The Gmail + trick is one of the most widely shared email privacy tips on the internet. The idea is simple: add a tag to your Gmail address (yourname+amazon@gmail.com) to track which services spam you.

It's clever. It's also not really privacy protection.

This article breaks down exactly how each method works technically, where each one fails, and which to use in which situation.

How the Gmail + Trick Works

Gmail treats the local part of an email address (everything before @) with a specific rule: anything after a + character is ignored for delivery purposes.

So these three addresses all deliver to the same inbox:

john.smith@gmail.com
john.smith+amazon@gmail.com
john.smith+anything@gmail.com

This lets you create unlimited "addresses" without creating new accounts, and filter incoming mail by the tag you used.

What it's actually good for

Filtering — Create a Gmail filter on to:yourname+amazon@gmail.com to automatically label, archive, or delete emails from that source
Tracking leaks — If yourname+service@gmail.com starts receiving spam from unrelated senders, you know that service sold or leaked your address
Organization — Separate newsletters, shopping receipts, and notifications into labeled folders automatically

The critical flaw

The +tag doesn't hide your real address in any way. It's appended to your real username, and the base address is fully visible. Any company (or spam database) that receives yourname+amazon@gmail.com can trivially extract yourname@gmail.com.

Many companies strip the +tag before storing your address in their database — intentionally or because their email validation system normalizes addresses. When they sell or leak their user database, your real address is what gets exposed.

Test it yourself: Sign up for a few services with +tags. Check what address is stored in your account settings. You'll often find the tag was stripped.

How Temporary Email Works

A temporary email address is a completely separate, randomly generated address with no connection to your real identity.

xk7p2m@instanttempemail.com

This address:

Is not linked to your name or any other account
Exists on a mail server owned by the temp mail service
Receives emails normally for a defined period
Expires and is permanently deleted

There is no base address to extract. No username to connect to your identity. No cross-service link.

What it's good for

Complete inbox isolation — Emails to the temp address never reach your real inbox
Zero identity linkage — The address cannot be traced back to you
No account required — Works in under 30 seconds with no setup
One-time use — Perfect for signups where you don't need ongoing access

What it can't do

You can't access the inbox after it expires
You can't send emails from it
Some platforms blocklist known temp mail domains
Not suitable for accounts you'll need to log back into

Side-by-Side Technical Comparison

| Feature | Gmail + Trick | Temporary Email | Email Alias | |---|---|---|---| | Hides your real address | ❌ No | ✅ Yes | ✅ Yes | | No account setup required | ✅ Yes | ✅ Yes | ❌ Usually | | Can receive emails indefinitely | ✅ Yes | ❌ Expires | ✅ Yes | | Can send/reply | ✅ Yes | ❌ No | ✅ Yes (some) | | Survives service database breach | ❌ No | ✅ Yes | ✅ Yes | | Emails reach your real inbox | ✅ Always | ❌ Never | ✅ Via forward | | Can be blocked by platforms | ❌ No | ✅ Sometimes | ❌ Rarely | | Works for long-term accounts | ✅ Yes | ❌ No | ✅ Yes | | Filterable in Gmail | ✅ Easy | ❌ N/A | ✅ Possible | | Free to use | ✅ Yes | ✅ Yes | ✅ Mostly |

The Data Breach Test

Here's the clearest way to understand the difference:

Scenario: You sign up for a service using each method. That service suffers a data breach and their user database is leaked online.

With Gmail + trick: The breached database contains yourname+service@gmail.com. Anyone who processes that database can extract yourname@gmail.com — your real address — in a single regex operation. Your real address is now in spam networks.

With temporary email: The breached database contains xk7p2m@instanttempemail.com. That address is expired and deleted. There is no link back to you. Your real address is not exposed.

With an alias: The breached database contains yourname-service@simplelogin.com. Your real address is not exposed. You can disable the alias to stop all forwarding from that source.

The Gmail + trick provides organization and tracking. It does not provide protection in a breach scenario.

When to Use Each Method

Use the Gmail + trick when:

You want to organize your existing inbox by source
You want to detect which service leaked or sold your address
You need to keep the account long-term and access it from your main inbox
The platform rejects temp mail domains

Example: Signing up for a SaaS tool you'll use daily. You want emails delivered to your inbox but organized under a label. Use yourname+toolname@gmail.com with a filter to label and possibly skip inbox.

Use a temporary email when:

You need to verify a signup but won't need future inbox access
You want to download something gated behind an email form
You're signing up for a trial you might not continue
You want zero connection between the signup and your identity

Example: A website offers a free PDF guide if you enter your email. You want the PDF, not the newsletter. Use a temp address from InstantTempEmail, get the download link from the confirmation email, done.

Use an email alias when:

You need the account long-term but want privacy
You want to be able to cut off a specific service without affecting others
You want to reply from a private address

Example: You're signing up for an e-commerce site you'll shop at regularly. You want order confirmation emails but don't want the site to have your real address. Use a SimpleLogin alias — you get all the emails, but can disable the alias if they start spamming.

A Practical Setup That Combines All Three

You don't have to choose one method. The best approach uses all three for different situations:

Real address      → banking, government, close contacts
Gmail + tags      → services you trust and use regularly, for filtering
Temp email        → one-time signups, trials, gated downloads
Alias service     → recurring services where you want privacy + ongoing access

This means your real address stays clean even if any individual service is breached, sold, or goes rogue.

Does the Gmail + Trick Work on Other Email Providers?

Most major providers support similar sub-addressing:

Gmail — user+tag@gmail.com

Outlook / Hotmail — user+tag@outlook.com

Yahoo Mail — user-tag@yahoo.com (uses - instead of +)

FastMail — user+tag@fastmail.com

ProtonMail — user+tag@proton.me

iCloud — user+tag@icloud.com

All have the same fundamental limitation: the base address is visible and extractable. The protection level is identical across providers — organizational only, not privacy-preserving.

Frequently Asked Questions

Does Google block or filter the + trick from working? No. Gmail officially supports sub-addressing and it works reliably for delivery. The limitation is on the receiving side — companies that strip the tag before storing your address.

Can I use the + trick with Google Workspace (business email)? Yes, Google Workspace supports sub-addressing by default. Your admin can disable it, but most don't.

Why do some sites reject my + email address? Poor email validation. Some forms use regex patterns that don't allow + in the local part, even though it's valid per the email RFC specification. It's a bug in their validation, not a Gmail issue.

Is there a way to make the + trick actually hide my real address? No. By design, the base address is always present and visible. If you need real address hiding, use a temp email or an alias service.

What's the best free alias service? SimpleLogin (free tier: 10 aliases, open source) and AnonAddy (free tier: unlimited aliases with bandwidth cap) are the two strongest free options. Apple Hide My Email is excellent if you're in the Apple ecosystem with iCloud+.

If I use a temp email and lose the address, can I recover the account? Usually not. Most accounts allow password recovery only via the registered email. If the temp address has expired, password recovery emails go nowhere. Only use temp email for accounts where you can afford to lose access.

Temp Email vs Gmail + Trick: Which Actually Protects Your Privacy?