Security

A 10-minute inbox can reduce spam in your real mailbox. It is not a vault, a VPN, or a guarantee of anonymity.

What we do

The site is served over HTTPS. Inboxes are tied to a random browser token, not to your IP, so a shared café or office network does not hand your mail to the next person on the same Wi-Fi. When the timer ends, we drop the inbox from server memory.

We do not ask you to create a password. There is no account database to steal in the usual sense — only short-lived tokens and mail copies.

Addresses look like ordinary people (first.last@profemail.co.uk) so you are less likely to need dozens of retries on signup forms. That is usability, not secrecy — the address is still disposable.

What temporary email protects you from

• Newsletter creep. A site you used once cannot mail you for years if the address no longer exists.
• List resale. If a marketing database leaks, a dead disposable address is useless to spammers.
• Inbox clutter. Trials, PDF gates, and “required email” fields stay out of the mailbox you actually read.
• Cross-site profiling (partially). Data brokers link accounts by email. An expired throwaway breaks that chain for the signup you never wanted to keep.

Read the full breakdown in Is temp mail safe?

What we do not promise

Mail still travels across the public internet to reach us. Treat every 10minemail address as observable while it is active. We do not offer end-to-end encryption of inbound mail. Anyone who knows the exact address could request the same mailbox through the mail pipeline.

Disposable mail hides your real address. It does not hide your IP address, payment card, phone number, or name if you typed those into the same form. Temp mail is one privacy layer, not complete anonymity.

Do not use this for passwords you must keep, medical records, legal documents, or recovery emails. For those, use a mailbox you own and a unique password.

Inbound HTML is shown in the browser with a basic filter. Treat unexpected attachments as untrusted. Be wary of links in mail you did not expect — phishing works on temporary inboxes too.

If you believe our domain is being used to attack someone, email hello@10minemail.online with headers if you have them.

Safe use in practice

1. Use 10minemail only for one-off, low-risk tasks: codes, trial activations, gated downloads.
2. Never reuse a throwaway address across sites — each signup gets its own timer.
3. Do not treat “no account required” as “private”. Assume the inbox is readable while the clock runs.
4. When the task needs long-term access, stop and use a real mailbox. See when not to use temporary mail.