How the code popup works

By the 10minemail operator · First published 17 August 2026 · Updated 5 September 2026

Most confirmation mail is a small number buried in a large HTML newsletter. The useful part is six digits. The rest is a logo, a legal footer, and a tracking pixel. I built the 10minemail popup so you do not have to hunt.

When a new message is pushed into the tab, the page plays a short beep and opens a window. If we can find a code, the window shows only that code and a copy button. If we cannot, the window still opens and says so. The full message stays in the list underneath either way.

This is convenience, not magic. Senders format codes in dozens of ways. A code drawn as an image will never be read. A code split as 1 2 3 4 5 6 is harder than 123456. The parser is deliberately conservative: a wrong code is worse than no code.

What happens before the popup

Mail does not appear because the browser magically watches the internet. Catchmail holds the mailbox. Our server polls it, roughly one inbox per tick, and pushes anything new down a live connection (Server-Sent Events) to the open tab. If you close the tab, we stop spending poll budget on that inbox. Extending the timer without a tab still keeps the address alive on our side, but you may miss the moment the message arrives.

Click the page once. Browsers block sound until there has been a user gesture. If you never hear the beep, the mail can still be in the list. The beep is a courtesy, not a delivery guarantee.

Leave the tab in the foreground if you can. Phones in particular freeze background tabs. A frozen tab cannot paint a popup.

How the parser reads a message

We build a plain-text blob from three pieces: the subject line, the text part if the sender included one, and a stripped version of the HTML. Style and script tags are thrown away. HTML tags are turned into spaces. A few common entities such as   are decoded.

That blob is collapsed to single spaces. Then we look for labels that usually sit next to a code:

If a label is found, we take the next 4–8 letter-or-digit token. We reject a handful of false friends such as a year like 2026 or the letters http.

If no label matched, we look for a standalone six-digit number. That catches a lot of SMS-style mail that never says the word “code.” If that also fails, we collect every 4–8 digit run, drop values that look like years, and pick the longest remaining number.

That last fallback is the riskiest. A tracking ID, an order number, or a date can win. When the window looks wrong, ignore it and open the message. The popup is a guess with a copy button, not a second source of truth.

What the parser will not do

It will not OCR an image. If the only copy of the code is a bitmap, you have to read the HTML yourself.

It will not follow a “click to verify” link and complete the signup for you. Links in unexpected mail can be phishing. Treat them as untrusted even inside a throwaway inbox. Phishing works on temporary addresses too.

It will not read codes sent to a different channel. If the site also texts your phone, that is outside this page.

It will not bypass a site that refuses the address. A rejected form never sends mail, so there is nothing to parse. Why sites block disposable email covers that case.

Why a code might be late

Senders queue mail. Some wait a minute or two on purpose. Some retry. If the countdown is low, click +10 min before you assume failure. Check you pasted the full name@profemail.co.uk string, including the spelling of the name.

If nothing arrives, the sender may be blocking the domain. That is their policy, not a bug in the popup. Try New address once in case they disliked the local part. If the whole domain is refused, stop. Do not keep generating names to wear down a filter. That is abuse, and it burns the mail domain for everyone else.

How to use it in practice

  1. 1. Open the inbox. Click once so sound is allowed.
  2. 2. Copy the address into the form that actually needs it.
  3. 3. Keep this tab visible.
  4. 4. When the window appears, copy the code if it looks right.
  5. 5. If it looks wrong, close the window and read the message.

The popup exists because I got tired of scanning HTML for six digits. It is the most “product” thing on the information pages, and it is also the easiest thing to over-trust. Use it as a shortcut. Keep the message list as the record. For the wider picture of how those emails travel, read how verification emails work.