built-in features. Make sure these are enabled — they’re often turned on by default but worth verifying.

Strategy 4: Remove Your Email from Data Broker Lists

Data brokers like Spokeo, WhitePages, BeenVerified, and PeopleFinder collect and sell personal information, including email addresses. They’re a major source of “how did they get my email?” spam.

You can request removal:

1. Search for yourself on major data broker sites (search your name and email).
2. Follow their opt-out process — it’s usually buried in their privacy policy or FAQ. Most require you to find your specific listing and submit a removal request.
3. Repeat every 3-6 months — data brokers frequently re-add information from new sources. Removal is not permanent unless you continuously monitor.

This is tedious but effective for reducing purchased-list spam. Some privacy services will automate this process for you, continuously submitting removal requests on your behalf.

Strategy 5: Block Email Tracking

Many marketing emails include invisible tracking pixels that tell the sender when you opened their email, what device you used, and your approximate location. This data makes your profile more valuable — leading to more targeted and more frequent emails.

For a deep dive into how this works, see our full guide on how email tracking works and how to stop it. The short version:

• Disable automatic image loading in your email client. Tracking pixels are tiny images — if they don’t load, they can’t track.
• Use Apple Mail’s Privacy Protection (if you’re on Apple devices) — it automatically blocks most tracking.
• Use an alias service with built-in tracking protection — Alias Email strips tracking pixels from forwarded emails before they reach your inbox, so you can keep images enabled without being tracked.

Strategy 6: Long-Term Email Hygiene Habits

Spam protection isn’t a one-time fix — it’s an ongoing practice. Here are habits that compound over time:

• Never post your real email publicly. Not on social media, not on forums, not in public GitHub repos. Use a contact form or an alias instead.
• Be skeptical of “enter your email” requests. Gated content (“enter your email to download this PDF”), contests, and surveys are often data-harvesting operations.
• Review connected apps and services. Periodically check which apps have access to your Google, Microsoft, or Apple account. Revoke access for anything you no longer use.
• Use unique passwords for every account. This doesn’t directly prevent spam, but it limits the damage when a breach happens — and breaches are a major spam source.
• Check breach databases periodically. Visit haveibeenpwned.com every few months. If your email appears in a new breach, take immediate action on affected accounts.

Putting It All Together: The Anti-Spam Playbook

Here’s the complete strategy, in priority order:

The key insight: prevention beats cleanup. Spending 5 seconds creating an alias before each signup saves hours of unsubscribing, filtering, and fighting spam later. The best time to start was years ago. The second-best time is now.

Key Takeaways

• Spam comes from data breaches, data brokers, web scraping, and companies sharing your information with “partners.” Understanding the source helps you pick the right defense.
• The most effective strategy is prevention: stop giving out your real email to services. Use email aliases instead.
• For existing spam: unsubscribe from legitimate senders, report suspicious ones as spam (don’t click their unsubscribe links), and block persistent offenders.
• Supercharge your spam filters by consistently reporting spam — it trains the machine learning model.
• Data broker removal is tedious but effective. Plan to re-submit removal requests every few months.
• Blocking email tracking reduces your profile’s value to advertisers, leading to less targeting over time.
• You don’t need to change your email address. You need to stop exposing it to every service that asks.

FAQs

You don’t need to abandon your email address or start from scratch. You just need to stop handing your real address to every website that asks — and have a plan for the spam that’s already reaching you. Email aliases make the first part effortless, and the strategies above handle the rest. Get started with free aliases from Alias Email and take back control of your inbox.

Free trials are everywhere. SaaS tools, streaming services, fitness apps, design software — they all want you to “try before you buy.” And the entry fee is always the same: your email address. It seems like a fair trade. But according to the Radicati Group, the average email user receives over 120 messages per day, and a huge chunk of that comes from services people signed up for once and forgot about. Every free trial you start with your real email makes this worse.

The problem isn’t just inbox clutter. When you hand your real email address to a free trial, you’re creating a long-term vulnerability — one that can follow you through spam lists, data breaches, phishing campaigns, and data broker profiles for years. And once your email is out there, you can’t take it back.

