Real-time delivery, no refreshing
The inbox holds an open server-sent events connection. A message that arrives while you are reading this appears within a second, without polling and without you touching anything.
Free temporary email, ready in one second
9inbox gives you a working disposable address the moment this page loads. Paste it into any registration form, and the confirmation email — including the OTP code — shows up here instantly. No sign-up, no password, no trace.
Waiting for mail…
Paste the address above into any sign-up form. Messages appear here the moment they arrive.
Free
The guest tier costs nothing and asks for nothing — no email, no card, no account.
Instant
Your address exists before the page finishes rendering. Copy it and move on.
Anonymous
We never ask who you are. Your inbox belongs to this browser, not to a name or an account.
Built for developers
A documented REST API with server-sent events, so your test suite can read mail too.
How it works
There is no account to create and nothing to install. The whole flow happens in one browser tab.
One is already generated and waiting at the top of this page. Press Copy, or scan the QR code to carry it over to your phone. Want a different domain? Pick one from the domain list and a fresh address is issued on it.
Use it in any registration form, newsletter box, download gate, or trial signup — anywhere that wants an email address before it will let you through.
The inbox on this page updates over a live connection, so there is nothing to refresh. Verification codes are detected automatically and shown as a one-tap copy button next to the message.
Read this first
Every disposable mail service shares these four limits. Most of them bury the details in the terms of service. We would rather you know now than find out at the worst possible moment.
Only this browser can open your inbox — someone who knows the address still can't read it. But there is no password: clear your browser data and the inbox is gone for good, and once an address expires, the name can eventually be claimed by someone else. Never use a temporary address for banking, payment wallets, government portals, work accounts, or anything you would be upset to lose.
Mail is removed automatically once its retention window closes — one hour on the guest tier, three days on a free account, ninety days on Pro. The countdown is shown next to every address, so nothing disappears without warning. If you need a message later, download it or upgrade before the timer runs out.
9inbox receives mail only. There is no compose button and there never will be. This is deliberate: a disposable service that can send mail becomes a spam relay within days, its IP addresses get blacklisted, and then it stops receiving mail too. Receive-only is why messages actually reach you.
A growing number of sites check sign-up addresses against public lists of disposable domains and reject them. If a site refuses your address, switch to a different domain from the list below and try again — that usually solves it. Premium domains are blocked far less often because they are not on the public lists.
Features
Most disposable mail sites are a text box and a wall of ads. These are the things we actually built.
The inbox holds an open server-sent events connection. A message that arrives while you are reading this appears within a second, without polling and without you touching anything.
Verification codes are pulled out of the message on the server and shown as a copyable badge right in the message list. You never have to open the email, hunt for the digits, and select them by hand.
Link the bot and a code arrives as a Telegram message with the digits in a tap-to-copy block. No going back to a browser tab to sit and wait for mail that may already be there.
If one domain is rejected by the site you are signing up to, switch to another in one click. Premium domains are kept off the public disposable-domain lists and get through far more often.
On the Business plan you point the MX record of a domain you own at 9inbox and get a catch-all inbox on it. Nothing about the address looks disposable, because it is not on anyone's list.
Create addresses, read messages, and stream new mail from your own code. Webhooks are signed with an HMAC secret and retried with backoff, so an automated test suite can wait on a real confirmation email.
Every address and every message carries an expiry timestamp and is deleted by a scheduled job, not archived. We keep as little as the service can function with, which is also the cheapest thing to defend.
Domains
Every domain below works right now. Each one has its own page where you can generate an address on it directly.
If a website rejects your address, it has almost certainly matched the domain against a public disposable-email blocklist rather than checked anything about you. Trying a second domain from this list is usually enough. Premium domains are deliberately kept off those lists and are rejected far less frequently.
Guest addresses, extendable in one click
Generated before the page finishes loading
No email, no password, no card
On the Business plan
The basics
A temporary email address — also called a disposable address, throwaway address, or temp mail — is a real, working mailbox that is created on demand and destroyed automatically after a short period. It accepts mail exactly like a normal address does. The difference is that it is not registered to a person, it needs no password, and nobody expects it to still exist next month.
The idea exists because of a mismatch. A great many websites will not show you anything until you hand over an email address: a whitepaper behind a form, a trial that needs confirming, a forum that wants you verified, a shop that offers a discount code for signing up. Very few of those relationships are worth a permanent line into your real inbox. A temporary address closes that gap — you get the thing you came for, and the mailing list that follows arrives somewhere that will not exist by the time it becomes annoying.
Technically nothing exotic is happening. 9inbox owns a set of domains and runs mail servers that accept messages for them. When you are given an address, a record is created saying that mail for that local part should be stored and shown to your session. When the address expires, the record and everything attached to it is deleted, and mail sent to it afterwards is rejected at the SMTP level rather than being quietly accepted and dropped.
Why bother
The most common reason is simply volume. An email address you have used for a decade accumulates hundreds of senders, and once your address is on a list it is on that list permanently — unsubscribe links help, but they also confirm to the sender that the address is live. Keeping one-off signups off your main address is the only reliable way to stop that accumulation from happening in the first place.
The second reason is exposure. Data breaches are routine, and the address you signed up with is almost always part of what leaks. When an address that exists in only one place leaks, you learn precisely who leaked it, and the damage stops there because that address is already gone. When your primary address leaks, it joins a credential-stuffing list and you start receiving convincing phishing attempts that reference services you genuinely use.
