The Complete Guide to Email Aliases: When to Use Them & When to Forward

You have probably heard the advice: "Don't give out your real email address." But what does that mean practically? Should you use a + sign in Gmail? Should you buy a new domain? Should you use a burner service?

Email aliases are one of the most powerful yet misunderstood tools for privacy and productivity. Let's break it down.

What is an Email Alias?

An alias is simply an alternative name for an email account. It's a different door that leads to the same room.

If your primary email is john@example.com, an alias might be support@example.com. Emails sent to either address land in John's inbox.

Type 1: Provider Aliases (The "+" Trick)

Most email providers (Gmail, Outlook, iCloud) support "plus addressing" natively.

How it works: You can add +anything to your username. If your email is john@gmail.com, you can use:

• john+netflix@gmail.com
• john+bank@gmail.com
• john+newsletter@gmail.com

Pros: Free, requires no setup, works instantly.

Cons:
1. Zero Privacy: It's obvious what your real email is. Removing the part after the + is trivial for spammers.
2. Some sites block it: Many poorly coded websites consider the + sign an invalid character.

Type 2: Domain Forwarding Aliases

This is what services like Forward offer. You own a custom domain (e.g., @johnsmith.com) and create aliases on that domain.

How it works: You create rules at the domain level:

• netflix@johnsmith.com -> forwards to real Gmail
• amazon@johnsmith.com -> forwards to real Gmail

Pros:
1. Total Privacy: The sender never sees your destination inbox address.
2. Portability: You can change your destination. If you switch from Gmail to ProtonMail, you just update the forwarding rule. Your 500 accounts (Netflix, Amazon, etc.) don't need to be updated.
3. Professionalism: It looks like a real business address.

Type 3: The Catch-All Wildcard

A "catch-all" is a special setting that says: "Accept emails sent to ANYTHING at this domain."

Use Case: On-the-fly privacy.

You are at a coffee shop and they ask for an email for the receipt. You don't want spam. You just invent an address on the spot: coffee-shop-name@yourdomain.com.

Because you have a catch-all enabled, that email will arrive safely in your inbox. Later, if that coffee shop sells your data and you start getting spam at that address, you can simply block that specific alias.

Strategy: The Unique ID Method

The ultimate power move for digital privacy is giving every single service a unique email address.

• twitter@yourdomain.com
• facebook@yourdomain.com
• bank-of-america@yourdomain.com

Why do this?

1. Breach Detection: If you start getting phishing emails at adobe@yourdomain.com, you know immediately that Adobe (or a related vendor) had a data breach.
2. Credential Stuffing Protection: Hackers often try the same email/password combo across sites. If your login for Twitter is completely different from your login for your Bank, that attack vector fails.
3. Spam Control: If a service gets too spammy, you don't have to delete your main account. You just create a rule to block or trash mail sent to that specific alias.

Summary

Use Provider Aliases (john+tag@) for quick, low-stakes filtering where privacy doesn't matter.

Use Domain Aliases (service@yourdomain.com) for everything else—security, privacy, and professional control over your digital identity.