PCWorld (USA)

What is masked email? This new spin on an old practice supercharg­es your security

Using unique login informatio­n is one way to make account takeovers harder for would-be criminals. Email masking adds another layer to that concept.

- BY ALAINA YEE

Online security used to be simple. All you needed was a good password, and in the early days, you didn’t need a ton of characters to achieve that goal. Privacy also wasn’t quite as fragile as it is today. Your email wasn’t constantly being lost to yet another data breach.

But as online hackers and criminals get more sophistica­ted, so have recommenda­tions for best security practices. Currently experts recommend the use of

unique, random passwords ( fave. co/3lrkfrz)— and the more characters, the better—plus two-factor authentica­tion as a strong baseline. But you can go further— and companies on the front lines of online security are trying to make that easier.

One such step is masked email. (You may also hear it referred to as email masks or email masking.) The practice formalizes a long-available feature known as email aliases as a privacy and security measure. A randomized email address is created to hide (aka mask) your true email address for an online account. Any correspond­ence sent to the masked email address gets forwarded to your actual inbox. The sender doesn’t know the email’s final destinatio­n. They’ll only find out if you accidental­ly reply to a message as your main account.

The benefits are twofold. You get better privacy, because the more you use different masked email addresses (ideally, one per online account), the more you limit the potential fallout of the informatio­n leaking in a data breach. That email address won’t work on other websites as a login ID or for a password reset. Nor can someone take over the address like with an actual account. It’s just a forwarding address, and a disposable one at that.

MASKED EMAIL VS. EMAIL ALIASES

If you already filter your incoming email and/ or guard against spam by using email aliases, masked email may sound like an empty marketing term for a familiar feature. But there is a slight difference—email masking is a narrower use of email aliases, with a particular style in how the aliases are created.

With masked email, the focus is on autogenera­ted random, unique identifier­s. Think 4k9xkeo@emailservi­ce.com or even siftflask.3242@emailservi­ce.com. You don’t need to come up with your own aliases, thus streamlini­ng their use. The suggested aliases also completely obscure your email address,

which inserting periods into your username (as in random.username@gmail.com) or adding a plus sign and an extra phrase (as in randomuser­name+alias@gmail.com) don’t achieve. You should also get streamline­d controls to block incoming mail or disable the forwarding address if it gets flooded with unwanted email.

The result is a faster, easier way to maintain anonymity in your contact info—and for sites that default to email addresses as usernames, your login info too. With the added benefit of integratio­n with some browsers and password managers, email masking saves time and reduces the hassles of the DIY route.

WAYS YOU CAN START USING MASKED EMAIL

Two common ways to get email masking is through an email provider or a dedicated service. Email providers offer the feature as an integrated part of the service. Access will likely cost you a little bit, though. At the moment, few providers offer masked email, and the well-known sites that do bundle it into paid plans (for instance, Apple icloud+ [ fave.co/39out22] and Fastmail [ fave.co/3ybstdc]). That said, prices can be as low as $0.99 USD per month (icloud+).

Dedicated services can be used with any site, main email address, browser, password manager, and so forth. You create an account using the email address you want to receive the forwarded email, and then create masks through the web interface or a browser extension. Some services also offer premium plans that allow sending and replying from an email mask, support larger file attachment­s, and generate email masks for multiple email addresses. All email masks are managed through the service, which is less convenient than with an email provider. You won’t have a single repository for your direct and forwarded email.

To really simplify the incorporat­ion of email masking into your daily flow, choose a service that integrates with a password manager. Once you connect your email account or masking service, you’ll be able to

create the email masks directly within the password manager. That eliminates the need to copy and paste the new forwarding address when saving login info. Right now, 1Password ( fave.co/3needqo) has a partnershi­p with Fastmail, and

Bitwarden just announced relationsh­ips ( fave.co/3zwf1eq) with Simplelogi­n ( fave.co/3yecbk8), Anonaddy ( fave.co/3bj7zjg), and Firefox Relay ( fave.co/3a1tqyp). (When asked, Bitwarden said it intends to add more integratio­ns over time, as well as expand them to products like Fastmail.) Apple users can use the company’s Hide My Email feature; email masks automatica­lly save to icloud Keychain if you actively use the latter.

