One alias per site
Identify the source of suspicious messages and pause that alias separately when you change the account email.
First verify your real inbox, then create separate aliases for shopping, subscriptions, or communities. If an address is exposed, pause only that entry without changing your primary email.
The verification code is sent only to the email you enter, confirming that you’re authorized to receive forwarded messages.
Open the email you just received and enter the short-lived verification code. We’ll never ask for your email password.
After email verification succeeds, enter the code shown in your authenticator app. Users without two-step verification will skip this step automatically.
Codes stay valid for 10 minutes. Never share your verification code or authenticator secret with anyone.
Use a recognizable prefix for each site, without including personal information.
After logging in above, create your first forwarding address for a specific service. New aliases deliver messages to your verified email.
Step 1: click Enable and scan the QR code with your authenticator; Step 2: save the secret key; Step 3: enter the authenticator code to confirm. Two-step verification will not turn on until setup is confirmed.
Use this log to confirm delivery status and investigate unusual sources. It should not be your only archive for important email.
After you create an alias and receive email, the sender, subject, and status will appear here. Attachments should still be saved in your destination inbox.
Identify the source of suspicious messages and pause that alias separately when you change the account email.
Financial, medical, government, and work accounts need the most reliable recovery options and should not depend on a forwarding chain.
An alias hides your real address, but it doesn’t automatically make external links, attachments, or impersonation emails safe.