Safety and Responsible Use

Last updated: August 8, 2026.

Choose the right type of inbox Use temporary email for low-risk verification, testing, downloads and sign-ups. Use a permanent provider you fully control for banking, healthcare, government, payroll, legal records and primary account recovery.

Treat every received message as untrusted Temporary inboxes can receive email from unknown senders. A familiar logo or urgent subject line is not proof that a message is genuine. - Check the complete sender address, not only the display name - Be cautious with urgent requests, unexpected invoices and security warnings - Preview the destination of a link before opening it - Never enter a permanent-account password after following a suspicious link - Do not run unexpected attachments or executable files

Protect mailbox credentials Use a unique password of at least 12 characters containing uppercase, lowercase, a number and a special character. Do not reuse a banking, social-media or work password. Anyone with the email address and valid password or session may be able to read the inbox.

Save access safely If a service may send another code or confirmation later, save the mailbox address and password in a trusted password manager. Guest passwords may not be recoverable. On a shared computer, close the session and clear saved browser data when finished.

Understand OTP limits TempMail Cloud receives OTPs sent by email; it does not receive SMS. A one-time code proves access to that inbox at that moment—it does not prove the message or website is safe. Never share a code with someone who contacted you unexpectedly.

Protect important account recovery Do not make a temporary mailbox the only recovery method for an account you cannot afford to lose. A domain can be blocked, delivery can fail and access can be interrupted. Add a durable recovery address and stronger authentication where the third-party service permits it.

Responsible testing Developers and QA teams should test only systems they own or are authorized to assess. Use isolated test data, avoid real customer information and remove unnecessary mailboxes after a test cycle.

Report abuse Use our Contact page and select Report abuse. Include the mailbox address or receiving domain, sender, subject, approximate time and a concise description. Screenshots are helpful, but remove unrelated personal data. Never send us a password or active OTP.

What happens after a report We review reports in context and may preserve evidence, restrict sessions, disable a mailbox or domain, remove content, rate-limit traffic or escalate serious matters to a provider or authority. We do not promise a specific outcome or disclose private enforcement details.

If you think an account is compromised Stop using the mailbox, change its password if you still have access, change any reused passwords immediately and update the recovery address on important third-party accounts. For financial loss or identity theft, contact the relevant provider and local authorities.