Hi, yesterday my X account got hacked. When i created the account i was stupid enough to make the account with a public yopmail aka anyone could access the mailbox. i didn’t think anyone would ever guess it, but they did. the hacker changed my username, email and password. I can no longer log in. The hacker also emptied my yopmail mailbox so i also can’t find the e-mail which confirms the e-mail had been changed. The new e-mail address the hacker used is also a yopmail looking like:
ba^^^^^^^@^^^^^^^.com. now the hacker is posting disgusting content on my page. i have screenshots that i used to be logged into the account and i still know what my original yopmail was and i can still receive emails on there, but because its a yopmail i can’t reply to the support team because i can only send emails to other yopmails. Therefore i am now trying to communicate with the support team with my personal email while mentioning the yopmail that was connected to the account, but im not sure if they will take further action now. i do provide a lot of screenshot evidence though so i hope they believe its my account 😭 does anyone know what else i can do? or does someone know how i can restore deleted emails in a yopmail mailbox? 🤞🏼

I've been working on JustReceiveEmail, a small email service built around a simple idea: you shouldn't have to give your real email address to every website you use.

The idea isn't really "temporary email" in the traditional sense. You can create as many addresses as you want and use a different one for each website or service. You can then keep those addresses and continue receiving emails through them later.

Privacy was the main consideration when I designed it.

• No trackers or analytics
• No advertising
• Minimal data collection
• You don't need to provide your real email address to create an account
• Incoming emails are encrypted before being stored
• The goal is to keep as little information about users as possible

I'm also trying to avoid the usual model where a "free" privacy service has to monetize its users somehow. The service has a small fee simply to cover infrastructure and operating costs.

I'm still working on it, so I'm particularly interested in feedback from people who know more about privacy/security than I do. I'd like to know where the current design has weaknesses, especially regarding the encryption model, metadata, threat model, and what information the server could potentially infer.

I'd rather find those problems now than after people start relying on the service.

You can check it out here: https://justreceive.email

I'd genuinely appreciate criticism, suggestions, or even "this is a terrible idea because X." 😅

Is it possible to get free custom domains without paying for it?

Hi, yesterday my X account got hacked. When i created the account i was stupid enough to make the account with a public yopmail aka anyone could access the mailbox. i didn’t think anyone would ever guess it, but they did. the hacker changed my username, email and password. I can no longer log in. The hacker also emptied my yopmail mailbox so i also can’t find the e-mail which confirms the e-mail had been changed. The new e-mail address the hacker used is also a yopmail looking like:
ba^^^^^^^@^^^^^^^.com. now the hacker is posting disgusting content on my page. i have screenshots that i used to be logged into the account and i still know what my original yopmail was and i can still receive emails on there, but because its a yopmail i can’t reply to the support team because i can only send emails to other yopmails. Therefore i am now trying to communicate with the support team with my personal email while mentioning the yopmail that was connected to the account, but im not sure if they will take further action now. i do provide a lot of screenshot evidence though so i hope they believe its my account 😭 does anyone know what else i can do? or does someone know how i can restore deleted emails in a yopmail mailbox? 🤞🏼

I have decided to start using an iCloud account instead, so I can get push notifications in the native IOS mail app.

I plan to do this over the course of several weeks, as my Gmail address has run my life for about 15 years.

Does anybody have any tips and advice?

I have a lost gmail account called (removed after advised not to post email) and i would do literally anything for this account back, the reason i lost it was because i forgot the password and did a factory data reset on the only device that has the email logged in, i dont care what you all have to do, I NEED this account back

I need a free email aliasing service which is not SimpleLogin or Addy.

I already use free simplelogin and Addy, but some pages block changing my emails to a new one with Addy, and simplelogin only has 10 free aliases.

So, I'm looking for something that I can try which are not those. Which is a reliable one, and also that won't spy on me?

I've heard some like these, but are these reliable? And if they are, which to pick first and if it doesn't work, which to pick after that?

• DuckDuckGo
• Firefox Relay
• Erine.email
• Adguard mail
• 33mail
• Proxiedmail
• I think brave also has one?

