Mailfornet

Temp Mail for OTP and Verification Codes

A one-time code is the single most common reason people need a disposable address. Here is how to receive one, and when you should not.

Most sign-up forms now send a one-time password — an OTP — before they will let you do anything. It is a six-digit number or a confirmation link, it is valid for a few minutes, and once you have typed it in you never need it again. That is a very specific job, and it is exactly what a temporary inbox is built for.

Generate an address, paste it into the form, and the code appears in the inbox on this site within seconds. Nothing is installed and no account is created. The address stays until you generate a new one, and it clears itself after 3 days unused — taking the code with it.

Why an OTP suits a disposable address

The value of a one-time code lasts about five minutes. After that it is dead text. The email address you gave in order to receive it, however, lives on: it goes onto a mailing list, gets shared with the site's "partners", and turns up in a breach dump two years later. The code was temporary; the consequence was not.

Using a throwaway address for that one exchange breaks the chain. You get the thing that was useful and none of the thing that was not.

How fast codes arrive here

Most OTP emails reach the Mailfornet inbox within a few seconds of being sent. The inbox refreshes on its own every few seconds, so there is nothing to click. If a code has not appeared after a minute, it is almost always one of the reasons below rather than a delay.

When the code does not arrive

This is the common complaint, and it usually has a specific cause.

The site rejected the domain

Many services keep a list of known disposable email domains and refuse them. Sometimes they say so; more often the form just says "enter a valid email" or accepts it and never sends anything. Mailfornet offers several domains and networks, so switching to another one and generating a new address usually works on the second attempt.

The address expired before the code arrived

A free address stays until you replace it, so a slow form is no longer a problem. If you pressed New address while waiting, though, the old one was deleted along with anything sent to it — ask the site to resend to the new address.

The site sends by SMS, not email

A large number of services verify by phone number instead. No email address, temporary or permanent, will help with that. If the form asks for a mobile number, email is not the route.

The mail genuinely bounced

Occasionally a sender's own delivery setup is at fault rather than anything at your end. Our guide to email bounce codes explains what the error messages mean, and why verification emails go missing covers the rest.

When you should not use a disposable address for an OTP

This is worth being direct about, because getting it wrong is expensive.

An OTP is usually the first step in creating an account. If that account is one you will ever need to get back into, the address that received the code becomes your password-reset route. Once the throwaway inbox is gone, so is your way back in.

So: use a temporary address for a one-off download, a forum, a trial, a Wi-Fi portal, a shop you will visit once. Do not use one for banking, payments, government services, healthcare, your employer, or any account holding money or personal records. For those, use your real address or a Gmail alias, which still reaches you.

Receiving OTPs in automated tests

If you are a developer, the same problem appears in a different shape: your test suite signs a user up, and the test needs to read the verification code back out. Doing that with a real mailbox is slow and fragile.

The Mailfornet API creates an inbox from code, waits for the message to arrive, and returns it — so a signup test runs end to end in CI with nobody watching a browser. See the quickstart if that is your situation.

Common questions

How long does an OTP take to arrive?

Usually a few seconds. The inbox on this site refreshes automatically, so there is nothing to press. If nothing has arrived after a minute, the sender has most likely rejected the domain rather than been slow.

Why does the site say my email address is invalid?

It has recognised the domain as a disposable one and refused it. Generate a new address on a different Mailfornet domain or network and try again; the lists these sites use are never complete.

Can I receive an OTP sent by SMS?

No. Mailfornet handles email only. If a service verifies by text message, you need a real phone number — no email address will substitute for one.

Is it safe to receive a verification code on a temporary inbox?

For a low-stakes sign-up, yes. Your inbox opens only in the browser that created the address, so knowing the address alone is not enough to read it. For anything involving money, identity or records you may need later, use an address you keep.

The address expired before my code arrived. What now?

Generate a new address and ask the site to resend. To avoid it happening again, create the address first and then fill in the form, rather than the other way round.