This guide explains exactly what happens after you sign up for a free trial, why the risk is higher than most people realize, and how to keep using free trials without putting your real email at risk.

Table of Contents

1. What Happens After You Sign Up for a Free Trial
2. The Real Cost of “Free”: What Your Email Is Worth
3. How Your Email Ends Up with Data Brokers
4. The Data Breach Factor
5. The Gmail “+” Trick: Why It Doesn’t Help
6. The Email Alias Solution
7. Step-by-Step: Setting Up Aliases for Free Trials
8. When IS It OK to Use Your Real Email?
9. Key Takeaways
10. FAQs

What Happens After You Sign Up for a Free Trial

The moment you submit your email to start a free trial, a predictable chain of events begins:

1. The welcome email. Perfectly reasonable — you just signed up, after all.
2. The onboarding drip campaign. Over the next few days, you’ll get “tips and tricks” emails, feature highlights, and “getting started” guides. These come whether you want them or not.
3. The trial-ending urgency sequence. “Your trial ends in 3 days!” → “Last chance to upgrade!” → “We’re extending your trial — just for you!” This creates artificial urgency designed to push you into a purchase decision.
4. The “we miss you” campaign. Didn’t convert? Now you’ll get win-back emails for weeks or months. Discount offers, “what went wrong?” surveys, and “come back” messages.
5. The ongoing newsletter. Even after all the campaigns end, you’re likely subscribed to their general marketing list. Product updates, company news, and promotional emails — indefinitely.

And that’s just from the company you signed up with. Behind the scenes, your email often travels further.

The Real Cost of “Free”: What Your Email Is Worth

Your email address is a valuable piece of data. Here’s what makes it worth more than you might think:

It’s a persistent identifier

Unlike cookies that can be cleared or IP addresses that change, your email address stays the same for years — often decades. It’s the single most reliable way to track a person across the internet. Advertising networks, analytics platforms, and data brokers all use email addresses as a primary key to build cross-platform profiles.

It enables password reset attacks

If an attacker knows your email address, they can attempt password resets on popular services — Gmail, Facebook, banking sites, Amazon. Even if the reset fails, the “we don’t have an account with this email” or “reset link sent” response tells them which services you use, which is valuable intelligence for targeted phishing attacks.

It powers targeted phishing

Generic phishing emails are easy to spot. But when an attacker knows which services you use (because your email appeared in their breach database), they can craft highly convincing messages. “Your Spotify subscription payment failed” hits different when the attacker knows you actually use Spotify.

It fuels credential stuffing

According to the Verizon DBIR, stolen credentials are involved in over 80% of breaches. If your email and password are leaked from a free trial service, attackers will try that combination on hundreds of other services automatically. If you reuse passwords — and studies show most people do — they’ll get in somewhere.

How Your Email Ends Up with Data Brokers

Many free trial services share customer data with third parties. Sometimes it’s buried in their privacy policy under phrases like “we share information with trusted partners” or “we use third-party analytics services.” Sometimes it happens through advertising pixels embedded on their site.

Here’s the typical path:

1. You sign up for a free trial with your real email.
2. The service shares your data with advertising partners, analytics providers, or directly with data brokers.
3. Data brokers aggregate your information — combining your email with data from other sources: social media profiles, public records, purchase history, browsing behavior.
4. The aggregated profile is sold to marketers, advertisers, and sometimes less scrupulous parties.
5. You start receiving unsolicited emails from companies you’ve never interacted with. Your email has entered the ecosystem.

Data broker companies like Spokeo, WhitePages, and BeenVerified maintain profiles on hundreds of millions of people. Your email address is often the key that ties everything together.

The Data Breach Factor

Free trial services — especially smaller startups — are frequently targeted in data breaches. They often have less sophisticated security than established companies, but they collect the same sensitive data: emails, passwords, sometimes payment information.

