Brave browser version 1.94 introduces a built-in Email Aliases feature that lets you sign up for websites using a randomly generated address instead of your real one. Messages sent to the alias are forwarded to your actual inbox, but the website never learns your real email address. The feature is free for up to five aliases and works without a Brave Premium subscription — only a free Brave Account is required.
The idea addresses a well-known privacy gap: even when browsers block cookies and fingerprinting, your email address follows you across services and breach databases. If a site you signed up for is hacked, your email ends up with data brokers and phishing campaigns. An alias lets you cut off that leak at the source — disable or delete the alias if a site starts sending spam, and your real inbox is completely shielded. Brave stores the primary address and aliases in encrypted form, deletes forwarded messages from its servers within seconds of delivery, and uses the OPAQUE protocol (RFC 9807) to authenticate your Brave Account without ever transmitting your password or its hash to Brave’s servers.