Frequently Asked Questions

eMaylias, short for email alias, is an email used with a web site to keep your email address private and safe from many common email-based security attacks, track how often you are contacted by a site and how your information is shared.

Once created, each email sent by a domain to your eMaylias will be forwarded to your specified forwarding email address. You can then track the frequency of messages together with the domains that send them as an indicator of the integrity of the sender. At any time, you can deactivate an eMaylias to prevent receiving email from a sender.

No. eMayl works alongside the inbox you already have: every eMaylias is a unique address that forwards to your real inbox, so you keep your current email address, provider, and apps. Senders only ever see the eMaylias, never your real address.

eMaylias is used to refer to more than one eMaylias. That means it is both singular and plural.

No, you can create eMaylias without specifying domains, but adding domains can be useful.

Domains are critical to determining if an eMaylias is used on a web site. Domains are used by the eMayl system for security and privacy to help determine the authenticity of email being sent to the eMaylias.

Deactivating an eMaylias switches it off immediately. Mail sent to it is turned away at the door: the sender's mail server is told the address isn't accepting mail, so nothing reaches your inbox and nothing is held or queued for later. A person who emails a deactivated eMaylias will usually get an automatic "message not delivered" notice back, and mailing lists typically stop sending after a few of those.

Activating it again turns delivery back on right away, but anything sent while it was off is gone for good — it is not delivered after the fact. You can reactivate or delete a deactivated eMaylias at any time.

Note: As a courtesy to the domain host (and our servers), please remove the eMaylias from the mailing list when the eMaylias is no longer needed.

To deactivate an eMaylias:

1. Click the menu icon (three dots) next to the eMaylias you want to deactivate
2. Select "Deactivate [eMaylias label]" from the dropdown menu
3. Confirm your choice by clicking "Yes, deactivate it" in the confirmation dialog

Once deactivated, the eMaylias will be moved to the bottom of the eMayl list screen, with active eMaylias shown at the top.

Note: Once deactivated, mail sent to that eMaylias is turned away rather than delivered to you — nothing is held or queued while it is off, so messages sent during that time can't be recovered later. You can reactivate it at any time from the same menu.

Yes. You can reply to messages, or send new email, straight from any eMaylias. The other side only ever sees the eMaylias, never your real address.

A Persona provides a convenient way to use a web site anonymously.

NOTE: It may be illegal to provide false information for certain web sites. Personas are NOT intended and SHOULD NOT be used for sites that require information to be legally accurate.

eMayl runs on the web at emayl.app, on iPhone and iPad with the iOS app, and on Mac with the Mac App Store app, which installs and manages the Safari extension for you. The Android app is coming soon — the Android section below covers how it works, ready for when it lands.

The browser extension is included with the iOS and Mac apps, and can also be installed on its own — see "Which browsers can I use the extension with?" under Browser Extension below.

One account works everywhere.

eMayl is $9.99 per month or $83.99 per year (save 30%), and every new account starts with a free 14-day trial; you pay only if you stay.

eMayl PRO, which adds protections like malware and virus scanning and tracker removal, is coming soon.

Because eMayl is a paid service, there are no ads and your data is never sold, traded, or shared.

Start your 14-day free trial

eMayl PRO is a higher tier arriving this fall. It adds malware and virus scanning, tracker removal, removal of potentially threatening shortened links, your choice of eMaylias address from multiple options, your choice of Persona from multiple options, and a security rating for every eMaylias.

Every eMayl account already includes spoofing and spearphishing scanning, plus an automatically assigned address and Persona. PRO adds the extra protections and the choices.

Nothing falls off a cliff. Whether a free trial ends or a subscription is canceled, everything works normally until the end of your trial or paid period. After that, your eMaylias keep forwarding for a 30-day grace period; then the account is deactivated and forwarding stops. Managing your eMaylias during the grace period, including turning one off, requires an active subscription.

