Should you password-protect a temporary inbox?
By default anyone who knows a temporary address can read it. That is convenient — until it is not. When a password is worth the extra step.
Temporary email services have a design choice at their core: a mailbox that anyone can open by typing its address is wonderfully convenient, but it also means "anyone" includes strangers. Temp Mail lets you choose per mailbox.
How an open mailbox works
Create an address, share it with a website, and read the reply — no account, no password, no cookie that has to survive. If you clear your browser or switch devices, you can reopen the inbox by typing the address again. Random addresses (eight random characters) are practically impossible to guess, which is why open mailboxes are the default.
Where it breaks down
The risk appears with custom addresses. If you create john@temp-mail.bd because it is easy to remember, it is easy for others to remember too. Anyone can type it and read your verification codes. Popular names on public temporary-email domains are effectively public inboxes.
The second risk is sharing the address on purpose — for example, using it in a support ticket, a screenshot or a group chat. Once the address is out there, so is the inbox.
What a password changes
When you set a password:
- Opening the mailbox from a new device or after clearing your browser requires the password.
- The QR code and "open in new tab" links still work, but the other device is prompted for the password.
- Temp Mail keeps password-protected mailboxes longer by default (7 days instead of 24 hours), because they are no longer disposable in the same way.
- Existing sessions on your current device keep working; you are not logged out.
What a password does not do: it does not encrypt the emails at rest, it does not stop the mailbox from expiring, and it cannot be recovered if you forget it. There is no reset flow, by design — a reset would need a second contact channel, which is exactly what a temporary inbox avoids.
Our recommendation
- Random address, one-time sign-up: no password needed.
- Custom address you will reuse for a few days: set a password.
- Anything you would be uncomfortable with a stranger reading: set a password, or better, use your real inbox.
You can add, change or remove the password at any time from the mailbox menu. Adding one takes five seconds; choose something at least six characters long, and different from passwords you use elsewhere.