Guide
How to Use Temporary Email Safely
A step-by-step walkthrough of the ShieldMail interface, what each of the five controls actually does on the server, and how to handle the three things that commonly go wrong.
This is the operating manual. It covers what each control does, the order to use them in, and what to do when something does not work.
If you are still deciding whether a disposable address is the right tool at all, read what is a temporary email first — that question matters more than any of the mechanics below.
Before you start: the one decision
Everything else is mechanical. This is the part that determines whether you have a good day.
Will you ever need to receive mail at this address again after today?
If yes, close this page and use an alias instead. A disposable inbox cannot serve you in a month, and no amount of careful operation changes that. If no, continue.
Step 1: Take the address
It is already there. The address at the top of the homepage was requested the moment the page began loading; you do not need to press anything to create it.
Press Copy. The address goes to your clipboard and the button confirms. If your browser blocks clipboard access, the address is selectable text — select and copy it manually.
Step 2: Paste it, and watch the timer
Paste into the form you are filling. Then look at the countdown next to the address.
Sixty minutes is the default lifetime. That is the window in which mail can arrive and be read. If you are going to be slow — reading a long form, waiting on a manual approval — press Extend to add thirty minutes. You can press it more than once.
The timer is not decorative. When it reaches zero, the mailbox is released to the provider and a fresh one is generated automatically. Anything in the old one is unreachable from that moment.
Step 3: Collect the mail
Press Refresh. Messages typically arrive within about ten seconds of submitting a form, though a slow sender can take a minute or two.
Click any message to open it on the right. Three things happen before it renders:
- Scripts are stripped out entirely.
- Remote images are blocked, so tracking pixels never fire and the sender does not learn that you opened it.
- Link destinations are shown in full, so you can read where a button actually goes before clicking it.
That last one is worth using. Hover, read the domain, and confirm it matches the company you expect.
Step 4: Save anything you need, now
This step is skipped constantly and is the source of most regret.
There is no archive. When the mailbox expires, the contents are gone — not recoverable by you, by us, or by the provider. So while the message is open:
- Copy a verification code somewhere before you navigate away.
- Download an attachment or file immediately.
- Open a confirmation link now rather than "in a minute".
Step 5: Finish
Nothing is required. When the timer ends, the mailbox is released and replaced. If you want to move to an unrelated task before then, press Change for a fresh address rather than reusing the current one.
The five controls
| Control | What happens on the server |
|---|---|
| Copy | Nothing. Purely a clipboard action in your browser. |
| Refresh | Polls the provider using the token in your HttpOnly cookie and returns any new mail. |
| Extend | Asks the provider to push the expiry out by thirty minutes. |
| Change | Releases the current mailbox and requests a new one, preferring a different domain. |
| Reset | Same as Change, and clears the message list. Use when handing the screen to someone else. |
The three things that go wrong
A site rejects the address. The most common issue by far. Services subscribe to lists of known disposable domains and refuse them at the form. Press Change to draw from a different provider and try again — the chain is four providers deep, and block lists cover them unevenly. If two or three attempts fail, treat that as a signal: this service expects a durable contact channel, and the signup probably belongs in the alias tier.
Mail never arrives. Press Refresh once more first; delivery is usually fast but not instant. If nothing appears after a minute or two, the likeliest explanation is that the service silently rejected the domain at signup rather than telling you. Press Change and register again.
The inbox will not create. If the address area shows an error instead of an address, every provider in the chain failed to respond — usually a transient outage. Press the retry button in the error box. If it persists, wait a few minutes; there is nothing to fix on your side.
Operating rules worth keeping
- One address per unrelated task. Reusing one address across four signups links those signups together and gives them a shared expiry.
- Treat every message as public. The mailbox has no password. Anyone who knows the address can read it.
- Never send anything to it that grants access to an account you care about.
- Save before you close. Assume the tab is the only copy, because it is.
- Do not use it to get around a rule. Ban evasion and duplicate accounts are covered in acceptable use and are what gets disposable domains blocked for everyone.
FAQ
Do I need to create an account to use this?
No, and there is nothing to create. No signup, no password, no personal details. The address is issued to your browser session and released when it expires.
Can I choose my own address or domain?
Not directly. The address and domain come from whichever upstream provider answers first. Pressing Change requests a different one, which is how you move between domains.
How many times can I extend the timer?
There is no fixed cap, but each extension is a request to the provider and may be refused if the mailbox is close to its own hard limit. When that happens, take a new address instead.
Does closing the tab delete my inbox?
No. The session lives in a cookie, so reopening the page within the window returns you to the same mailbox with its messages intact.
Can two people use the same address at once?
Technically yes, and that is the risk. There is no access control, so anybody who knows the address sees the same mailbox you do.