How addresses are generated
The local part is drawn from a cryptographically secure random source, using an alphabet that excludes visually ambiguous characters so an address is safe to read aloud or retype. Addresses are never sequential and never derived from your name, IP or session — there is no pattern to guess.
Which domains are used
Addresses are only ever issued on an approved commercial domain from our whitelist. Educational, academic and government domains are rejected outright, both when generating an address and when an operator tries to add a domain in the admin panel.
Generating a new address
New address retires the current inbox immediately: its messages and attachments are deleted and its access token is invalidated before the replacement is issued. Nothing carries over.