According to IBM’s Cost of a Data Breach Report, the average breach takes 194 days to identify. That’s over six months during which your data is exposed before anyone even knows about it. For smaller companies (the kind that often run free trials to acquire users), the detection time can be even longer.

You can check if your email has been involved in known breaches with our free data breach checker (or at haveibeenpwned.com). If you’ve been using the same email for years, don’t be surprised to find it in multiple breach databases. For a deeper look at what happens after your email is leaked, read our guide on what happens when your email gets leaked in a data breach.

Create alias in seconds

Start protecting your inbox now — it’s free!

Create my first alias

The Gmail “+” Trick: Why It Doesn’t Help

A common workaround is Gmail’s plus addressing — using yourname+trial@gmail.com instead of your real address. While this can help with inbox filtering, it does not protect your privacy:

• Your real address is visible. Anyone looking at yourname+trial@gmail.com can see your real email is yourname@gmail.com.
• The “+” is trivially easy to strip. Data brokers and spammers routinely remove the plus portion to get the base address.
• Many signup forms reject it. A significant number of websites don’t accept the “+” character in email fields.

If you use Gmail’s “+” addresses and want better organization tools for them, Trick Plus can help you manage them. But for actual privacy protection from free trials, you need a real alias that hides your address entirely.

The Email Alias Solution

An email alias is a separate address that forwards to your real inbox without ever revealing it. Here’s how it changes the free trial equation:

• Spam? Disable the alias. One click, no more emails from that source. No unsubscribe links, no waiting periods, no “are you sure?” confirmations.
• Data breach? Only the alias is exposed. Your real email stays safe, and attackers can’t use the alias to target your other accounts.
• Data sharing? If you use a unique alias per service, you’ll know exactly who shared your information when spam appears at a specific alias.
• Credential stuffing? Since each service has a unique alias, a leaked alias+password combo doesn’t work anywhere else.

A practical example

You want to try a project management tool that offers a 14-day free trial. Instead of signing up with yourname@gmail.com, you create projecttool@youralias.email. The trial works exactly the same — emails forward to your real inbox, you can reply through the alias, and the service functions normally.

When the trial ends and the win-back campaign starts, you flip a switch and the alias stops forwarding. No more emails. And if that tool gets breached six months later? Only the alias was exposed. Your real email — and every other account tied to it — remains untouched.

Step-by-Step: Setting Up Aliases for Free Trials

1. Get an alias service. Alias Email gives you 10 free aliases — more than enough to cover your trial-heavy period.
2. Install the browser extension. It detects email fields on signup forms and offers to generate an alias automatically.
3. Create a naming convention. Use the service name: figma@, notion@, canva@. This makes it obvious which alias goes where.
4. Sign up for the trial with the alias. Everything works normally — confirmations, login links, and notifications all arrive in your real inbox.
5. After the trial: if you liked the service and subscribed, keep the alias. If not, disable it.

Make it a habit: your real email is for people, aliases are for services. This single rule, consistently applied, will dramatically reduce your spam and breach exposure over time.

When IS It OK to Use Your Real Email?

Not every situation requires an alias. Here are cases where using your real email makes sense:

• Your bank or financial institutions — account recovery for financial services should use your most stable, long-term address.
• Your employer or school — these are high-trust relationships with legitimate need for your real contact information.
• Government services — tax portals, healthcare systems, official registrations.
• Personal contacts — friends, family, close colleagues.

A good rule of thumb: if losing access to the account would cause real problems (financial loss, legal issues, broken relationships), use your real email. For everything else — especially free trials, shopping, newsletters, and social media — use an alias.

Key Takeaways

• Free trials trigger multi-week marketing campaigns, data sharing with third parties, and long-term data broker exposure — all from a single email submission.
• Your email address is a persistent identifier that enables password reset attacks, targeted phishing, and credential stuffing across services.
• Data brokers aggregate your email with other personal data, creating profiles sold to marketers and advertisers.
• Gmail’s “+” trick doesn’t hide your real address — it’s trivially easy to strip and many forms reject it.
• Email aliases let you use free trials freely: disable the alias when you’re done, and your real email stays clean.
• Rule of thumb: real email for people and critical accounts. Aliases for everything else.

