Think Amazon, Apple, etc.

I use different emails via SimpleLogin for many services just to make it easier to spot when an email is caught in a breach and to spot just which service is the one that got breached (think of big paste breaches). Another example is if I have my real email address breached, some malicious person could see if I have an account with a service by entering my email and seeing if anything comes up (your password was incorrect, profile picture I have on the account, a password reset email has been sent to redac***@censor.com. I’ve seen this a lot with my Microsoft account, which I disabled my email for, and instead use my Gmail address for, but I digress.

I use my Amazon account a lot, but was holding off on using an alias on it. Obviously if I stop paying for a relay service I won’t have access to the email relay service and possible forwarding, but this shouldn’t be a problem. I was curious about how people here utilize aliases and the way you personal have your system/workflow setup.

Thanks!

  • Guadin@k.fe.derate.me
    link
    fedilink
    arrow-up
    2
    ·
    1 year ago

    I have two domain names. One goes to anonaddy and I use that for all non-important stuff. Maillinglists (for discount), orders on a sketchy site, signingup for social media.
    The other ends up at protonmail and is for more serious stuff I don’t want to route via anonaddy (while I trust the developer and the service, I just want extra safety). I use aliases at protonmail as well to know where stuff comes from.

    Deciding which domain to use depends on a couple of things:

    • what happens if they access my mail. Is there a payment option connected, can they get into other services or request stuff from the government? If yes, chances are I go with the proton route.
    • do I expect a lot of advertisement, selling of my data or security breaches? If yes, I go with the anonaddy route.

    For amazon I use the anonaddy route. I do not add my creditcard or bank account to my account and if they do gain access, they will only get my email.

    Hope this helps.