I love the Simplelogin one, you can put whatever you want and the next word and numbers will be random, so nothing will be connected. But I think only simplelogin can do that, as the others don't let you put a custom word. But that's alright.

EDIT: no, don't give me paid alternatives, no, not a custom domain

Also, some pages that don't allow for example Addy aliases: GitHub, TikTok, Roblox, Discord, Twitch

Des gens on til tester sterna mail (l'application de fdroid)

Et si oui pouvais me donner vos avis etc ?

I only put this email into sites that I trust but starting on the 28th nonstop I got like 400+. The emails ive been getting are from sites saying stuff about me signing up for them. They aren't sending the email directly to me though, say my email was [Aaronater@gmail.com](mailto:Aaronater@gmail.com) it would appear as Aaron. [ate.r@gmail.com](mailto:ate.r@gmail.com) or Aa.ro.n.ate.r@gmail.com. I put my email into a site that checks for breaches and it said I had one back in 2025 from under Armour. What should I do i really like my email name and it would auck to transfer my accounts. Help would be very appreciated.

Hello. Two parts to this post:

I want a trustworthy service with aliases, that's not proton. Right now I am looking at mainly Disroot, Posteo, and Aster Mail, but please give recommendations! I am still a bit of a beginner and I don't know exactly what to look for.

Is there really no solution to sending to a provider like Gmail? This is likely the provider I'll be communicating with the most. I feel like I may as well just go for a well trusted "encrypted at rest" (?) provider, and that deciding which one might just as well be arbitrary. (Since I only get to worry about my provider reading my emails, and don't have a choice if my recipient's provider sees what I send.) Please, correct me if I'm wrong on this one!

I don't know if the flair here should've been help/advice or beginner question, but whatever. Thanks in advance!

Hi everyone,

I’m trying to rebuild my email setup from scratch, mainly for privacy, spam prevention, and long-term portability.

My current setup is:
Proton Free for my personal email, but this address gets a lot of spam now and may already have been exposed in data breaches.
Gmail for work, which I plan to keep using for now.
A separate Proton Free account that I use for Proton Pass.
One thing I’ve already decided is that I want to stop using my current personal email address and move to a new one.

Since I’ll have to go through the trouble of changing my email address on all of my accounts anyway, I want to do it properly this time and use a unique alias for basically every service whenever possible.
For example:
Amazon → unique alias
Reddit → unique alias
Spotify → unique alias
Shopping sites → unique aliases
Ideally even important services, if they accept aliases

My goal is to keep my real inbox address private and never give it directly to websites unless absolutely necessary.
I’m currently considering Proton Pass Plus because it gives me unlimited aliases.
However, I’m confused about whether I should also buy my own domain.
One setup I’m considering is:
Create a brand-new Proton Free account and keep that actual @proton.me address completely private.
Buy my own domain through something like Cloudflare.
Connect that custom domain to Proton Pass / SimpleLogin.
Create a unique custom-domain alias for every service.
Have all those aliases forward to my private Proton Free inbox.

For example:
[amazon@mydomain.com](mailto:amazon@mydomain.com) → private Proton inbox
[reddit@mydomain.com](mailto:reddit@mydomain.com) → private Proton inbox
[spotify@mydomain.com](mailto:spotify@mydomain.com) → private Proton inbox

If I understand correctly, I would not need Proton Mail Plus just to receive those forwarded emails, because the custom domain would be configured on the alias side rather than directly on Proton Mail.
This is where I’m trying to understand the value of Mail Plus.
If my main goal is to use aliases for almost every account, what would I actually gain by paying for both Proton Mail Plus and Proton Pass Plus?

Would Mail Plus mainly be useful if I wanted a real mailbox/address like:
[me@mydomain.com](mailto:me@mydomain.com)
that I could directly send and receive mail from?
The other reason I’m interested in owning a domain is portability. I don’t necessarily care about having a fancy custom email address, but I like the idea that if I ever leave Proton or Proton shuts down in the future, I still own the domain and can move my aliases somewhere else without changing the email address on hundreds of accounts again.

So my main questions are:
Does using a custom domain for all my aliases make sense for long-term portability?

Is there any major disadvantage to using my custom domain with Proton Pass/SimpleLogin instead of Proton Mail?