FAQs

Your email address is one of your most persistent pieces of personal data. Unlike a password, you can’t easily change it — and every free trial you sign up for adds another vector for spam, data exploitation, and breach exposure. Using an alias takes five seconds and protects you indefinitely. It’s one of the simplest privacy upgrades you can make — start with 10 free aliases from Alias Email.

You’ve probably seen this advice floating around: just add a + sign to your Gmail address to create unlimited aliases. Sign up for a newsletter as you+newsletter@gmail.com, register on a shopping site as you+shopping@gmail.com, and you’ll always know who sold your data.

Sounds great. Here’s the problem: the Gmail plus trick doesn’t actually protect your email address. Not even a little. Anyone who receives you+anything@gmail.com can see your real address — it’s right there before the + sign. Stripping it out takes one line of code.

If you’re using the plus trick for privacy, you’re relying on a locked screen door. Let’s break down why, what it’s actually useful for, and what works better as a real email alias.

1. What Is the Gmail Plus (+) Trick?
2. Why the Plus Trick Doesn’t Protect Your Privacy
3. What the Plus Trick IS Good For
4. Gmail’s Built-in Alias Options (And Their Limits)
5. What Actually Hides Your Email Address
6. How a Dedicated Email Alias Works
7. Plus Trick vs Email Alias: Quick Comparison
8. Key Takeaways

What Is the Gmail Plus (+) Trick?

Gmail ignores everything between a + sign and the @ symbol in your address. So if your email is jane@gmail.com, you can use jane+spotify@gmail.com, jane+amazon@gmail.com, or jane+literally-anything@gmail.com — they all land in the same inbox.

Google calls this “plus addressing” or “task-specific addresses.” It’s documented in their official help pages as a way to filter incoming messages. The idea is that you give a tagged address to each service, then set up Gmail filters to automatically sort, label, or archive those messages.

This is often called a Gmail alias, but that term is misleading. A true alias hides your identity. The plus trick doesn’t. It’s more like writing your name on a nametag and adding a footnote — the name is still right there.

Why the Plus Trick Doesn’t Protect Your Privacy

The Gmail + trick gets recommended constantly in privacy circles. Reddit threads, tech blogs, even some cybersecurity outlets suggest it as a way to “hide” your email. But it fails at the one job people actually want it to do.

Your Real Email Is Right There

When you sign up as you+shop@gmail.com, the company on the other end receives your full address — including the part before the plus. Extracting your real email takes one line of code: split the string at +, keep everything before it, reattach the domain. Done. Any developer, data broker, or spammer can do this in seconds.

Many Sites Reject the + Sign

Try signing up on some websites with a plus sign in your email. You’ll hit a wall. A surprising number of registration forms reject + as an invalid character. Banks, government portals, older e-commerce platforms — many of them won’t let you use it at all. That means the trick doesn’t even work everywhere you’d want it to.

Data Brokers Strip It Automatically

Data brokers aggregate and sell personal information at scale. According to Grand View Research, the global data broker market was valued at nearly $278 billion in 2024. These companies are sophisticated. They normalize email addresses as a basic step in their pipeline — stripping plus tags, removing dots, deduplicating records. Your you+tagged@gmail.com addresses get collapsed back to you@gmail.com before you can say “unsubscribe.”

It Was Designed for Filtering, Not Privacy

This is the part people miss. Google built plus addressing for inbox organization. It’s a filtering tool. It was never intended to mask your identity or protect you from spam, phishing, or data leaks. Expecting privacy from the plus trick is like expecting a Post-it note on your door to function as a deadbolt.

And the numbers make the stakes clear. The IBM Cost of a Data Breach Report found the global average cost of a breach hit $4.4 million — with stolen credentials as the top initial attack vector. Email addresses are often the key that unlocks the rest. Keeping yours hidden actually matters.

