Loading page
About this tool
Scores the lockout risk of a signup and shows when a throwaway address is safe and when it will cost you the account.
The Disposable Email Policy Explainer scores how much an account depends on receiving mail later — password resets, login codes, payment notices, receipts, longevity — and turns that score into a verdict on whether a disposable address is safe. It compares four kinds of address by the properties that actually decide the outcome: how long each keeps a delivered message, whether the inbox is readable without a password, whether the address can still serve as your account-recovery inbox, and whether signup forms reject it. Open 10-minute inboxes have no authentication at all, so any login code sitting in one is readable by anyone who types the same address.
Open Disposable Email Policy Explainer on AltFTool — it loads instantly in your browser.
Choose What are you signing up for? — a one-off file download, newsletter, free trial, shopping order, work SaaS tool or a bank/government service — and set Days you must still receive mail there.
Tick the dependencies that apply: email is the only password reset, login codes or magic links arrive by email, money changes hands, you will need the receipt or warranty later, you expect to use it in a year — plus whether the signup form rejects disposable domains.
Read the lockout score out of 100 with the Recommended address type, then the How each address type holds up table showing whether each keeps mail long enough and whether it is password-protected; Copy decision saves it.
Five concrete dependencies, weighted to 100, instead of a vague warning.
A one-hour inbox is compared directly with the number of days you said you need.
Public throwaway, account-backed temp inbox, forwarding alias and your ordinary mailbox.
It is safe for anything that ends after the first message — a download link, a one-off coupon, a gated report. It is unsafe the moment the account has a password reset, a login code or a payment attached, because losing the inbox loses the account with no way for support to verify you.
For the open 10-minute-mail style services, yes. There is no password: whoever types the same address sees the same inbox, and the popular ones use predictable address patterns. Never let a one-time code, reset link or invoice land in one.
Signup forms check the domain against public blocklists of known disposable providers to stop repeat free trials, one-per-customer abuse and throwaway spam accounts. A forwarding alias on a normal or custom domain is not on those lists, which is why it gets accepted where a throwaway does not.
A forwarding alias: a unique address per service that delivers into your real mailbox and can be disabled the day it starts receiving spam. You keep every message permanently, you can still reply, and you keep the attribution that tells you which company leaked the address.