loading...
your inbox
no emails found
you don't have any emails in your inbox. try refreshing the page.
Disposable Email
Throwaway email that self-destructs. Use it and walk away.
you don't have any emails in your inbox. try refreshing the page.
Throwaway email that self-destructs. Use it and walk away.
A disposable email is a fully functional inbox that exists for a fixed period and then permanently deletes itself along with every message it received. It accepts mail like any normal address. The critical difference is that it was designed from the start to be temporary.
The address you see above is already active. Copy it, paste it into any registration form, and messages will appear on this page within seconds. When the 2-hour window closes, everything disappears.
Running a disposable email service requires three layers working together. An SMTP server handles incoming mail at the network level, accepting connections on port 25 and processing messages according to RFC 5321. A processing pipeline parses each email, strips potentially malicious HTML (tracking pixels, embedded scripts, external resource loading), extracts any verification codes or OTP patterns, and stores the sanitized result. A real-time delivery layer pushes new messages to your browser the moment they arrive.
Trashbox uses Haraka for SMTP, Redis for message queuing and real-time pub/sub, SQLite in WAL mode for persistent storage, and WebSockets for instant browser delivery. A background cleanup process runs continuously, deleting expired inboxes and physically removing attachment files from disk. Once an inbox expires, the SMTP server returns a 550 permanent failure for any subsequent delivery attempts to that address.
Your email address is currency. Every company that asks for it during sign-up is making a transaction: they give you access, you give them a direct line to your attention. That line gets monetized through promotional emails, remarketing campaigns, and — when their database inevitably gets breached — by third parties who purchase or steal the data.
The numbers are concrete. The average person receives 121 emails per day. Over 45% of all email worldwide is spam. Once your address enters the ecosystem, removing it is practically impossible. You can unsubscribe from individual senders, but you can't un-breach a database.
Disposable email inverts this dynamic. The service gets a valid address for its verification flow. You get access. And the address you provided was never connected to your identity in the first place. When the inevitable breach happens, the leaked address is already dead.
An important distinction. Disposable email makes your address temporary. It does not make you anonymous. Your IP address is still visible to the website you're signing up for. Your browser fingerprint is still trackable. If you used your real name in the registration form, that's still in their database linked to whatever email you provided.
If you need actual anonymity, you need a VPN or Tor browser combined with disposable email, and you need to avoid entering personally identifiable information during sign-up. Disposable email is one layer of privacy, not a complete solution.
Certain platforms actively detect and reject addresses from known disposable email domains. This is implemented through blocklists — databases of domains associated with temporary email services. Major services that commonly block disposable email include:
For these services, use your permanent email address. For everything else — and that's the vast majority of online sign-ups — disposable email works perfectly.
Creating a dedicated "junk" Gmail account seems practical until you examine what it actually involves. Google requires a phone number during sign-up, tying the account to your real identity. The inbox persists indefinitely, accumulating a history of every throwaway account you've created. Google indexes all of it for advertising. And if someone compromises that one Gmail account, they can password-reset every service you registered with it.
Disposable email eliminates all of these risks because it eliminates persistence. There's nothing to accumulate, nothing to compromise, and nothing to link back to you.
Most disposable email services treat the inbox as an afterthought — a simple text dump of whatever the SMTP server received. Trashbox processes every incoming email through a security pipeline before displaying it. HTML is sanitized with DOMPurify. External image loading is blocked. Script tags are stripped. Tracking pixels are removed. What reaches your browser is the content of the email without any of the surveillance infrastructure that typically comes embedded in it.
OTP codes and verification links are automatically detected and highlighted for one-click use. The interface runs in 20 languages. There are no analytics scripts, no advertising trackers, and no account system. The server retains zero data after your inbox expires.
Get a disposable email address →
they're functionally the same thing. "disposable email" emphasizes that the address is meant to be thrown away. "temp mail" emphasizes that it's temporary. both describe a short-lived inbox that auto-deletes.
yes. trashbox accepts and displays email attachments. files are stored temporarily on the server and deleted when the inbox expires.
2 hours on this page. for shorter windows, try 10 minute mail or 15 minute mail.
yes. the extend button resets the countdown to a fresh 2 hours from the current moment.
yes. click the change address button and type your preferred alias. if it's available, it's yours for the session.
no hard limit. generate a new address whenever you need one. each runs on its own independent timer.
no. disposable email is receive-only by design. this prevents abuse and keeps the service focused on its primary purpose.
no. the server stores only the temporary address and its messages. both are permanently deleted when the inbox expires. there are no analytics, no logs, and no backups of expired data.
some can. websites use domain blocklists to reject known disposable email providers. most standard sign-ups don't check, but high-security services often do.
yes. using a disposable email address is legal in virtually every jurisdiction. what you do with it may not be — fraud is fraud regardless of which email address you use.