EXPOSURE AUDIT / 02

Email exposure is more than just spam

An address becomes riskier when it is public, reused across sites, and linked to high-value accounts. Use the audit matrix below to decide which access points to replace, reroute, or keep.

Start by identifying four exposure paths

You don’t need to enter your real email. This page doesn’t search breach databases; it helps you review how your address is used and what could happen next.

PUBLIC / 01

Public visibility

Does the address appear on web pages, résumés, forum posts, or anywhere else that can be scraped automatically? Publicly accessible addresses attract more bulk marketing and probing.

REUSE / 02

Cross-site reuse

How many shopping, social, and utility accounts use the same address? The more you reuse it, the easier it is to link your other activity after any exposure.

TRACK / 03

Email tracking

Do marketing emails often include personalized parameters, remote images, or redirect links? These may reveal when you opened a message and how you interacted with it.

RECOVERY / 04

Recovery value

Does the address control assets, work, healthcare, or long-term accounts? The more valuable it is, the less you should rush to disable it just to improve isolation.

Audit findings matrix

What you observe Risk level Immediate action Long-term strategy
Used only for one low-risk signup Limited Delete the email after reading it Use a new disposable address next time
Publicly displayed but not used to control an account Moderate Replace the address on public pages Create a separate alias for public contact
Reused across sites and receiving more spam High Change the login email site by site Use a different address for each service
Controls both assets and account recovery Critical Enable an authenticator and review login activity Keep a stable dedicated email; don’t use a disposable address

CLEANUP ORDER

Clean up by impact, not by unread count

Protect high-value accounts first, reduce public exposure next, and handle marketing subscriptions last. This avoids losing recovery access while rushing to delete an address.

  1. 01

    Protect critical accounts

    Update passwords, review active sessions, and enable the service’s multi-factor authentication.

  2. 02

    Separate reused access

    Give important services different addresses so one breach cannot connect all your accounts.

  3. 03

    Take back public addresses

    Replace addresses on websites and documents; when that isn’t possible, use a pausable long-term alias to receive messages.

The practical limits of email tracking

Remote images

Loading tracking pixels can expose your open time, network information, and client details to the sender. Keep images disabled when dealing with unknown email.

Personalized links

A unique parameter in a link may connect a click to your address. Check the domain first, and don’t log in directly from an unfamiliar email.

The address itself

A disposable address reduces long-term linkability, but it cannot hide the name, payment details, or device information you enter on the target site.

NEXT ROUTE

Use a separate route for your next low-risk signup

A disposable address is ideal for breaking unnecessary long-term ties. When you need ongoing access, log in and issue a different entry point for each relationship.

Open temporary inbox