Resubscribe any time before the grace period ends and nothing is interrupted. To delete your data entirely instead, see "How do I delete my data (Forget Me)?" under Privacy & Data Rights below.

It appears as either emayl.ai or The NFI Group, LLC, the company behind eMayl. Both are us.

Which one you see depends on where you subscribed — directly from us (card payments are handled by our payment processor, Stripe), through Apple, or through Google. Purchases made through Apple or Google are billed by them, so the charge may be grouped with your other App Store or Google Play purchases rather than listed on its own.

Note: If you see a charge you don't recognize, contact us and we'll help you track it down.

eMayl is founded and driven by Rob Abbott and Michael Somlo, under The NFI Group, LLC. Meet them on the About page.

For how we build and why our incentives line up with yours, see Why you can trust eMayl.

On a computer (Mac, Windows, or Linux):

• Chrome, Brave, Vivaldi, Opera, Comet, and other Chromium-based browsers — from the Chrome Web Store
• Edge — from Edge Add-ons
• Safari on Mac — from the Mac App Store app, which installs and manages the extension for you

Firefox and DuckDuckGo aren't supported.

On iPhone & iPad:

• Safari — included with the iOS app, with nothing extra to install
• Chrome, Edge, Firefox, and Opera — no extension. Use AutoFill instead, described in the iPhone & iPad section below

On Android: only Microsoft Edge can run the extension, installed from Edge Add-ons. In any other browser, use the notification instead, described in the Android section below.

Not sure about yours? The Setup Wizard checks the browser you're in, tells you if it isn't supported, installs the extension, and walks you through pinning it to your toolbar for quick access.

Launch Setup Wizard

To run the eMayl extension, you need to sign in to your eMayl account from the eMayl popup. Once the popup is open, enter your email address which will send a verification email to your email address containing a code to enter or paste into the eMayl popup to verify your email address.

Once you're signed in, you're set to go. When you're on a web site, open the eMayl extension pop-up to generate a new eMaylias or look up the eMaylias for the associated domain.

Click on the eMayl extension button to open the pop-up for the current web page. The extension will automatically detect your domain and check to see if there is an eMaylias associated with the domain. If no eMaylias is found for the current domain, a screen appears with a suggested eMaylias (email alias) for the web site.

Don't have the extension yet? See "Which browsers can I use the extension with?" above.

Yes, based on your keyboard and operating system, pressing the key combination will display the eMayl popup for the current page.

If one or more eMaylias match the current domain, the pop-up will display the matching eMaylias filtered by the domain.

Clicking on the Autofill button inserts the selected eMaylias into the corresponding email input fields on the current web page.

If a Persona is attached to that eMaylias, its values go in too — first, middle, and last name, and date of birth — wherever the page has fields for them.

Note: Some web pages may not autofill as expected. In such cases, you can copy it to the clipboard and paste into input field on the web page as needed.

Clicking on the Edit button opens up the selected eMaylias on the eMayl page in a separate browser tab.

Making changes to an eMaylias in the eMayl browser tab will automatically be updated the next time that the eMayl extension pop-up is displayed.

Two ways, depending on where the form is.

In a web browser: if that browser is Safari, use the eMayl button. Open the eMayl popup, pick an eMaylias that matches the site or create a new one, and tap Autofill — it fills the address, name, and date of birth in one go.

In an app — including other browsers, like Chrome and Firefox — use AutoFill.

1. Touch and hold the field, then tap AutoFill, then Passwords, then eMayl
2. Pick an eMaylias — your active ones, most recently used first — or tap + to create a new one
3. Tap the value you want, and it goes into the field

Note: eMayl not in the AutoFill menu? See "How do I turn on AutoFill for eMayl?" below.

eMayl asks once after you sign in, and turns AutoFill on for you if you accept — there is no trip to iOS Settings.