What the Plus Trick IS Good For

Let’s be fair. The email plus trick isn’t useless. It’s just not a privacy tool. Here’s where it genuinely helps:

• Filtering and labeling. Gmail filters work perfectly with plus addresses. Create you+receipts@gmail.com for online purchases, then auto-label everything that comes in. Inbox organization is the plus trick’s actual superpower.
• Tracking who shares your data. If you give you+companyX@gmail.com to a specific service and start getting spam at that address, you know who shared it (or got breached). You won’t stop the spam, but you’ll know the source.
• Quick throwaway signups. Need to download a whitepaper or access gated content? A plus address is faster than creating a new account somewhere. Just know that your real email is exposed.

If you use plus addresses regularly, Trick Plus is a free tool that helps you organize and track your plus-sign addresses in one place. It’s handy if you want to keep tabs on which tags you’ve used where — especially once you’ve got dozens of them floating around.

The simple rule of thumb? Use the Gmail plus trick for organization. Use something else for privacy.

Gmail’s Built-in Alias Options (And Their Limits)

Beyond the plus trick, Gmail offers a few other alias-like features. None of them fully hide your email, but they’re worth knowing about.

The “Send Mail As” Feature

Gmail lets you add another email address and send messages “as” that address. This is useful if you own multiple email accounts and want to manage them from one inbox. But you need to already have the other address — Gmail doesn’t generate one for you.

Google Workspace Aliases

If you’re on Google Workspace (the paid business version), admins can create up to 30 aliases per user. These are real alternate addresses on your domain. They’re handy in a business context but require a paid Workspace subscription and admin access.

The Dot Trick

Gmail also ignores dots in the local part of your address. So j.a.n.e@gmail.com and jane@gmail.com deliver to the same inbox. Like plus addressing, this doesn’t hide anything. It’s a quirk of Gmail’s system, not a privacy feature.

For a full walkthrough of these options, check out How to Set Up a Gmail Alias in Under 3 Minutes.

The bottom line: Gmail’s built-in Gmail alias options are fine for convenience and inbox management. But they all share the same flaw — your real email address is always visible or easily discoverable.

What Actually Hides Your Email Address

If the goal is to keep your real email address out of company databases, marketing lists, and breach dumps, you need an address that isn’t connected to your real one in any visible way.

That’s what dedicated email alias services do. Instead of tagging your existing address, they generate a completely separate address — something like random123@alias-domain.com — that forwards to your real inbox behind the scenes. The site you give it to never sees your actual email. If that alias gets compromised, you disable it. Your real address stays clean.

This is fundamentally different from the plus trick. It’s the difference between giving someone your real phone number with an extension versus giving them a separate forwarding number that you can disconnect at any time. For a deeper dive on how forwarding-based aliases compare to other approaches, see Email Alias vs Forwarding.

Create alias in seconds

Start protecting your inbox now — it’s free!

Create my first alias

How a Dedicated Email Alias Works

Here’s the short version of how a service like Alias Email works:

1. You generate a unique alias. On any signup form, you create a random or custom alias address (like shop-oct24@yourdomain.com) instead of entering your real email.
2. Mail gets forwarded. Anything sent to that alias lands in your real inbox. The sender never learns your actual address.
3. You can reply anonymously. Replies go back through the alias, so your real email stays hidden in both directions.
4. You disable it whenever you want. Getting spam on a specific alias? Turn it off with one click. Your real inbox stays untouched.

Alias Email offers browser extensions for Chrome, Safari, Firefox, Edge, Opera, Vivaldi, Brave, and Tor — plus a web dashboard where you manage everything. No mobile apps, but the extensions work wherever your browser does. You can grab the extension here.

The free plan gives you 10 aliases and 1 custom domain. That’s enough to cover your most important accounts. If you need more, the premium plan runs $3.33/month (billed annually) and unlocks unlimited aliases plus 2 custom domains.

Beyond basic forwarding, you also get tracking protection (blocking spy pixels in emails), multiple recipient forwarding, and the ability to send new emails from any alias — not just reply to them. For a step-by-step setup guide, see how to create an email alias.