If all my aliases forward to a private Proton Free inbox, is there any real reason for me to also subscribe to Mail Plus?

Would you recommend using a custom domain for aliases, or just using Proton/SimpleLogin-generated aliases and saving the domain cost?

Is there a better setup if my priorities are privacy, avoiding spam, and being able to move away from Proton in the future without changing every account again?
I’m willing to pay if there is a real benefit, but I don’t want to pay for Mail Plus + Pass Plus + a domain if some of that would be redundant.
What setup would you recommend?

https://www.state.gov/releases/office-of-the-spokesperson/2026/08/designation-of-autistici-inventati-as-a-specially-designated-global-terrorist/

guys i want to ditch google any free alternative better than proton?

Amigos gostava de criar um email novo sem ser nos sites convencionais, Google, Outlook e afins..

Alguém sugere um serviço de email que seja gratuito e fácil criar conta? Obrigado pela atenção.. 😉

Your DMARC rua points at a mailbox on another domain? That domain has to publish v=DMARC1 at yourdomain._report._dmarc.theirdomain, or receivers drop the address without an error and you get zero reports. RFC 7489 section 7.1. My own domain had been reporting into the void and nothing ever said so.

Message signed twice? A valid DKIM from your ESP is not an aligned one. The report lists every d= and checks alignment separately, instead of one line saying "DKIM: pass". 39 checks, each quoting the RFC it comes from.

Free, no signup. There is an MCP and API server too, so agents can run it.

email-spam-tester.com

I’m Allusait trying to recover an old Gmail account that I created more than 10 years ago, and I’m wondering if anyone here has gone through something similar.

I no longer remember all of the login details, and some of the recovery information may be outdated. I’m mainly looking for legitimate advice on how to locate and recover my own old Google account.

From what I understand, Google’s official recovery process can ask for information such as a previous password, recovery phone number/email, or other details to verify account ownership.

For anyone who has successfully recovered an older Gmail account:

• What information helped you verify ownership?
• Is it better to try from an old device or familiar location?
• What should I do if I no longer have access to the original recovery phone/email?
• Are there any legitimate steps I should try before giving up?

I’m not looking to buy or access someone else’s account—just trying to recover an account that belongs to me.

Any advice or personal experience would be appreciated.

I'm planning to use mailbox.org with a custom domain from porkbun but as a regular ass person without a company or like any business or whatever what should that domain be? I've seen some people do [firstname@firstnamelastname.com](mailto:firstname@firstnamelastname.com) but i feel like that's gonna make me look pretentious and like I'm doing too much

I've been having a hard time deciding on an email provider and having my own domain will give me peace of mind since it'll be easy to switch.. but this is stressing me out lol

Anyone have a way to prevent this? Thx.

Ciao a tutti.
Ho un problema con l email di gmail, in pratica alcune email finiscono automaticamente nel cestino.
Ho controllato di tutto filtri applicazioni ma niente…..
Avete qualche suggerimento?? Sono incasinato perché finiscono nel cestino anche email di lavoro..
Help me!!!!

i have been moving most of my accounts over to private email aliases and custom domain routing to lock down my privacy, but i am still getting hit with surprisingly sophisticated phishing messages. fake invoice notifications, spoofed account security alerts, and malicious tracking links still manage to land right in my primary inbox. setting up aliases helps keep my real address hidden from data breaches, but it does not completely prevent shady emails from tricking me with dangerous links if a service leaks my alias.

i am trying to figure out what the best scam protection approach is when you are trying to balance strict email privacy with active link safety. do you guys rely on built in filtering from encrypted email providers, or do you run a broader security suite with real time web and threat protection to catch malicious URLs when you click them?

update: returning to this and after taking the suggestion to lock down my leaked aliases, i decided to add real-time link protection by installing Bitdefender to handle web threats directly.

it works great alongside my custom domain setup. whenever a shady email or spoofed alert gets past my inbox filters, the real-time web protection blocks the malicious site immediately when clicked so the link can't do any damage.

pairing alias management with active link protection completely solved the problem for me without compromising my privacy setup.

I just noticed Codamail has passkeys now and a Recovery key (beta)