You can also turn it on at any time from the eMayl Settings screen: under AutoFill, tap Set Up AutoFill. That same row reads AutoFill is on once it's enabled, so you can always see where you stand. To turn it back off, go to iOS Settings > General > AutoFill & Passwords.

Note: You need to be signed in to the eMayl app for AutoFill to offer your eMaylias.

Yes. Every eMaylias can carry a Persona, and the AutoFill sheet lists each of its values on its own row: email address, first, middle, and last name, and birth month, birth day, and birth year — the birth date split in three, the way signup forms ask for it.

In an app, values go in one at a time: tap a value, then open AutoFill again for the next field. iOS tells the extension nothing about the form, so it can't place several at once — but eMayl reopens straight to the eMaylias you just used. In Safari, the browser extension fills the whole set in one click.

NOTE: It may be illegal to provide false information for certain web sites. Personas are NOT intended and SHOULD NOT be used for sites that require information to be legally accurate.

That's simply how iOS groups AutoFill providers — apps have no control over where the entry sits or what it's called.

eMayl is not a password manager. It does not store, generate, or fill passwords. Choosing eMayl there only offers your eMaylias and their Persona values for insertion into the field you're in.

Tap back into the field you were filling in. That gives the keyboard back, and the value usually lands straight away.

If it's still empty, open AutoFill again and tap the value a second time.

iOS sometimes holds the insertion until a field takes the keyboard, and sometimes drops it outright when the app you're filling in reclaims the keyboard at the same moment. It's an iOS behavior that affects other providers too, including Apple's own. Nothing is duplicated — the eMaylias already exists, so you're only re-inserting its value.

One way, everywhere — in a web browser and in an app alike. eMayl hands you the values in a notification, and you paste them into the form.

1. Create an eMaylias, or tap the menu icon (three dots) next to an active one and choose "Use in another app"
2. Back in the form, pull down the notification shade and tap the value you need — that copies it
3. Tap the field in the form, then tap Paste above the keyboard

Two taps per field, and no trip back to eMayl.

Note: The first three values show as buttons; tap the notification itself for the full list. Only active eMaylias offer this — a deactivated one accepts no mail.

The eMaylias address, plus whatever the Persona attached to it carries: first name, last name, middle name, and birth month, birth day, and birth year. They are listed in the order a signup form usually asks for them.

The birth date is offered as three separate values because forms nearly always split it across three fields.

NOTE: It may be illegal to provide false information for certain web sites. Personas are NOT intended and SHOULD NOT be used for sites that require information to be legally accurate.

In Microsoft Edge, yes — install the eMayl extension from Edge Add-ons and it works as it does on a computer. Most other Android browsers can't run extensions at all.

Chrome, Brave, Opera, and Vivaldi don't support extensions. Samsung Internet has its own separate add-on catalog in the Galaxy Store, which eMayl isn't in. Firefox for Android does run extensions, but not eMayl's — the eMayl extension is published on the Chrome Web Store, which Firefox can't install from.

Other Chromium-based Android browsers may be able to install it from the Chrome Web Store as well, but we don't test them.

Note: In any browser that can't run the extension, use the notification instead — it works the same in a browser as in any app. On a computer, the eMayl browser extension fills the whole form in one click.

Android has a single slot for the service that fills forms, and on most phones it belongs to your password manager. An app that takes that slot displaces it, and Android tells every user that new passwords, passkeys, and other info will be saved in the app that took it.

That would not be true of eMayl — eMayl never stores or generates passwords — and the wording is Android's, so it can't be changed. We would rather stay out of that slot than have your phone tell you something untrue about where your passwords live.

So you copy each value from the notification instead, and your password manager keeps working exactly as it does today: it fills your password, and it still offers to save the new sign-in when you submit the form.

Yes — the notification is how the values reach the app you're filling in.

eMayl explains why and asks once, right after you create an eMaylias. If you skipped it, you can turn it on at any time from eMayl Settings, under Use in other apps, which shows the current status and opens Android's notification settings for eMayl.

