The Problem: One Email, Everywhere
Most people use the exact same email address for their bank, their favorite shoe store, a newsletter they signed up for once, and a sketchy free-trial site they've since forgotten about. When spam starts flooding in, or when that address turns up in a data breach, there's no way to know which of those dozens of sign-ups is actually responsible. The fix doesn't require a new inbox, a paid service, or a browser extension — it's a free feature already built into the email system.
The Gmail Dot Trick
Gmail (and Google Workspace) treats every dot in the part of an address before the @ sign as if it isn't there. j.doe@gmail.com, jo.e@gmail.com, joe@gmail.com, and even j.o.e@gmail.com all deliver to the exact same inbox. Gmail has confirmed this is intentional and permanent behavior, not a bug — dots are simply ignored during delivery.
This means you can hand out jo.e@gmail.com to one retailer and j.oe@gmail.com to another, and both emails land in your one real inbox — but you'll always know, just by looking at the "To:" address, which sign-up the message is tied to.
+Tag Sub-Addressing
The second trick works on far more providers: adding +anything right before the @ sign. yourname+amazon@gmail.com and yourname+newsletter@gmail.com both deliver to yourname@gmail.com, but the full tagged address is preserved in the message headers. This is supported by Gmail, Outlook/Hotmail (added in recent years), Yahoo Mail (which calls it a "disposable address"), Fastmail, and ProtonMail on paid plans.
Not Every Provider Supports These
This is where a lot of guides get it wrong by assuming Gmail's rules apply everywhere. They don't:
- Outlook, Hotmail, Yahoo: Dots ARE significant — a dotted version is a genuinely different address, not an alias. Only +tag works.
- iCloud Mail: Neither trick works. Apple instead offers Hide My Email, a separate built-in feature (Settings → [your name] → Name, Phone, Email) that generates real random forwarding addresses per site — arguably even better, since the random address reveals nothing about your real one.
- Fastmail: Supports both tricks, plus fully custom aliases on your own domain.
Building the Habit: A Per-Site Log
The trick only pays off if you actually track which alias went where. The simplest approach is a running log: service name on one side, alias used on the other. Keep it updated every time you sign up for something new, and when spam or a breach notification arrives at a specific alias, you'll know immediately which company to blame — and which to stop trusting with your data.
It's worth logging the alias at the moment you create the account, not after the fact — it's easy to forget which variant you used for a given site six months later, and the entire point of the exercise is having a reliable record when you actually need it. A simple two-column log (service name, alias used) takes seconds to update and turns a vague suspicion ("I think it was that shoe site") into a certainty. It's also worth revisiting old sign-ups you no longer use and swapping their aliases out entirely if you suspect they've already been sold.
What This Doesn't Fix
Aliasing doesn't hide your real inbox from services that specifically try to normalize it (some marketing platforms strip dots and +tags before storing an address), and it doesn't protect against a company that simply doesn't care where the leak came from. But for the extremely common case — figuring out which of dozens of sign-ups is responsible for a flood of spam — it's the fastest, free, zero-setup fix available, and it works with the email address you already have.
Frequently Asked Questions
No — Gmail ignores every dot in the part of an address before the @ sign, so j.doe@gmail.com, jo.e@gmail.com, and joe@gmail.com all deliver to the exact same inbox. Google has confirmed this is intentional, permanent behavior rather than a bug, which means you can hand out a slightly different dotted version to each site while everything still lands in your one real inbox.
Use a different dotted or +tagged version of your Gmail address for each sign-up, and keep a simple log of which variant went where. When spam starts arriving at a specific address, you'll know immediately which company is responsible just by checking the "To:" field, rather than guessing among dozens of past sign-ups.
Partially. The +tag trick (yourname+amazon@gmail.com) is supported by Gmail, Outlook/Hotmail, Yahoo Mail, and Fastmail, but the dot trick is Gmail-specific — Outlook, Hotmail, and Yahoo treat a dotted address as a genuinely different address, not an alias. iCloud Mail supports neither trick and instead offers its own separate feature, Hide My Email, which generates real random forwarding addresses per site.
No — aliasing doesn't hide your real inbox from services that specifically normalize addresses by stripping dots and +tags before storing them, and it can't stop a company that simply doesn't care where a data leak originated. What it reliably solves is the very common problem of figuring out which of dozens of sign-ups is actually responsible for a flood of spam or a breach.
Yes — an email alias generator creates dot-variant and +tag aliases for your existing address and helps you keep track of which alias was given to which service, so you don't have to maintain a manual spreadsheet log yourself. It works with the email address you already have, requires no new inbox or paid service, and takes effect immediately since it relies on delivery behavior your provider already supports. It's a one-time $4.99 purchase — no subscription, no account required.