- Home
- Temporary email services
- EvilMail
EvilMail
What it is
EvilMail provides disposable email addresses for receiving messages without exposing a primary inbox. Its web service offers multiple domains and selectable inbox lifetimes of 10 minutes, 30 minutes, 1 hour, 6 hours, or 24 hours. When the chosen period ends, the inbox and its messages are deleted. Temporary inboxes can receive mail but cannot send it. The free plan provides unlimited temporary email generation, multiple free domains, and no registration. Paid packages add premium and custom domains, permanent IMAP mailboxes, DNS management, higher API limits, and priority support. The REST API supports disposable inboxes, custom domains, email accounts, DNS management, and verification-code extraction. Temporary-email API access and code extraction require an active Bronze, Gold, or Premium subscription; free accounts are limited to the web interface for those functions. EvilMail lists extraction support for several major services and says it uses HTTPS/TLS, bcrypt-hashed passwords, and revocable API keys.
For and against
For
- Free plan requires no registration
- Inbox lifetimes range from 10 minutes to 24 hours
- Paid packages support custom domains and IMAP
- REST API includes verification-code extraction
- Temporary messages are automatically deleted
Against
- Temporary inboxes cannot send email
- API access requires a paid subscription
- Free accounts are limited to the web interface
- No free trial
The verdict
EvilMail focuses on short-lived receiving addresses with explicit deletion times and a free web option. Paid plans extend the service into custom domains, permanent mailboxes, and API workflows, while sending is intentionally unavailable.
Who it suits
It suits developers, QA engineers, journalists, researchers, and everyday users who want temporary receiving addresses. Organisations needing API access or permanent mailboxes need a paid package.
Plans and prices
Free
Unlimited temporary email generation · multiple free domains · inbox lifetime 10 minutes to 24 hours · no registration
Read 7 Oct 2026 · evilmail.pro
On the record
- Abuse controls
- EvilMail says it uses rate limits, CAPTCHA, blocking of known-bad patterns, and abuse-report handling to prevent misuse.evilmail.pro · read 7 Oct 2026
- API
- The REST API supports disposable inboxes, custom domains, email accounts, DNS management, and verification-code extraction.evilmail.pro · read 7 Oct 2026
- API access limit
- Temporary-email API and verification-code extraction require an active Bronze, Gold, or Premium subscription; free accounts can use only the web interface for those functions.evilmail.pro · read 7 Oct 2026
- Data collection
- EvilMail says temporary inbox use requires no personal details and that it does not sell or rent data.evilmail.pro · read 7 Oct 2026
- Data retention
- Temporary inboxes and their messages are automatically deleted when the chosen lifetime expires, with no hidden archive, according to EvilMail.evilmail.pro · read 7 Oct 2026
- Domains
- The service offers multiple domains, with premium domains available to paid users.evilmail.pro · read 7 Oct 2026
- Inbox duration
- Users can choose inbox lifetimes of 10 minutes, 30 minutes, 1 hour, 6 hours, or 24 hours, after which the inbox and its messages are deleted.evilmail.pro · read 7 Oct 2026
- Intended users
- EvilMail describes use by developers, QA engineers, journalists, researchers, and everyday users seeking to keep their primary inbox private.evilmail.pro · read 7 Oct 2026
- Paid features
- Paid packages offer custom domains, permanent mailboxes with IMAP, higher API limits, DNS management, premium domains, and priority support.evilmail.pro · read 7 Oct 2026
- Purpose
- EvilMail provides disposable email addresses for receiving messages without revealing a primary email address.evilmail.pro · read 7 Oct 2026
- Receive only
- Temporary inboxes cannot send email; EvilMail says this prevents sending spam from its domains.evilmail.pro · read 7 Oct 2026
- Security
- EvilMail says traffic uses HTTPS/TLS, passwords are bcrypt-hashed, and API keys can be revoked by regenerating them.evilmail.pro · read 7 Oct 2026
- Support
- Paid plans include priority support via Telegram and email.evilmail.pro · read 7 Oct 2026
- Verification integrations
- The API lists code extraction support for Google, Facebook, Twitter/X, Instagram, TikTok, Discord, LinkedIn, and iCloud.evilmail.pro · read 7 Oct 2026
