Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Using a separate email address for each site is smart, but creating a separate email account for each site is going to be very tedious, and I imagine Google, Yahoo, etc are going to stop you very quickly after you've opened 20+ accounts with the same phone number.

(Use a catch-all to have different email addresses for different sites, because when one gets hacked, then the damage is limited.)





Using your own domain that you control for emails also comes with the advantage of easily moving providers, should there be any issues.

Hopefully, domain registrars are less prone to locking people out compared to Apple, given cause of the lockout is caused by Apple itself.

Reminds me of the time Namecheap stopped doing business with Russian accounts, even then they still gave some time for them to transfer their domains.


Only if you are not locked out of the registrar. Then your only hope is what nobody would squat your domain when it lapses.

Eg: Dynadot decided what my birthdate is a secure pin two years ago. No combination of it works and I'm not even sure if I'm not shadowbanned for the attempts.


Proton allows you to alias. But a lot of places prevent aliases, which is silly. I shouldn't have to give an email to demo your chatbot.

Then proton becomes your single point of failure.

"But I use my addresses on my own domain" ok your domain registrar, then.


https://sidebox.net is a nice way to do this as long as the site doesn't restrict to mainstream email domains

Google allows email suffices a la my account+anything@gmail.com.

So you can use different email addresses for different accounts while having only one Gmail account.


I tried this for a little while but quickly stopped as a critical mass of websites broke when I tried using it to sign in. Special characters in your email address is an edge case that produces inconsistent results even within a single product

YMMV, I think I only tried to sign up on 3 websites where it was not working. You can fallback to the original email address in those case.

The funniest part was that for one it work great for the signup part, but they used a third party tool for licences that broke because of my e-mail. For another, only the js code was verifying the e-mail, and I could push it by removing the validation. When the owner had to validate my account, they got a message that the e-mail was incorrect when they tried to submit the form. They called me and had a great discussion about web apps security. We had a good time.

I would point out that it kind of prevents you from checking if your email is in a leak database as you need to test each aliases you used.


Little trick: You can also randomly insert dots in your email address, a bit more stealth and compatible with more sites :)

This has worked for me for nearly 20 years (when I made the account I didn’t know that the dots are ignored). The only time it’s been a problem was with one company whose system stripped the dots out.

You need to send them an email to cancel. When I tried they said “you need to cancel from the same email you signed up with.” :/


This can become unmanageable if you sign up for more than a few things.

2^(username characters - 1) possibilities, but I would hate to try and keep track of which combinations I've used, or what binary sequence I'm up to.

I like using company initials & random numbers @ my domain .tld




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: