Changelog

What changed in HideMail, newest first. Questions or ideas? See the support page.

Better protection against throwaway sign-ups

  • Improved Sign-up now checks a larger, combined list of disposable email domains, refreshed every day.

Unsubscribe from the Mail app, block a sender, Bitwarden

  • New Block one sender on one alias, straight from your mail history. Everyone else can still reach the alias.
  • New The Unsubscribe button in Apple Mail now works for emails that came through an alias, including senders that only offer a mailto: link.
  • New Choose what Unsubscribe does in your profile: stop emails from that sender (the default), turn off the alias, or unsubscribe through HideMail so the sender never sees your real address.
  • New Use HideMail in Bitwarden’s username generator, via its addy.io option. Setup steps are on the support page.
  • New AI assistants (MCP) now have request limits that depend on your plan.
  • Improved Activity logs recognize Apple Shortcuts, so you can tell which aliases a shortcut created.
  • Improved Sign-ups are limited per network, which keeps bulk account creation out for everyone else.
  • Fixed The REST API creates aliases on the domain you ask for, and mail that contains only an attachment is forwarded again.

Support page, Telegram attachments, faster webhooks

  • New A public support page with answers, contact details and setup guides.
  • New The Telegram bot forwards email attachments.
  • Improved Webhook deliveries go through a global edge network, so they arrive faster and survive slow endpoints.
  • Improved The Telegram bot checks the sender’s DMARC policy and refuses forged mail.
  • Improved Sign-up refuses a longer list of disposable domains and verifies the human check more strictly.
  • Fixed More AI assistants can connect to HideMail over MCP, and the alias-limit message points to the right page.

Comparison pages, alias import and export, custom domains

  • New Comparison pages: HideMail against SimpleLogin, addy.io and Apple Hide My Email, with prices and what switching involves.
  • New Import and export your aliases as a CSV file on the Integrations page.
  • New Custom domains: use your own domain for aliases, with a catch-all option.
  • Fixed Telegram users who blocked the bot and later send /start get their account back.
  • Fixed Deactivated accounts can no longer use the REST API.

Claude Code can connect

  • Fixed Claude Code now connects to HideMail over MCP, whichever local port it uses for sign-in.

Custom domains over MCP and the API, stricter spam checks

  • New Set up custom domains and their catch-all from AI assistants over MCP and from the REST API.
  • New Choose your default alias domain over the REST API and MCP.
  • New You get an email whenever a webhook is added or changed, and a new webhook needs your confirmation.
  • New Registration is protected by Cloudflare Turnstile.
  • Improved Mail from senders that fail their own DMARC policy is refused or marked as possibly forged.
  • Improved Daily forwarding limits now hold exactly, even when many emails arrive at once.
  • Fixed Each message is forwarded once per alias, even when the mail server retries it.

Account and webhook tools for AI assistants

  • New MCP tools to read your account and manage webhooks, with an emailed confirmation before anything is sent anywhere.
  • Improved Expired alias-deactivation links explain what happened instead of showing an error.

AI assistants can manage your aliases

  • New Connect an AI assistant like ChatGPT, Claude or Codex to HideMail and let it create, list and edit your aliases or turn them on and off.
  • New See which apps are connected to your account on the API tokens page and disconnect any of them at any time.

Two-factor setup confirmation and mail delivery fixes

  • Improved Enabling two-factor authentication now asks you to confirm a code from your authenticator app before it takes effect.
  • Improved A text setup key is now shown alongside the QR code when setting up two-factor authentication.
  • Fixed Mail sent to several of your addresses at once is now delivered to every valid alias instead of stopping at the first rejected one.
  • Fixed Your webhook now fires only for mail that passes every block check, and no longer repeats when a delivery is retried.
  • Fixed One-click unsubscribe links in forwarded mail no longer break when the link contains a comma.

Unsubscribe links that can disable an alias, plus lost-mail and account fixes

  • New The unsubscribe button in your mail client can now turn an alias off, and you can choose what it does in your profile settings.
  • Fixed Mail with an attachment that has a missing or malformed content type no longer fails to forward.
  • Fixed Account deletion works again; it previously failed silently and left the account in place.
  • Fixed Your daily forwarding limit is now only charged once a message is actually sent, not when sending fails.
  • Fixed Mail the server flags as spam is now dropped instead of being forwarded to your inbox.
  • Fixed Editing the note on an alias works again.