FREE EMAIL MASKING SERVICES

While getting masked email through an email provider usually costs money, dedicated services usually offer a free plan. They’re more limited in scope but still provide a great start.

Anonaddy allows you to create unlimited “standard” email masks. These are based on your Anonaddy ( fave.co/3bj7zjg) username, however—so if you want more privacy, you can then use one of your 20 free shared domain email masks. You can send and reply from your aliases, too. The catch:

You’re limited to 10MB (yes, megabytes) of bandwidth per month. The company estimates that at roughly 140 emails max ( fave.co/3obhmbi). (Start adding in attachment­s and that number drops very, very fast.)

Simplelogi­n ( fave.co/3qgga03) offers 15 free forwarding addresses. There are no bandwidth limitation­s, and forwarded emails can be up to 25MB each. The service also allows you to send and reply email from an alias, too.

Firefox Relay ( fave.co/3oi18mf) lets you create just five free forwarding addresses, with a 10MB size limit per email and no bandwidth limitation­s. It’s the most

stripped-down of the freebie tiers, but it makes the list for a couple of reasons: It works across devices (and browsers—there’s a Chrome extension too [ fave.co/3hjasrp]), and currently, upgrading to the paid tier with unlimited addresses and the ability to send email from aliases is just $1 per month. (If you’re intensely focused on privacy, consider quitting Chrome and switching to Firefox [ fave.co/3xz10kt] while you’re at it.)

Apple users also have an alternativ­e option called Sign in with Apple ( fave. co/3xrgfpf). For apps and websites that allow you to sign in with your Apple ID, you get access to a limited form of Hide My Email ( fave.co/33ptz3x), the company’s email masking service. Apple will generate a random forwarding email that will pass messages from the site or app to your Apple ID’S linked email address. Unlike with the version of Hide My Email that comes with icloud+, you can’t change the generated aliases or create ones independen­tly. Also, as a general security note, signing in with this method can carry risk, since anyone with access to your Apple account could also then access linked services and apps, too.

P.S.—UNIQUE USER IDS HELP ONLINE PRIVACY AND SECURITY, TOO

The general concept behind masked email can be applied to creating user IDS, too. For sites that ask you to create a dedicated username (such as randomuser­1), going with a new identifier each time makes it harder for people to track you across the web. Unauthoriz­ed access to your other accounts is less likely, too, when your username and password are different for every site and app. And you can combine masked email with a unique user ID so that you’re really hard to trace.

Sound complicate­d? This is why a password manager is so handy. It lets you continuall­y level up your security with very little mental burden. Choose a paid password manager ( fave. co/3lrkfrz) or a free one ( fave. co/3nt9ndq)— either will both make life easy.

 ?? ??
 ?? ?? Masked email is a more specific (and automated) take on email aliases.
Masked email is a more specific (and automated) take on email aliases.
 ?? ?? Some email providers offer masked email as part of their plans. Fastmail takes that one step further by offering integratio­n with a password manager for super-simple creation and storing of aliases.
Some email providers offer masked email as part of their plans. Fastmail takes that one step further by offering integratio­n with a password manager for super-simple creation and storing of aliases.
 ?? ?? Simplelogi­n is the most generous with the features available to free users.
Simplelogi­n is the most generous with the features available to free users.
 ?? ?? Live exclusivel­y in Apple’s ecosystem? Signing in with Apple is a free way to get started with its take on email masking.
Live exclusivel­y in Apple’s ecosystem? Signing in with Apple is a free way to get started with its take on email masking.

Newspapers in English

Newspapers from United States