While you’re shoring up your security, it’s also worth making sure you’re not reusing passwords across those accounts. A password generator paired with unique aliases per site is about as solid as personal email security gets.

Plus Trick vs Email Alias: Quick Comparison

Key Takeaways

• The Gmail plus trick is a filtering tool, not a privacy tool. Your real email address is always exposed.
• Data brokers and spammers routinely strip the + tag to get your actual address. Many websites won’t even accept it.
• Plus addressing is still useful for inbox organization and identifying who leaked your data. Tools like Trick Plus can help you manage your tagged addresses.
• Gmail’s built-in alias options (dots, “Send as,” Workspace aliases) don’t hide your identity either.
• A dedicated email alias service generates completely separate addresses that forward to your inbox without revealing it.
• Alias Email offers 10 free aliases with browser extensions for all major browsers — enough to start protecting your most sensitive accounts today.

The Gmail + trick had a good run as casual privacy advice. But once you understand that it was never designed to hide anything, the next step is clear. If keeping your real email out of databases, breach lists, and spam pipelines matters to you, a free email alias does what the plus trick can’t. You can get started with Alias Email in about two minutes — no plus sign required.

Every time you type your real email address into a sign-up form, you’re making a bet. You’re betting that company won’t get breached, won’t sell your info to data brokers, and won’t spam you into oblivion. Spoiler: you’ll lose that bet more often than you’d like. In 2024 alone, over 3,000 data breaches exposed billions of records — and email addresses were in nearly every single one.

An email alias gives you a way out. Instead of handing over your actual address, you create a separate address that forwards mail to your real inbox. If that alias gets compromised or annoying, you just turn it off. Your real email stays untouched. It’s like giving out a phone number that you can disconnect at any time — without changing your actual number.

The good news? You can create email aliases for free using Gmail, Outlook, iCloud, or a dedicated service like Alias Email. This guide walks you through every method, step by step, so you can pick the one that actually fits how you use email.

Table of Contents

1. What Is an Email Alias (And Why Would You Want One?)
2. The Gmail Plus (+) Trick — And Why It’s Not Enough
3. How to Create an Email Alias in Gmail
4. How to Create an Email Alias in Outlook
5. How to Create an Email Alias in iCloud
6. Email Alias Options Compared
7. Why a Dedicated Email Alias Service Beats Built-in Options
8. How to Set Up a Free Email Alias with Alias Email
9. Best Practices for Managing Your Aliases
10. Key Takeaways

What Is an Email Alias (And Why Would You Want One?)

An email alias is a forwarding address. Mail sent to the alias lands in your real inbox, but the sender never sees your actual email address. Think of it as a mask for your inbox.

Why bother? A few reasons. You can give a unique alias to every service you sign up for, which means you’ll know exactly who leaked or sold your info when spam starts showing up. You can kill a compromised alias without disrupting everything else tied to your main address. And if you’re signing up for something sketchy — a free trial, a one-time download, a forum you’ll never visit again — an alias keeps your real inbox clean. For a deeper dive, check out our full explanation of what an email alias is and how it works.

Some people confuse aliases with email forwarding or temporary burner addresses. They’re related but not the same. An alias is a persistent address you control — you can keep it running forever or shut it off whenever you want. According to a Verizon DBIR report, over 80% of breaches involve stolen credentials or personal data — and your email address is usually the first piece to go.

The Gmail Plus (+) Trick — And Why It’s Not Enough

You’ve probably seen this tip floating around: just add a + sign and a tag to your Gmail address. So you+shopping@gmail.com and you+newsletters@gmail.com both deliver to you@gmail.com. It’s built into Gmail and requires zero setup.

Sounds great. Here’s the problem: it doesn’t actually hide your real email address. Anyone looking at you+shopping@gmail.com can see your real address is you@gmail.com. It takes about two seconds to strip the plus sign. Many websites do exactly that, either intentionally or because their form validation rejects the + character entirely.

