Temp Mail (Disposable Inbox)
Generate a throwaway, receive-only email address, catch a verification message, and let it self-destruct in an hour. No signup. Anti-abuse by design.
published
- [FREE]
- [NO_SIGNUP]
- [SAVES_DATA]
⚠ Unlike most of the site, this tool sends your input to a server and stores it to work. It tells you exactly what it keeps and why — see the tool and the privacy page.
Temp mail gives you a disposable, receive-only email address: use it for a sign-up you don’t trust, read the message here, and let it disappear in an hour — keeping your real inbox clean.
Why this tool has a server
Receiving email can’t happen in a browser — a real mail server has to accept the message. This tool uses Cloudflare Email Routing to deliver mail to a small email Worker that parses it and stores the plain text in a database; this page then polls for new messages. It’s the heaviest backend on the site, and the only one that receives email.
Built to resist abuse
Disposable-mail services are a classic spam vector, so this one is constrained on purpose:
- Receive-only. There is no send path anywhere — it cannot emit mail, so it can’t be used to send spam.
- Bot-checked, random addresses. Creating an inbox needs a quick verification, and the address is random — no squatting a known name or impersonating someone.
- Short-lived. The inbox and its messages are deleted after 1 hour.
- Capped and text-only. Each inbox keeps its 20 most recent messages; only plain text (≤64 KB) is stored — HTML and attachments are dropped.
- Drops unknown mail. Anything addressed to an inbox that doesn’t exist or has expired is discarded, never stored.
Good to know
The address is public — random and unguessable, but anyone with it can read what arrives. Use it only for throwaway sign-ups, never anything real or sensitive.
Related tools
- One-Time Secret — share a secret that self-destructs after one read.
- Email Auth Checker — check a domain’s SPF/DKIM/DMARC.
- Password Generator — a strong password for that throwaway account.
Frequently asked questions
What is a disposable inbox for?
When a site demands an email just to let you in, you can hand it a throwaway address instead of your real one, receive the confirmation/verification message here, click the link, and move on. The inbox vanishes in an hour, so your real address stays out of marketing lists and breach dumps.
Why does this need a server (and a separate email Worker)?
Receiving email is the one thing that genuinely cannot happen in your browser or even in a normal request handler: a mail server has to accept the message over SMTP. This uses Cloudflare Email Routing to deliver mail to a small Worker that parses it and stores the text — then this page polls for it.
Can I send email from it?
No, by design. It is strictly receive-only — there is no send path anywhere in the system. That removes the main way disposable-mail tools get abused (sending spam). It can only catch what arrives.
Is my throwaway inbox private?
No. The address is random and unguessable, but anyone who has it can read what arrives — treat it as public. Use it only for throwaway sign-ups, never for anything sensitive, real, or tied to your identity.
How long does it last, and what is kept?
The inbox and all its messages are deleted after 1 hour. Only plain text is stored (up to 64 KB per message); HTML bodies and attachments are dropped. Each inbox keeps its 20 most recent messages. Mail sent to an unknown or expired address is discarded, never stored.
How is abuse prevented?
Several layers: receive-only (can't send spam), a bot check before an address is created, random addresses (no impersonating a known name), a short 1-hour lifetime, per-inbox message caps, text-only storage with attachments dropped, and silent discard of mail to any address that isn't a live inbox.