The third reason is professional rather than personal. Anyone who tests a signup flow needs a supply of addresses that receive real mail, and needs them faster than a human can create mailboxes. That is why 9inbox has an API and a live event stream instead of only a web page: an automated test can create an address, drive a registration form, wait for the confirmation email, read the code out of it, and finish the flow — all without a person watching.
In practice
You want the file, the trial, or the discount code, and the site wants an address before it will hand any of them over. A temporary address settles the exchange without either side pretending it is the start of a relationship.
A newsletter archive that requires a subscription to read one article is a common pattern. Subscribe with a disposable address, read the message, and let the address expire.
Support forums and community sites often require a verified address to post a single question. There is no reason for that account to be linked to the address you use for work.
Developers and QA engineers need addresses that actually receive mail, on demand, in bulk. The API creates them programmatically and streams the confirmation email back to your test runner.
Airport and hotel networks routinely demand an address before granting access, and that address is sold on more often than not. A disposable one costs you nothing.
A single order from a shop you may never use again does not need to be tied to your main identity, especially if that shop's marketing habits are unknown to you.
Be careful
The rule is short: if losing access to the account would be a real problem, do not create it with a temporary address. A disposable inbox has no password, is readable by anyone who knows the address, and disappears on a schedule. Every one of those properties is a feature for a one-off signup and a serious liability for anything you intend to keep.
Banks, payment wallets, crypto exchanges, and invoicing tools send password resets and transaction confirmations to your address. An inbox anyone can read is an inbox anyone can use to take over the account.
Tax portals, health records, and identity documents are not recoverable if the address on file expires. Many of them also require a verifiable address by law.
Subscriptions, licences, and work tools eventually need a password reset. If the address that reset goes to no longer exists, neither does your access.
Comparison
Disposable mail is an old category, and most of the sites in it are unchanged from a decade ago: a generated address, a list you refresh by hand, and enough advertising to pay for the servers. The table below is an honest account of where 9inbox differs — and where it does not, because a comparison in which one column wins every row is a sales page, not information.
| 9inbox | Typical temp mail site | |
|---|---|---|
| Time to a working address | Generated during page load | Generated after a click, sometimes after a captcha |
| New mail appears | Pushed over a live connection | On manual refresh or a polling timer |
| Verification codes | Extracted server-side, one tap to copy | You open the message and select the digits |
| Number of domains | Several, with premium domains kept off blocklists | One or two, usually well known to blocklists |
| Custom domain | Yes, on the Business plan | Rarely offered |
| API for developers | REST plus a server-sent events stream | Usually none, or an undocumented endpoint |
| Address lifetime | 10 minutes to permanent, depending on plan | Fixed, typically 10 minutes to an hour |
| Advertising | None on paid plans | Present on every tier |
| Can it send mail? | No — receive only, by design | No — the same limit applies everywhere |
| Is the inbox private? | Yes — the inbox is tied to your session; others cannot read it | No |
Pricing
The guest tier is free forever and needs no account. You only pay when you want your inbox to outlive the session.
One address, right now, no account.
Keep your inbox across devices.
Permanent addresses and no ads.
Your own domains, built for test suites.
Prices are in Vietnamese đồng and include VAT. Plans can be cancelled at any time and take effect at the end of the current billing period.
FAQ
Short answers to the things worth knowing before you use a disposable address.
A temporary email address is a working inbox that is created on demand and deleted automatically after a set period. It receives mail like any other address, but it is not tied to your identity and you never have to set it up. People use one when a website demands an email address before it will show them anything — a download, a trial, a forum, a discount code — and they do not want that address in their real inbox forever.
No. An address is generated for you the moment the page loads, and you can copy it and start receiving mail without typing anything. An account only becomes useful when you want your inbox to survive longer than the session: registered users keep their addresses for 24 hours instead of 10 minutes, keep messages for three days instead of one hour, and can use the same addresses from a second device.
A guest address lives for 10 minutes and can be extended with one click for as long as you keep the tab open. A free account raises that to 24 hours. On the Pro and Business plans addresses do not expire at all, so you can keep using the same address for a service you signed up to months ago.
No. 9inbox receives mail only and has no way to send it. This is a deliberate design decision, not a missing feature: a disposable mail service that could send would be used for spam within days, its mail servers would be blacklisted, and then incoming mail would stop being delivered too. Receive-only is precisely why messages reach your temporary inbox reliably.
It is safe for what it is designed for and unsafe for everything else. A disposable inbox has no password, so anyone who knows the address can read what arrives in it. That is fine for a newsletter signup or a one-off download. It is not fine for banking, payment wallets, government services, work accounts, or anything holding money or personal records. Use a real mailbox with a password and two-factor authentication for those.
Many sites check the domain of a sign-up address against public lists of known disposable-email providers and refuse anything that matches. It is the domain being rejected, not you. Switching to another domain from our list usually gets you through, and premium domains are kept off those public lists specifically so that they keep working.
Yes. There is a documented REST API for creating addresses, listing and reading messages, and downloading raw .eml files, plus a server-sent events stream that pushes new mail to your code as it arrives. Verification codes are extracted server-side and returned as a field on the message, which is usually the part that makes automated sign-up tests worth writing. The API is available on the free account tier at 60 requests per hour and scales to 600 per minute on Business.
They are deleted from the database and the object store by a scheduled job, along with any attachments. Expired data is removed, not archived — there is no cold storage copy sitting somewhere. If you need a message to outlive its retention window, download it before the countdown finishes or move to a plan with a longer window.
There are more answers on the full FAQ page. Read the full FAQ
Nothing to install, nothing to fill in. Scroll back up, press Copy, and paste it wherever you were being asked for an email.