Getting Started
Getting started takes zero configuration:
- Instant Mailbox: Simply visit
https://emailsforyou.bond. A fresh, clean disposable mailbox is automatically generated for you. - Copy Address: Click the Copy button in the top bar to copy your temporary email address to your clipboard.
- Use Anywhere: Paste the address into any website requiring email verification (e.g., Discord, Netflix, Steam, shopping sites, or test signups).
- Real-time Arrival: Incoming messages appear in your inbox within seconds without refreshing the page!
No! Emailforyou includes an intelligent background synchronization engine. The inbox checks for incoming messages automatically every 4 seconds. When an email arrives, it appears instantly at the top of your inbox list.
You can also click the Refresh icon (circular arrow) at any time to trigger an instant check.
Whenever you receive a confirmation email with a 4, 6, or 8-digit verification code (e.g. 482910), Emailforyou automatically extracts the code and highlights it in a dedicated yellow banner at the top of the message reader.
Click the Copy Code button in the banner to copy the code immediately without searching through the email body!
Accessing Previous Mails & Saved Mailboxes
You have two convenient ways to access your previous emails:
- Sidebar History (Same Device): Open the left sidebar menu (click the hamburger icon or swipe right). Look under "Saved Inboxes". All the mailboxes you created recently on this device are saved automatically. Simply click any address to switch to it and read its emails!
- Unlock Mailbox (Any Device): If you are on a different phone, computer, or incognito window:
- Click "Unlock Mailbox" in the sidebar.
- Enter the email address (e.g.,
myaccount@emailsforyou.bond). - Enter your Secret Access Token that was generated when you created that mailbox.
- Click Unlock. Your mailbox will be restored instantly!
Unlike old-fashioned temp mail sites where anyone who guesses your address can read your private emails, Emailforyou protects every mailbox with an unpredictable, cryptographically secure Secret Access Token (e.g. efy_sec_9f7a...).
Only someone possessing this secret token can authenticate with the API and read incoming messages.
Yes! Click the Token button in the header to open the Private Vault. A high-resolution, locally generated vector QR code will be displayed.
Scan this QR code with your mobile device camera to easily open your mailbox URL without typing long addresses manually.
Deleting Emails & Mailboxes
You can delete an email in two ways:
- From the Inbox List: Hover over the email row (or tap on mobile) and click the Trash Can icon on the right side of the row.
- Inside the Email Reader: When viewing an open message, click the Delete icon in the top reader toolbar.
The message is permanently deleted from the database immediately.
If you want to immediately wipe a mailbox and all its stored emails and attachments from existence:
- Click the Token button in the header (or avatar icon).
- In the Private Mailbox Vault modal, click the red Permanently Delete Mailbox button.
- Confirm the prompt.
Emails and inactive mailboxes are automatically retained for up to 7 days. After 7 days of inactivity, the database background cleanup automatically purges expired records to protect your privacy and free up server resources.
Rate Limiting (10 Emails / Hour)
To protect the domain reputation of emailsforyou.bond and ensure that emails from major providers (Google, Microsoft, Yahoo, Discord, Steam, Twitter) are never blocked or blacklisted, we enforce an atomic server-side rate limit of 10 new mailbox creations per IP address per rolling 60-minute window.
10 addresses per hour provides ample capacity for all legitimate personal and testing needs while preventing automated spam bots from abusing the mail server.
Unlike crude rate limiters that reset everyone's quota at the top of the clock hour (e.g. at 1:00 PM, 2:00 PM), our rate limiter uses a sliding rolling window.
Each time you create a mailbox, the timestamp is recorded. When you reach 10 creations, the system calculates exactly when your oldest creation reaches 60 minutes old and unlocks that slot. The live countdown in the sidebar shows the exact minutes and seconds remaining until your next slot becomes available.
Custom Email Aliases
Yes! You are not restricted to random strings. You can create clean, dot-free custom aliases:
- Click the + New button in the search bar or header.
- Select the Custom Alias tab.
- Type your desired alias (e.g.,
developer,testuser,johnsmith). - The system checks availability in real-time. If available, click Create Mailbox!
admin, postmaster, root) are protected.
Security & Privacy Architecture
Emailforyou implements enterprise-grade security standards:
- SHA-256 One-Way Token Hashing: Access tokens are never stored in plain text in the database. Only one-way cryptographic SHA-256 hashes are stored, meaning even server administrators cannot read or steal your access token.
- Constant-Time Verification: Token authentication uses timing-safe comparisons to prevent side-channel timing attacks.
- Sandboxed Iframe Reader: All incoming email HTML is sanitized and rendered inside an isolated, sandboxed
<iframe>to prevent malicious scripts, XSS attacks, or cookie sniffing. - Remote Image Blocking: External images and tracking pixels are blocked by default so third-party senders cannot track your IP address or know when you opened the email. You can click "Load Images" anytime if you trust the sender.
No. Emailforyou is strictly an inbound-only receiving service. Disabling outbound email sending prevents spammers and malicious actors from abusing the domain, ensuring that the domain retains a pristine sender score and remains unblocked by major websites.