Removed the Yandex Metrica tracker

  • Improved Stopped loading the Yandex Metrica analytics tracker, so your visits are no longer shared with it.

Fewer emails dropped by sender verification

  • Fixed Mail that failed only the SPF check but passed DKIM, or the reverse, was being dropped; it now reaches your inbox.
  • Fixed Emails from senders using several DKIM signatures are now verified correctly instead of being treated as failed.

Sign-in alert emails now show the IP address

  • Improved New device sign-in alert emails now include the IP address of the device that logged in.
  • Improved The Telegram bot no longer sends an extra promotional message after you create an alias.

Empty-message handling and alias note length fix

  • Fixed Incoming emails with an empty body no longer cause forwarding errors; they are skipped and counted as blocked on the alias.
  • Fixed Alias notes written in non-English alphabets are no longer wrongly rejected as being too long.

New sign-in alert emails and password updates

  • New You now get an email when someone signs in to your account from a new device, with the device and sign-in time.
  • Improved Changing your password now also signs you out on all your other devices.
  • Improved The emails page now links to your Mail history, where you can see all events for your aliases.

Fixed delivery of emails with empty subjects

  • Fixed Emails with an empty or missing subject line are now delivered instead of failing.

New hourly and per-minute limits on creating aliases

  • New You can now create up to 10 aliases per hour on the free plan and up to 25 per hour on a paid plan.
  • Fixed The per-minute limit for generating aliases is now applied correctly: 1 per minute for free accounts and 2 for paid accounts.
  • Improved The message shown when you hit the alias creation limit now clearly says the hourly limit was reached.

Mail history logging and less forwarded spam

  • Improved The verify email page now lets you fix a mistyped email address via a link to your profile settings.
  • Improved Mail history now records when emails are forwarded or blocked for each of your aliases.
  • Improved Incoming emails flagged as spam or a threat are no longer forwarded to your inbox.
  • Fixed Premium bought via Telegram now expires a month after the last payment, and the bot sends a reminder to renew.

Mail history page, blocked-sender alerts, and a Telegram shortcut button

  • New A new Mail history page lists what happened with each of your aliases, including emails received, forwarded, or ignored.
  • New You now get an email alert when a message sent to your alias is blocked because the sender is restricted.
  • New The Telegram bot gained a persistent Create new email keyboard button and a /web command that opens the mini app.
  • Improved Newly generated aliases now use lowercase letters only, making them easier to type and share.

Sign in with Google and the Telegram Mini App

  • New You can now sign in or create an account with your Google account.
  • New You can now sign in inside Telegram with the Mini App; an account is created automatically on first use.
  • Improved The Telegram bot now replies in your language, and the start message links to the Terms of Service and Privacy Policy.
  • Fixed Aliases of inactive or unverified accounts no longer receive forwarded emails.
  • Fixed The upgrade button on the pricing page now opens the Gumroad checkout correctly.

Alias on/off and passwords in Telegram

  • New Pause or resume an alias right from the Telegram bot using the Enable/Disable button shown with each new alias.
  • New The /create command in Telegram now also generates a ready-to-use password for your new alias.
  • Fixed Forwarded emails with an empty subject now show "[no subject]" instead of a blank line.

Update alias notes via API and clearer webhook settings

  • New You can now update the note on an email alias through the API.
  • Fixed Fixed the sender name on forwarded emails so names with quotes or special characters display correctly.
  • Improved Emails from senders that were previously blocked, such as Facebook and X, are now forwarded to your inbox.

Sign-up and browser extension sign-in fixes

  • Fixed Fixed some valid email addresses being rejected when creating an account.
  • Fixed Fixed an occasional error when signing in through the browser extension.

Browser extension sign-in and attachment fixes

  • Fixed Fixed a problem that could prevent signing in to the browser extension.
  • Fixed Fixed a problem where a single unreadable attachment could stop an email from being forwarded.

Registration emails from AliExpress, X and Facebook blocked on the free plan

  • New Aliases on the free plan no longer forward sign-up and registration emails from AliExpress, X (Twitter) and Facebook; premium lifts the block.
  • New When such an email is blocked, Telegram users receive a message explaining the block and how to keep receiving these emails.

