use email aliases so your real address never leaks

your email address is the one credential you hand out to literally everyone

think about how many places have your real email. every shopping site, every forum you joined once in 2014, every "sign up for 10% off" popup. each one of those is a place your address can leak, get sold, or get hit by a breach. once it's out there, it's out there forever. you can't un-leak an email address. but you can stop handing out the real one in the first place.

what email aliasing actually does

an alias service sits between you and everyone else. instead of giving a website yourname@gmail.com, you generate a random, unique address like sulky-otter-42@simplelogin.com and give them that instead. mail sent to the alias gets forwarded straight to your real inbox. the site, the spammer, the data broker, they never actually see your real address. they only ever see the alias. your real email becomes a secret that only you and the alias service know.

pick a service and set it up

there are a handful of solid options depending on what you already use:

simplelogin and addy.io are standalone services that work with any email provider, browser, or password manager. you install a browser extension or use their app, and it generates aliases on demand.

hide my email is built into apple's ecosystem. if you're already on an iphone or mac, it's sitting right there in your settings and in safari's autofill, ready to go with zero setup.

firefox relay does the same thing but lives inside firefox and your mozilla account. great if that's already your browser of choice.

pick whichever one fits your existing setup. the point isn't which brand, it's that you stop typing your real address into random signup forms.

give every single site its own alias

this is the part people skip and it's the part that matters most. don't make one generic alias and reuse it everywhere, that defeats the purpose. the whole value is in uniqueness. when you sign up for a newsletter, a shopping site, a forum, a random app, generate a fresh alias just for that one signup. most alias managers let you do this in two clicks right from the signup form itself.

yes, it's a little more friction than typing your normal email. that friction is the point. it turns every signup into its own isolated, disposable connection point instead of one shared weak spot.

spam becomes a built-in leak detector

here's where this actually pays off. if you start getting spam on the alias you only ever gave to one specific shoe store, you know with certainty that the shoe store leaked or sold your data. not "maybe it was that one site" guessing, actual proof. your inbox becomes a log file for who's careless with your information.

compare that to using your real address everywhere, where a breach notification means absolutely nothing because you have no idea which of the forty sites you signed up for was the source.

turning off the tap

once you know which site or sender is the problem, you don't need to unsubscribe, block, filter, or fight with anyone. you just disable that one alias. the second you flip it off, mail sent to it bounces into the void. the sender can email that address forever and it will never reach you again, no matter how aggressive their marketing team gets or how many times they sell your "address" to someone else. your real inbox was never exposed, so there's nothing left for them to find.

the takeaway

your real email address is infrastructure, treat it like one. don't hand it to every website that asks. use an alias service, generate a new one for every signup, and let your spam folder tell you exactly who's responsible when something goes wrong. it costs you a few extra seconds per signup and buys you the ability to shut off leaks individually instead of drowning in a flood you can't trace. set it up once, use it everywhere going forward, and your real address stays yours.