The latest version of the Brave browser introduces a game-changing feature that could significantly boost online privacy. The “Email Aliases” tool allows users to generate disposable email addresses when signing up for new services, shielding their real email address from website servers and potential hackers.
This move is a direct response to the limitations of traditional data isolation techniques used by Brave, which can still leave a “privacy gap” in user protection. Even with features like cookie-based or cache correlations blocked, websites often store email addresses on their servers, making users vulnerable to spam, phishing attacks, and data breaches. The new Email Aliases feature tackles this issue head-on by blocking cross-site identity matching and reducing the risk of attackers exploiting compromised email accounts.
To use this feature, Brave users need to create a free account and register their primary email address with it. This allows for message forwarding while keeping the original email address hidden from website servers. For now, this service is available for up to five email aliases at no extra cost, but Brave plans to introduce a paid Premium version that will lift these restrictions.
Brave’s commitment to user privacy is evident in its use of OPAQUE, a password-authenticated key exchange standardized as RFC 9807, to authenticate users without transmitting their passwords or hashes to the company’s servers. This reduces exposure to password logging, memory-scraping attacks, and bulk cracking of leaked password databases.
When generating email aliases, Brave stores both the primary address and generated aliases in an encrypted state. Forwards messages are not checked beyond automated spam and malware filtering, preserving user privacy during message delivery. Once delivered, forwarded messages are deleted from Brave’s servers within seconds.
While this feature is a significant step forward for online privacy, users should be aware that forwarded messages may initially land in spam folders as the email provider establishes its reputation. This is a common issue when using disposable email addresses and can be mitigated by setting up a separate email client or configuring filters to move important emails out of spam.
For those looking to boost their online security and take control of their digital identity, the Brave browser’s Email Aliases feature offers an innovative solution that could prove invaluable in the fight against data breaches and cyber threats. By adopting this feature and following best practices for password management and online behavior, users can significantly reduce their exposure to online risks.
Source: Bleeping Computer — 2026-08-29