Brave Browser Adds Email Aliases to Limit Online Tracking

Brave Browser 1.94 introduces email aliases that let users hide their primary email address when signing up for online services.

Brave email aliases hide primary addresses

The new feature creates disposable email addresses that forward messages to a user’s main inbox.

This allows users to keep their real address private from websites. It can also make it harder for companies and data brokers to connect activity across different services.

Brave already uses privacy features that limit tracking through cookies and cached data. However, websites still store email addresses on their servers. Brave email aliases aim to reduce this privacy risk.

Feature can reduce spam and phishing risks

A separate address for each service can help users identify where unwanted messages originate.

If a website suffers a data breach, attackers may obtain the alias instead of the user’s main email address. That could reduce long-term exposure to spam and phishing campaigns.

Users can disable an alias if it begins receiving suspicious or unwanted messages.

Users need a free Brave Account

To use the feature, users must create a free Brave Account and add their primary email address. The account handles message forwarding between the alias and the user’s inbox.

Brave said this is separate from a Brave Premium account.

The browser maker uses OPAQUE, a password-authenticated key-exchange protocol, to authenticate Brave Account users. According to the company, the method prevents passwords and password hashes from reaching its servers.

However, this technology cannot protect users from phishing attempts or weak passwords.

Free tier includes five email aliases

Brave offers up to five aliases at no cost. The company plans to introduce a paid Premium option later, which will remove this limit.

Brave stores generated aliases and primary addresses in encrypted form. It deletes forwarded messages from its servers within seconds of delivery, except for automated spam and malware filtering.

Notes connected to aliases stay on the user’s device. If users synchronise them through Brave Sync, the notes receive end-to-end encryption.

Brave warned that messages sent through new aliases may initially appear in spam folders. Users should check those folders while the service builds its email-delivery reputation.