addy.io

What is addy.io?

addy.io is an open-source anonymous email forwarding service, formerly known as AnonAddy until its 2023 rebrand. As of 2026-05-30, it lets users create unlimited email aliases that forward to a real inbox, with the ability to reply and send from aliases without exposing the underlying address. The service is built around a freemium model: a functional free tier with paid Lite and Pro subscriptions unlocking additional features like custom domains, multiple recipients per alias, and expanded limits.

The core mechanic is straightforward: pick a username (e.g., johndoe), then generate on-the-fly aliases like groupon@johndoe.addy.io or use shared domains like @addy.io for greater unlinkability. When an alias starts receiving spam or appears in a breach, it can be deactivated (silent drop) or deleted (bounce). The service offers mobile apps for iOS and Android, browser extensions, a developer API, and GPG/OpenPGP encryption for forwarded messages.

How no-KYC is it?

Signup does not require government ID or real-name verification. The free tier needs only an email address and password. For paid subscriptions, addy.io accepts Monero (XMR), Bitcoin (BTC), and fiat payments via Stripe. The privacy policy states that for subscriptions, name and payment information may be collected, but card details are not stored in addy.io's database-Stripe handles payment processing. The site uses a self-hosted Umami analytics instance that claims cookie-free, anonymous measurement.

The service is GDPR-compliant and operates under EU data protection law. No KYC triggers are documented for typical use, though the terms reserve termination rights for abuse including bulk signups, spam sending, or bot registration. Having multiple free accounts is explicitly prohibited and may result in termination.

Privacy & security

addy.io's security posture is notably transparent. Mail servers run on Greenhost.net (Netherlands) and UpCloud.com (Poland/Netherlands) with TLS encryption, DANE, MTA-STS, and TLS-RPT. DNSSEC is deployed, and the web application uses HSTS with strong cipher preferences. Login protection is implemented though specifics are not detailed in the crawl.

In September 2023, Securitum conducted an independent security audit including web application penetration testing and source code review. No significant vulnerabilities were identified; two low-risk issues and several informational points were addressed. This audit is publicly referenced on the site.

The privacy policy (last updated September 4, 2024) discloses collection of form data, correspondence records, session cookies, and subscription payment details. It explicitly states no third-party cookies and no tracking effort. Notably, addy.io does not strip spoofing warning banners when users reply to forwarded emails-recipients should verify whether their real email is exposed in headers.

Payments, fees & limits

• Free tier: unlimited aliases on shared domains, one recipient, basic features
• Lite: paid tier with custom domains, multiple recipients, expanded limits
• Pro: highest tier with maximum features

Payment methods include Monero, Bitcoin, and fiat (Stripe). Student discounts are mentioned in the FAQ. The service offers subscriber perks through partnerships: as of 2026, active partnerships include Tuta (25% off), Windscribe, Kagi, EasyOptOuts, and Notesnook (25% off). Perks are accessible via dashboard redemption.

Specific pricing figures are not stated in the crawled evidence and should not be invented.

User experience & support

The user experience spans web dashboard, mobile apps (iOS app rated 4.8/5 from 54 ratings as of recent data; Android v6.2.3 available), and browser extensions (Chrome Web Store, Firefox). A refreshed Help Centre launched May 29, 2026, organizing guides into 11 categories with search functionality. The FAQ covers policy and trust questions while the Help Centre handles step-by-step instructions.

Failed delivery handling includes three categories: outbound bounces, inbound rejections, and inbound quarantines. Users can troubleshoot via dashboard details, and the service provides guidance on preventing failures through valid recipients, adequate mailbox space, and proper DNS configuration for custom domains.

Who it's for

addy.io suits privacy-conscious individuals seeking to compartmentalize their email identity without surrendering personal documents. The free tier is genuinely usable for basic alias needs. Cryptocurrency users benefit from direct Monero and Bitcoin payment options. Those needing custom domains, multiple recipients, or bulk alias management will find value in paid tiers. The service is less suitable for users requiring SMTP credentials for aliases or those unwilling to trust a forwarding intermediary with metadata (sender, recipient, timing) even if content can be GPG-encrypted.