Brave’s New Email Aliases Feature Keeps Your Real Inbox Out Of Data Breaches

Ever signed up for a random site just to get flooded with spam months later? Brave just gave you a way to stop that before it starts. The latest version of Brave, version 1.94, has rolled out a feature called Email Aliases — disposable email addresses you can generate on the fly whenever you sign up for a new service. Messages still land in your real inbox, but the website itself never sees your actual address.

Why This Matters

Brave already isolates browsing data to stop websites from piecing together your identity through cookies or cache tricks. But email addresses were always the one piece of personal data still sitting on company servers, waiting to be exposed. As Brave put it in its announcement, if a site you signed up for gets hacked, your email can circulate through data brokers and phishing lists “for years afterward.”

Email Aliases closes that gap by blocking cross-site identity matching, cutting down on spam, and reducing your exposure to phishing campaigns that often follow data breaches.

How Brave Works?

To set it up, you’ll need a free Brave Account — separate from Brave Premium — with your primary email registered so forwarding can happen. Brave also uses OPAQUE, a password-authenticated key exchange standardized as RFC 9807, so your password itself is never transmitted to Brave’s servers during login. That protects against memory-scraping attacks and bulk credential cracking, though it won’t save you from phishing or a genuinely weak password.

One practical heads-up: since Brave is still building its reputation as an email sender, forwarded messages might land in your spam folder at first. Worth checking there if an expected email doesn’t show up right away.

FAQs