EvilMail
EvilMail provides disposable email addresses for receiving messages without exposing a primary address.
What EvilMail is
EvilMail provides disposable email addresses for receiving messages without exposing a primary address. Its web interface offers multiple domains and inbox lifetimes of 10 minutes, 30 minutes, 1 hour, 6 hours, or 24 hours. When the chosen lifetime ends, the inbox and its messages are deleted. Temporary inboxes receive mail only and cannot send it. The free plan allows unlimited temporary email generation, multiple free domains, and no registration. Paid packages add premium and custom domains, permanent IMAP mailboxes, DNS management, higher API limits, and priority support. The REST API covers disposable inboxes, custom domains, email accounts, DNS management, and verification-code extraction. Temporary-email API access and code extraction require an active Bronze, Gold, or Premium subscription; free accounts can use only the web interface for those functions. EvilMail lists code extraction for Google, Facebook, Twitter/X, Instagram, TikTok, Discord, LinkedIn, and iCloud. It says traffic uses HTTPS/TLS, passwords are bcrypt-hashed, API keys can be revoked, and data is not sold or rented.
Good
- Free plan with no registration
- Inbox lifetimes from 10 minutes to 24 hours
- Temporary messages are automatically deleted
- Custom domains and permanent IMAP mailboxes
- REST API with verification-code extraction
Watch out
- Temporary inboxes cannot send email
- API access requires a paid subscription
- Free accounts have web-only API functions
- No free trial
Who it suits
EvilMail suits developers, QA engineers, journalists, researchers, and everyday users who want temporary inboxes or a private primary address. Paid users needing custom domains, IMAP, or API access have additional options.
Verdict
EvilMail focuses on short-lived receiving addresses, with paid plans extending domains, storage, and API capabilities. The receive-only design and subscription requirement for API functions are key limits.
Plans and prices
From EvilMail's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Unlimited temporary email generation · multiple free domains · inbox lifetime 10 minutes to 24 hours · no registration |
The facts
Each one read from EvilMail's own pages, with the date it was checked.
What it does
- Abuse controls
- EvilMail says it uses rate limits, CAPTCHA, blocking of known-bad patterns, and abuse-report handling to prevent misuse.checked 7 Oct 2026
- API
- The REST API supports disposable inboxes, custom domains, email accounts, DNS management, and verification-code extraction.checked 7 Oct 2026
- API access limit
- Temporary-email API and verification-code extraction require an active Bronze, Gold, or Premium subscription; free accounts can use only the web interface for those functions.checked 7 Oct 2026
- Data collection
- EvilMail says temporary inbox use requires no personal details and that it does not sell or rent data.checked 7 Oct 2026
- Data retention
- Temporary inboxes and their messages are automatically deleted when the chosen lifetime expires, with no hidden archive, according to EvilMail.checked 7 Oct 2026
- Domains
- The service offers multiple domains, with premium domains available to paid users.checked 7 Oct 2026
- Inbox duration
- Users can choose inbox lifetimes of 10 minutes, 30 minutes, 1 hour, 6 hours, or 24 hours, after which the inbox and its messages are deleted.checked 7 Oct 2026
- Intended users
- EvilMail describes use by developers, QA engineers, journalists, researchers, and everyday users seeking to keep their primary inbox private.checked 7 Oct 2026
- Paid features
- Paid packages offer custom domains, permanent mailboxes with IMAP, higher API limits, DNS management, premium domains, and priority support.checked 7 Oct 2026
- Purpose
- EvilMail provides disposable email addresses for receiving messages without revealing a primary email address.checked 7 Oct 2026
- Receive only
- Temporary inboxes cannot send email; EvilMail says this prevents sending spam from its domains.checked 7 Oct 2026
- Security
- EvilMail says traffic uses HTTPS/TLS, passwords are bcrypt-hashed, and API keys can be revoked by regenerating them.checked 7 Oct 2026
- Support
- Paid plans include priority support via Telegram and email.checked 7 Oct 2026
- Verification integrations
- The API lists code extraction support for Google, Facebook, Twitter/X, Instagram, TikTok, Discord, LinkedIn, and iCloud.checked 7 Oct 2026
Alternatives to EvilMail
- 1
EmailOnDeck
Free planAndroidiOSWebAPI8.9Free plan - 2
Guerrilla Mail
Free planOpen sourceAndroidWebAPIExtension8.9From $9.99 a year - 3
1SecMail
Free planAndroidWebAPIExtension8.5From $35.99 a year - 4
Mail.cx
Free planWebAPI8.1From $9.90 a year - 5
TempMailo
Free planAndroidiOSWebExtension8.1Free plan - 6
MailDrop
Free planWebAPI8.1From $5 a month