The plus trick is useful for filtering and organizing mail. It is not useful for privacy. If a data broker gets you+randomsite@gmail.com, they have your real address. No work required. You can read more about how this works on Google’s support page, but understand that it was designed for organization, not protection.

That said, if you do rely on Gmail’s plus addressing and want to get more out of it, check out Trick Plus — a free tool that helps you manage and track your plus-sign aliases in one place. It won’t solve the privacy gap, but it makes the plus trick significantly more organized and useful for the things it’s actually good at, like filtering and spotting which services share your info.

How to Create an Email Alias in Gmail

Gmail doesn’t offer true alias creation in the way a dedicated service does, but you can add an alternate “send as” address. This lets you send and receive from a different address within your Gmail interface. Here’s how:

1. Open Gmail and click the gear icon in the top right, then See all settings.
2. Go to the Accounts and Import tab.
3. Under “Send mail as,” click “Add another email address.”
4. Enter the name you want recipients to see and the alias address. Uncheck “Treat as an alias” if you want to keep them separate.
5. Gmail will send a verification email to that address. Click the confirmation link or enter the code.
6. Once verified, you can choose to send from that address using the “From” dropdown when composing a new email.

The catch: you need to already own or have access to the other email address. Gmail doesn’t generate new addresses for you. This feature is really about consolidating existing accounts, not creating new aliases on the fly. For full details, see Google’s alias documentation.

If you’re on Google Workspace (the paid version), admins can create up to 30 aliases per user. But for regular free Gmail accounts, you’re limited to the plus trick and the send-as workaround above.

How to Create an Email Alias in Outlook

Microsoft makes it a bit easier. You can create actual alternate email addresses tied to your Outlook.com account — up to 10 aliases. Here’s the process:

1. Sign in to your Microsoft account page.
2. Click Your info at the top, then select “Manage how you sign in to Microsoft.”
3. Under Account aliases, click “Add email.”
4. Choose either to create a new Outlook.com address or add an existing email address as an alias.
5. If creating new, pick your address (e.g., yournewname@outlook.com) and confirm.
6. The alias is active immediately. Mail sent to it arrives in your main Outlook inbox.

This is better than Gmail’s approach because you’re getting a genuinely different address. But there are limits — 10 aliases total, and you can only add 3 per year (Microsoft recently tightened this). All aliases are also under the @outlook.com, @hotmail.com, or @live.com domains. No custom domains unless you’re paying for Microsoft 365. Full instructions are on Microsoft’s support page.

How to Create an Email Alias in iCloud

Apple offers two flavors of aliases. The first is traditional iCloud Mail aliases. The second is Hide My Email, which is the more interesting option. Let’s cover both.

iCloud Mail Aliases

1. Go to iCloud.com and open Mail.
2. Click the gear icon and select Preferences.
3. Go to the Accounts tab and click “Add an alias.”
4. Choose an alias name, a label, and a color for easy identification.
5. Click Done. Your alias is active.

You get a maximum of 3 aliases, and they all use the @icloud.com domain. Pretty limited.

Hide My Email (iCloud+)

If you pay for iCloud+ (starts at $0.99/month), Apple’s Hide My Email feature generates random addresses like random_string@privaterelay.appleid.com. These forward to your real iCloud inbox. You can create them directly in Safari, Mail, or the Settings app on iPhone.

This is genuinely useful for privacy. The generated addresses are random and can’t be reverse-engineered to find your real email. But you need to be in the Apple ecosystem, you need to pay for iCloud+, and you can’t use a custom domain. Check Apple’s support page for the latest details.

Create alias in seconds

Start protecting your inbox now — it’s free!

Create my first alias

Email Alias Options Compared

Here’s how the major options stack up side by side:

Why a Dedicated Email Alias Service Beats Built-in Options

The built-in options from Gmail, Outlook, and iCloud are fine for light use. But they all share the same fundamental problem: they’re tied to one provider. Your Gmail aliases only work with Gmail. Your iCloud aliases only work within Apple’s ecosystem. Switch providers and you’re starting from scratch.