Email when you reach your daily limit

  • New You now receive an email when your aliases hit the daily forwarding limit, sent at most once per day, with an upgrade link for free plans.
  • Fixed Incoming messages with a malformed sender address are now ignored instead of being forwarded to your inbox.

Premium via Telegram Stars

  • New You can now buy a Premium plan inside the Telegram bot with the /pay command, paid with Telegram Stars.
  • Improved Emails from big senders like Google, Facebook, X and TikTok are now delivered at most once every 15 minutes, up from once per hour.
  • Fixed Fixed delivery errors when a user had blocked the bot or deactivated their Telegram account; those accounts are now paused instead.

Telegram bot: /help command, new alias shortcuts and notification fixes

  • New Added a /help command to the Telegram bot that lists all available bot commands.
  • New You can now create a new email alias in the Telegram bot with /new, /generate or /newemail, not only /create.
  • Fixed Fixed Telegram notifications for forwarded emails so subjects and bodies with non-Latin characters arrive correctly.
  • Improved Sign-in with a social account now shows a clear Please try again message instead of failing silently.

Apple Shortcut link in welcome email and new support address

  • New The welcome email now links to our Apple Shortcut, and the site points to the updated version.
  • Fixed Some emails that failed to reach connected apps because of their character encoding are now delivered.

Telegram bot and a higher daily forwarding limit

  • New New Telegram bot (beta): send /create to generate an alias and get forwarded emails delivered right in the chat.
  • Improved The daily forwarding limit went up from 25 to 100 emails per day.
  • Improved One-click unsubscribe links in forwarded emails now use web links only, so your real address is never exposed.
  • Fixed Fixed delivery of email notifications to custom webhooks.

Attachment forwarding fix and a cleaner dashboard

  • Fixed Fixed forwarding of incoming emails whose attachments have no file name; they now arrive with a generated name.
  • Improved Removed the outdated spam notice banner from the dashboard.

Reliable forwarding: attachment fixes, unsubscribe links, and a new mail server

  • Improved The service that delivers forwarded emails was switched to our own mail server.
  • Fixed Attachments on forwarded emails are now delivered correctly with the right file type.
  • Improved Forwarded emails now pass along the original unsubscribe link and show the sender as "Name via HideMail".
  • Improved Incoming emails with a high spam score are now dropped instead of being forwarded to your inbox.
  • Fixed The welcome email is now sent in the language you chose for your account.

Language preference saved to your account, refreshed welcome email, Craigslist fix

  • New The site now remembers the language you pick and keeps it on your account across visits and devices.
  • New Account emails such as verification and welcome messages can now be sent in the language you prefer.
  • Improved The welcome email now explains how to create aliases on your phone with the Android app or the iPhone home screen shortcut.
  • Fixed Messages routed through Craigslist's anonymized reply addresses are now forwarded to your inbox instead of going missing.
  • Fixed Signing in with a social account now shows a clear error when the provider does not share an email address.

More reliable email forwarding

  • Improved Emails sent to your aliases are now forwarded through an additional delivery service, so they keep arriving even on accounts with low daily limits.
  • Fixed Fixed email verification not fully completing when you sign up with a social account.

Webhooks, an Android app, and a new pricing page

  • New A new Integrations page (Beta) lets you set a webhook URL that receives a POST request with the email data each time an alias gets a message.
  • New HideMail is now on Google Play: the Android app is linked from the menu and the homepage, which now also lists the Microsoft Edge add-on.
  • New Visitors from Russia can now sign up and log in with Yandex.
  • Improved The pricing page was redesigned with a clearer plan comparison and a new FAQ section answering common questions.
  • Improved The API now has public docs and endpoints to activate/deactivate aliases, set or delete your webhook URL, revoke a token, and filter, search and sort aliases.

Welcome email, extension onboarding page, and more languages

  • New After you verify your email address, you get a welcome email with setup tips, and a first alias is created for you automatically.
  • New Added a welcome page for the browser extension that explains how to pin the icon and use it on any site.
  • Improved The site is now available in more languages, including Arabic, Hebrew, and Hindi, with right-to-left layout where needed.
  • Improved When the browser extension hits the free-plan alias limit, the error message now includes a link to subscribe.
  • Improved Emails we send now switch to a backup delivery service if the main one fails, so they keep reaching you.

