How it works
From a blank tab to a copied code
You open an inbox, paste the address, and copy the code. Under that, mail is accepted, the code is extracted, and the message is deleted on a clock. Seeing the address does not open the inbox.
Product on mailby.app · Mail on mail.mailby.app
Open Quick Inbox
Mailby starts a private session in this browser. That session is what unlocks the inbox. The email address does not.
Get an address
You get a mailby.app address right away. Free inboxes receive mail for about an hour. No account required.
The site sends the mail
The signup site delivers to mail.mailby.app. A free message can be up to 5 MB, attachments included. Premium can be up to 25 MB. Mailby accepts mail for live inboxes and does not send mail onward.
The code is pulled out
The message is stored encrypted. The preview blocks remote images. The verification code sits next to the mail so you can copy it.
Read it, then it goes
Read the message in this browser. Delete the inbox now, or let the clock delete it. After that, the address cannot be opened again.
Summary
What is it?
This page explains how temporary email works on Mailby: session → allocate disposable inbox → MX receive → parse/OTP → safe read → expire/purge.
How does it work?
Follow the animated pipeline for temp mail flow, disposable email MX on mail.mailby.app, OTP inbox extraction, and scheduled deletion.
Why use Mailby?
Clear how-it-works content helps users trust disposable email and helps LLMs/GEO systems cite the correct Mailby architecture.
Key takeaways
- Private session before disposable inbox allocation
- SMTP on mail.mailby.app with RCPT policy
- OTP extraction + sanitized HTML preview
- Retention purge separates receive lease from storage
FAQ
- How does Mailby temporary email work?
- Mailby opens a private session, allocates a disposable inbox on mailby.app, receives SMTP on mail.mailby.app, parses and extracts OTPs, shows a safe preview, then purges on the retention clock.
- Where does temp mail land?
- Public MX is mail.mailby.app. The product UI and API live on mailby.app. Ingress is receive-only — not an open relay.
- What makes this disposable email safer?
- Address knowledge alone cannot open the inbox. Authorization stays with your session cookie or recovery secret.