A dedicated email alias service like Alias Email sits between the outside world and whatever inbox you already use. Gmail, Outlook, ProtonMail, Fastmail — doesn’t matter. The aliases forward to wherever you want. If you switch email providers next year, your aliases keep working. Nothing breaks.

There’s also the privacy angle. Built-in aliases from major providers are often easy to link back to your main account. A dedicated alias service generates completely independent addresses. There’s no visible connection between your alias and your real email. That matters when you care about keeping your real identity off the radar — especially given that the average data breach now costs $4.4 million, and exposed email addresses are often the starting point.

And then there’s control. Want to turn off an alias that’s getting spam? One click. Want to see which service sold your email? Give each one a unique alias and wait. The answer becomes obvious. It’s the same logic behind using a unique password for every account — compartmentalization is just good security hygiene.

How to Set Up a Free Email Alias with Alias Email

Setting up an alias with Alias Email takes about two minutes. No credit card needed.

1. Install the extension. Head to the download page and grab the browser extension for Chrome, Firefox, or Edge.
2. Create your account. Sign up with your real email address. This is the inbox where forwarded mail will land. Alias Email never shares or exposes this address.
3. Generate your first alias. Tap the create button and you’ll get a new, unique email address instantly. You can customize the alias name or let the email alias generator pick a random one for you. The free plan gives you up to 10 aliases — more than enough to get started.
4. Start using it. Copy the alias and paste it into whatever sign-up form, newsletter, or service you’re joining. Mail sent to that alias shows up in your real inbox. When you reply, the recipient sees the alias — not your real address.

That’s it. No DNS records to configure, no verification hoops to jump through. For a more detailed walkthrough with screenshots, see our full guide on creating an email alias.

Best Practices for Managing Your Aliases

Creating aliases is the easy part. Keeping them organized takes a little thought. Here are some practical tips:

• Use one alias per service. This is the single most useful habit. Give Netflix one alias, your bank another, that random forum a third. When spam appears, you’ll know exactly which service is responsible.
• Name your aliases descriptively. Something like shopping-amazon@ or newsletter-tech@ is much easier to manage than a random string. Future you will appreciate it.
• Disable aliases you no longer need. Cancelled a subscription? Stopped using a service? Turn off the alias. No more mail from them, ever. This is something you simply can’t do with your real address.
• Don’t use aliases for critical accounts. Your bank, your primary social media, your government tax portal — use your real email for things where account recovery matters most. Aliases are best for the hundreds of less-critical sign-ups.
• Combine aliases with strong passwords. An alias protects your email identity. A unique password protects your account. Use both together with a password generator and you’ve seriously reduced your attack surface.
• Review your aliases periodically. Every few months, look at what’s active. You’ll probably find aliases you forgot about that you can safely disable.

If you’re interested in using throwaway addresses for especially short-term needs, our burner email guide covers when disposable addresses make more sense than a permanent alias.

Key Takeaways

• An email alias forwards mail to your real inbox without exposing your actual address. It’s one of the simplest ways to protect your privacy online.
• Gmail’s plus (+) trick is not a real alias — your address is still visible and easily stripped. Tools like Trick Plus can help organize it, but they can’t fix the underlying privacy gap.
• Gmail, Outlook, and iCloud all offer some form of alias support, but with meaningful limits on quantity, customization, and provider lock-in.
• A dedicated email alias service gives you unlimited aliases, works with any email provider, and completely hides your real address.
• Best practice: use a unique alias for every service, name them clearly, and disable the ones you stop using.
• Combining aliases with unique passwords per account is one of the strongest moves you can make for your online security.

Your email address is the key to almost every online account you own. Protecting it doesn’t have to be complicated or expensive. Whether you use the built-in tools from Gmail, Outlook, or iCloud — or go with a dedicated service for more control — creating email aliases is one of the easiest privacy wins available to you right now. If you want to get started with unlimited free aliases that work with any inbox, give Alias Email a try.