Temp mail vs VPN vs email aliases — what each one actually does for your privacy

We've had so many people ask us "is a VPN still needed if I'm using temp mail?" — or "why would I bother with SimpleLogin if I can just generate a disposable inbox?" — that we wanted to lay out the actual model. These three tools (temp mail, VPN, email aliases) sit on completely different layers of your privacy stack. They're not substitutes. Picking the wrong one is worse than using nothing because it gives you a false sense of cover.

What each one actually hides

The mental model

Think of every interaction online as a packet that has a return address on the outside and your identity on the inside. The return address is your IP. The identity is whatever the form asks for — usually your email, sometimes your phone or your real name.

• VPN changes the return address. The recipient sees a different IP. Your identity (the email you typed in) is unchanged.
• Temp mail doesn't change the return address — your IP is still you. It changes the identity field by giving you a fake email.
• Email alias is structurally similar to temp mail — fake email field — but the alias is permanent, you control it, and mail is forwarded to your real inbox so you can actually read replies long-term.

When to use which

Use temp mail when:

• You need a verification code from a service you don't plan to use again.
• You want to read a single "sign up to download our white paper" PDF and don't want the follow-up newsletter.
• You're testing a signup flow you didn't write.
• You explicitly want the mailbox to disappear in minutes — "leave no trace."

Don't use temp mail for anything you might want to log into later. The mailbox dies; if the service requires a password reset via email, you're locked out forever.

Use a VPN when:

• You don't want the destination service to record your real IP.
• You're bypassing geoblocks (region-locked content, censored sites).
• You're on a hostile network (public Wi-Fi, your employer's guest network) and don't want the network operator to see your DNS queries.

A VPN is not a privacy panacea. The VPN provider sees what you do. Pick one with a verified no-logs policy and an audited infrastructure (Mullvad, IVPN, Proton, ExpressVPN have all been independently audited at various points; many others have not).

Use email aliases when:

• You want to sign up to a real service you actually plan to use long-term, but you don't want to give them your real email.
• You want to be able to revoke the address later if the service gets breached or starts spamming.
• You want one address per service, so a leak from any one service tells you which one leaked.

Aliases are the strongest privacy tool of the three for ongoing relationships. Spend the $30/year — it pays for itself the first time a service you signed up for two years ago gets breached and the leak emails arrive at your alias instead of your real address.

What about combining them?

Combining is the answer. The serious version of "privacy signup":

1. VPN connected — your IP is the VPN's exit node, not yours.
2. Email alias — for services you want a long-term relationship with — or temp mail — for one-shot signups.
3. Anti-fingerprinting browser — Brave with shields, Firefox with strict tracking protection, or Tor for the strongest anonymity. Resists fingerprinting that would otherwise re-identify you across the IP+email change.
4. No payment if possible. If you have to pay, virtual cards (Privacy.com, Revolut Disposable Cards) keep your real card number and home address out of the merchant's database.

Each layer is independent. If one gets compromised, the others still work.

The fingerprinting layer most people forget

Even with all three tools above, your browser leaks an enormous amount of identifying information: screen resolution, GPU model, installed fonts, time zone, language headers, and the precise microsecond timing of mouse movements. This is browser fingerprinting, and a determined adversary can re-identify you across IP and email changes purely on the fingerprint.

Mitigations:

• Use a browser that randomises or normalises the fingerprint (Tor Browser, Brave with strict shields).
• Disable JavaScript when you can — most fingerprinting requires JS access.
• Use a fresh browser profile for sensitive signups so cookies from your normal life don't carry over.

The threat-model question

Privacy tools have to be picked against a threat model. "What am I trying to protect from whom?" A few common ones:

• Marketing spam. Email aliases or temp mail solve this. VPN doesn't help.
• Data brokers correlating my activity. All three help; aliases and per-service strategies most.
• Service-specific bans (a streaming site banned my IP for ad-blocking). Only a VPN helps.
• Government-level surveillance. None of these tools alone is sufficient. You need Tor + Tails + a separate air-gapped device + extreme operational discipline. If you're actually in this threat model, this blog post is not your starting point.

Common mistakes

• Using a VPN to sign up to a service with your real email. Pointless — the service still has your identity (the email). The IP swap only buys you geographic anonymity.
• Using a temp mail to sign up to something you'll want to log into later. The mailbox dies, password reset becomes impossible, account is permanently lost.
• Using one alias for everything. Defeats the per-service-leak detection benefit. Generate a fresh alias per service.
• Trusting a free VPN. If you're not paying you're the product. Free VPNs sell traffic data — by paying you're paying for the privacy guarantee.

Where PocketInbox sits

PocketInbox handles the "temp mail" column of the table. We don't do VPN; we don't do persistent aliases. For those, respect Mullvad and SimpleLogin/Addy — they do their thing excellently. PocketInbox stays focused on making the temp-mail layer as fast and convenient as possible: instant inbox creation, OTP detection, multi-provider failover.

If you want to test that combination right now: connect your VPN, open a private window, head to PocketInbox, generate an inbox, sign up to whatever you wanted to try without leaking either your IP or your real email.

Related: Disposable vs alias email, Privacy tips when signing up for online services, and When NOT to use disposable email.