Homepage testimonials and better email privacy

  • New The homepage now shows a Testimonials section with what people are saying about HideMail.
  • Fixed Fixed stray invisible characters that could appear inside forwarded emails.

Apple Shortcut support and alias list fixes

  • New Create aliases on your iPhone, iPad or Mac with our new Apple Shortcut, linked from the homepage.
  • Improved Signing up with a social account now logs you in right away instead of asking you to sign in again.
  • Fixed Fixed pagination in the alias list so you can browse past the first page of your aliases.

Alias search, Twitter sign-in, and a design refresh

  • New You can now search your email aliases by address or note right from the dashboard.
  • New You can now sign in and sign up with your Twitter account.
  • Improved The sign-in, sign-up and password pages were redesigned, with social login buttons up top and a new logo.
  • Improved The homepage and footer got a fresh look, with a Give it a try banner, extension store badges and quick links to pricing, terms and privacy.
  • Fixed The site now remembers your chosen language and falls back to your browser's preferred language on your first visit.

Upgrade shortcuts and mobile language switcher

  • New You can now change the site language from the mobile menu, with flag icons for each language.
  • Improved The dashboard header now shows an Upgrade plan button for free accounts, and premium users see a Premium badge in the menu.
  • Fixed Incoming mail keeps being forwarded to you even if saving a copy to your account fails.

Reply to forwarded emails, reliable attachments, and a refund policy

  • New You can now reply to a forwarded email and your reply goes straight to the original sender.
  • Fixed Attachments on forwarded emails no longer overwrite each other or fail when file names contain slashes.
  • New A refund policy has been added to the Privacy Policy page.

Email forwarding fix and corrected free trial length

  • Fixed Fixed a bug that could stop some incoming emails from being forwarded to your inbox.

Forwarded attachments and Dutch language

  • New Attachments on emails sent to your aliases are now forwarded to your real inbox.
  • New You can now use the site in Dutch (Nederlands) via the language menu.

Daily forwarding limits

  • New Daily forwarding limits apply to each account and reset every day.

Translation help, a clearer upgrade notice, and new error pages

  • Improved More parts of the site have been translated into the supported languages.
  • Improved When you reach the free alias limit, the notice now links to the plans page so you can pick a plan.

Pricing page and 12 languages

  • New A language switcher with flag icons was added to the footer and the navigation bar.
  • New The site is now available in 12 languages, including Spanish, French, Italian, Japanese, Korean, Portuguese, Ukrainian and Chinese.
  • New A public pricing page compares the plans.

German and Russian, RapidAPI, no disposable emails

  • New The website is now available in German and Russian, and your language choice is remembered while you browse.
  • New The HideMail API is now also available through RapidAPI.
  • Improved Signing up or changing your account email now rejects disposable (temporary) email addresses.

Email verification for accounts

  • New You must now confirm your email address after signing up before you can use your account.

Raycast app for Mac

  • New Create and manage aliases from your Mac with the new Raycast app; quick links to the Chrome and Firefox extensions are now in the menu too.
  • Improved New API tokens are copied to your clipboard automatically, and the login page now links to the registration form.

New logo, fresh homepage and email verification

  • New You now receive a confirmation email to verify your address when you sign up.
  • Improved Refreshed homepage with new illustrations and rewritten text explaining how aliases hide your real address.

Alias notes, paid plans and Google or Facebook sign-in

  • New You can now add a private note to each alias on your dashboard to remember where you used it.
  • New You can sign in with Google or Facebook in addition to GitHub, and set your social avatar as your profile photo.
  • Improved Forwarded messages now show the original sender and the alias that received them in the subject line.
  • Fixed Deactivated aliases now block incoming messages instead of forwarding them anyway.
  • Improved Your alias list is now paginated and sorted with the newest first, so the dashboard stays fast.
  • New Subscribe to a paid plan to create more aliases.

Email aliases, GitHub sign-in, and a new landing page

  • New Create random email aliases in your dashboard; incoming mail is forwarded to your real inbox.
  • New Mark an alias as forwarding or blocking from your dashboard, and copy its address in one click.
  • New Register or log in with an email and password, or in one click with your GitHub account.
  • New New landing page explains how the service works and how to get started.
  • New Update your profile and password, enable two-factor authentication, and manage connected accounts.