It expires one hour after it is posted. It's meant for the form you're filling in now, and you can post it again at any time from the three-dot menu next to the eMaylias.

It is also cleared the moment you sign out or your session expires, and on the lock screen only the title is shown until the phone is unlocked.

Note: Only one is kept at a time — posting for another eMaylias replaces the previous notification.

We respect your right to access your personal data. You can download a copy of your account information, every eMaylias you have created, and the Personas attached to them, at any time.

To download your data:

1. Sign in to your eMayl account at https://emayl.app
2. Navigate to Settings from the Account menu
3. In the Account Data section, click "Download"
4. In the confirmation dialog, click "Download" again

There is no waiting and nothing to request by email — your data is prepared as a single file in a machine-readable format (JSON) and downloads right away.

Keep the file safe: your export contains personal information, including your eMaylias and your forwarding addresses. Save it somewhere secure.

Your data export will include:

• Your account profile — name, email address, country, and time zone
• Your forwarding addresses, and whether each one is active, inactive, or awaiting validation
• Every eMaylias you've created, active and deactivated, with its label, your notes, its forwarding address, its associated domains, and the dates it was created and last changed
• The Persona attached to an eMaylias, where you used one, including its name and birth date

Note: This feature is provided in compliance with the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). If you have any issues downloading your data, please contact our privacy team at privacy@emayl.ai.

Yes, you have complete control over your data at all times.

You can create, deactivate, or delete any eMaylias whenever you want. You can also delete your entire account and all associated data at any time.

Your data belongs to you — we simply provide the tools to manage it.

No. eMayl does not sell, trade, or share your personal information with third parties or affiliates.

Your email address and forwarding activity remain completely private. We do not use your data for advertising or profiling.

No. eMayl does not store or analyze your email content. Emails are briefly processed in transit to scan for spoofing and spearphishing before forwarding to your inbox — and, with eMayl PRO, to scan for malware and strip tracking pixels and other embedded trackers.

This processing happens in real time — no email content is retained after delivery. Only metadata such as sender domain and timestamps is tracked for your activity dashboard.

Yes, in one narrow way: to protect you. The real-time scan that checks every incoming email for spoofing and spearphishing uses AI to recognize emerging threat patterns, so new attack techniques are caught even before they are widely known. Like all of eMayl's scanning, it happens in transit and no email content is retained after delivery.

Just as important is what our AI never does. The models are built and trained entirely in-house on a corpus of hundreds of thousands of messages curated by co-founder Rob Abbott. No customer email is used for training in any way, shape, or form, and your messages are never sent to any third-party AI service.

eMayl collects only what is needed to provide the service:

• Your account information (name, email, country)
• The eMaylias you create and their associated domains
• Email forwarding metadata (counts, sender domains, timestamps)

We do not collect email content, browsing history, or track you across sites.

We respect your right to be forgotten. You can request permanent deletion of your account and all associated data at any time.

To request account deletion:

1. Sign in to your eMayl account at https://emayl.app
2. Navigate to Settings from the Account menu
3. Click "Danger Zone" and then "Delete Account"
4. An email is sent to you for added enhanced security. Click "Continue in eMayl"
5. In the browser, click "Delete Account"

Important: Account deletion is permanent and irreversible. Once you delete your account:

• You have approximately 48 hours to change your mind before the deletion process begins
• Emails sent to your eMaylias will no longer be forwarded
• All account data, personas, and settings will be erased
• Your account cannot be recovered or restored

Legal retention: We may retain certain information as required by law for tax, legal, or regulatory purposes (such as transaction records). These records are kept securely and will be deleted once the legal retention period expires.

Need help? If you have questions about account deletion or need assistance, contact our privacy team at privacy@emayl.ai before deleting your account. This feature is provided in compliance with CCPA and GDPR "Right to be Forgotten" regulations.