Set up masked email
Why it's there
When you hand every site your real email, one breach or one data-broker sale is enough to flood your inbox and link your accounts together. Masked email gives each site a different address, so a leak at one can't reach the others — and you can see exactly who leaked it.
What it is
A masked email (or alias) is a stand-in address that quietly forwards to your real inbox. The site only ever sees the alias. Switch an alias off later and the forwarding stops.
Choose how aliases are made
Open Settings → Masked email and pick a provider. Use whichever service you already have — or none:
| Provider | How it works |
|---|---|
| None | The default — Veridenti fills your real email everywhere. Masked email is optional. |
| Fastmail | Creates a fresh masked address per site; can also import aliases you already made. |
| addy.io | Creates aliases under your addy default domain; can import existing ones. |
| SimpleLogin | Creates aliases under your SimpleLogin domain; can import existing ones. |
| DuckDuckGo | Creates a fresh @duck.com address per site. |
| Firefox Relay | Fresh address per site — your custom subdomain if you have one, else @mozmail.com (free plan caps at 5). |
| Forward Email | Creates a fresh masked@yourdomain per site (needs your own domain). |
Connect a provider
Most providers need a one-time key so Veridenti can make aliases for you:
- In Settings → Masked email, choose your provider.
- Paste your provider's API key (for Fastmail it's an API token starting with fmu1-). Forward Email also asks for your domain.
- Click Save & use this provider. Veridenti verifies the key and, where supported, loads any aliases you already have.
Create an alias on a signup form
Once a provider is connected, Veridenti offers a masked address right where you need it:
- On a signup or newsletter form, click into the email field — a small mask icon appears inside it.
- Click it to open the Masked email — this site picker.
- Click Create a masked email (add an optional label first), or pick one you've already made. Veridenti fills the alias into the form.
To use your real address instead, open the same picker and choose Use my real email ("Always delivers").
Kill an alias later
If an alias starts getting spam, that site leaked or sold your address. Turn the alias off and the forwarding stops — your real inbox never sees another message from it. Leak Radar can point out which alias is affected, often before a breach is even public.
What if masked email isn't offered?
- Make sure a provider is selected and its key is saved in Settings → Masked email — the mask icon only appears once a provider is connected.
- Some embedded forms (a contest inside another site) load late; click into the email field again and the mask icon appears.