A Privacy Nerd’s Dream: Password Manager That Creates Email Aliases

Imagine signing up for a new service and not having to wonder which password variation you used or whether this email address will end up sold to spammers. That’s the promise of AliasVault, a new open-source project from a developer who’s been fighting email spam since 2013.

The All-in-One Privacy Shield

AliasVault is essentially two tools in one: a standard, end-to-end encrypted password manager and a generator for unique email aliases. The core idea is simple but powerful. Instead of reusing a few email addresses across the web, you get a fresh, disposable alias for every website. If one gets leaked in a data breach or sold to spammers, you can just kill that alias without affecting your primary inbox. It’s a privacy enthusiast’s logical extension of good password hygiene.

The developer, who goes by Lanedirt, built this after running a public temporary email service for a decade. He wanted something more permanent and under the user’s full control. “I wanted to build something more privacy-centric and fully self-hostable,” he writes. The result is a tool you can run on your own server if you don’t trust the cloud.

The Catch: You Can’t Talk Back (Yet)

The most immediate limitation, which commenters on Hacker News quickly spotted, is that these aliases are receive-only. You can get signup confirmations and newsletters sent to them, but you can’t hit ‘reply’. For a user named out-of-ideas, this was a sticking point: “this part is a bummer but i do understand why; i feel it would be a huge improvement being able to do this.”

Thanks for your feedback! Yes the primary reason for it being receive only right now is to combat spam.

Lanedirt explains the technical hurdle: self-hosting outgoing email servers is notoriously difficult because big providers like Gmail often block emails from residential IP addresses. He’s considering making send/reply functionality a premium feature for cloud users, acknowledging it’s a highly requested upgrade.

Why Bother With a Thousand Emails?

Is it overkill? For the target audience, absolutely not. As commenter imcritic puts it, the idea is “pure fire, I would love very much to have thousands of different personas for the nasty tracking huge corporations.” It’s not just about spam; it’s about making it harder for companies to build a detailed profile on you by linking your activities across different sites.

out-of-ideas adds a practical perspective, noting that a unique email per domain means “the hacked companies are the ones where the email is bled to spammers.” It turns your email addresses into a canary in the coal mine for data breaches.

AliasVault is clearly a 1.0 product, with the send/reply feature being the big item on the wishlist. But it solves a real problem for a specific kind of user: the person who is tired of the trade-off between convenience and privacy. It’s a builder’s solution, forged from years of watching how spam and tracking actually work.

Source: HackerNews