Started to move off Google’s services to proton:
You must log in or register to comment.
If you have Proton Premium point your domain to SimpleLogin and use it. Its included with Proton Premium. Its helped me root out 2 places so far that have sold my email address or were compromised and failed to disclosure.
i also use proton, but i just use a custom address with every unique vendor/account. i know almost immediately who sold my address. it also prevents hacked systems from matching addresses in other systems.
For anyone who wants to do this easily: afaik (ymmv) most mail systems will accept aliases to your account if you put a + after your email username. for example, if you’re foo@example.com, then foo+bar@example.com would still route to your inbox but you’d be able to see that it was sent to a different address than your own. i do this for any email i put into a website I don’t trust (which is most) and if you use the company name it’s a really easy way to see who sold your data
For a spammer it literally takes less than ten seconds to clean a list of one million addresses from “plus addresses” and get back the original one without the source. Only amateur spammers use raw lists without any sanitization
Just be aware that it’s not guaranteed - I’ve had services remove everything after the ‘+something’ on my email address. Some will also not see that as a valid email address, depending on how they do their input validation.
Yes that’s what SimpleLogin does and its part of the Proton umbrella. You can use your own custom domain or a SimpleLogin domain to create email addresses. It also enables you to send from the custom addresses so the end user never learns your true email address. SimpleLogin also has mobile apps so you can create addresses very easily.
yeah, its like what i do, but with more steps. i guess it makes reply addressing slightly easier, but ive found i rarely need send to most of my vendor addressing
Serious question, why SimpleLogin vs Proton aliases?
You cannot turn off the proton aliases, one of my aliases (those with +) got compromised and I’m still getting phishing emails on that one. You can create a rule for that mail but you cannot completely disable it. There is also Proton Pass which does the same as SimpleLogin and also stores Passwords. You should check it out as well.
Ahh, okay, that makes some sense. Thanks!
You cannot turn off the proton aliases
What do you mean? Of course you can.
if youre running a full domain, you dont even need to manually create alias’ unless you need to reply/send as.
i’ve found i rarely need to do that, so you can literally just use an email address literally off the top of your head, have it all forwarded to a catch all and youre done. none of this extra service stuff. again, unless you require ‘send as/aliasing’.
Yeah, my bad, that’s what I do - so I just wasn’t sure what the benefit of SimpleLogin was…fully open to admit maybe I’m missing something though.
I basically create an email alias for every service I use and when leaks happen I know exactly who the offender is - which is nice…I guess.
I’ve caught a couple but they weren’t subtle about it at all. I got an email from Norton antivirus that referenced the seller directly. No shame.
