The change button generates a new address. Your current address is remembered in your browser, so if you come back to Boxo on the same device, you find the same inbox.
| Point | How Boxo works |
|---|---|
| Message lifetime | Removed from the inbox 3 hours after arrival, permanently erased within 24 h |
| Capacity | The 50 most recent messages per address |
| Sending | Not possible: Boxo is receive-only |
| Sign-up | None, no password |
| Email content | Scripts, forms and risky elements removed before display |
This is the most important point. A Boxo inbox is protected by no password: anyone who knows the address can read the messages it receives. That is what makes the service instant, but it comes with a few rules:
In short, Boxo is for sign-ups that don't matter, not for your digital identity.
Your main email address is often the login for dozens of accounts. Each time you give it to a little-known site, you take three risks: spam, because many sites share or sell their lists; data breaches, since stolen address databases circulate and fuel phishing; and tracking, because one address lets companies link your accounts together. A disposable address breaks that link for every service that has no need to contact you again.
Some services keep lists of temporary email domains and block them at sign-up, especially social networks, banks and e-commerce platforms. This isn't a flaw in Boxo: those sites want to be able to reach you long term. When that happens, it's a good sign the account deserves your real address, or an alias from your email provider.
For accounts you keep, there is a middle ground: aliases. Gmail, for example, accepts name+shop@gmail.com, which lands in your usual inbox and lets you filter messages or spot who shared your address. Apple's "Hide My Email" and several email providers also offer relay addresses. Boxo remains the simplest option for things that are truly one-off.
Incoming messages may contain HTML. Before displaying them, Boxo strips scripts, forms, embedded frames and attributes that could trigger an action. Links remain clickable but open without passing information about Boxo to the destination site. Stay alert all the same: an email received on a disposable address can be phishing like any other.
No, Boxo is receive-only. It is a temporary inbox for receiving a code or a link, not for correspondence.
They disappear from the inbox three hours after they arrive and are permanently erased within 24 hours; in between, only the site operator can view them, to fight abuse. Each address keeps at most its 50 most recent messages.
Yes, if they know the address: Boxo inboxes have no password. Never receive sensitive information there, and prefer a random address that is hard to guess.
Yes, completely, with no sign-up and no usage limit. The service is funded by the advertising shown on the site.
Check that the copied address is complete and wait a minute or two: some sites send their emails with a delay. If the site rejects temporary addresses, the message will never be sent.
Emails received here are deleted automatically after a few hours.