Email Alias vs Plus Addressing: Why the Gmail + Trick Is Not Enough

If you have spent any time reading about email privacy, you have probably encountered the plus addressing trick. The idea is simple: take your Gmail address, add a plus sign and a tag (like you+netflix@gmail.com), and use that modified address when signing up for services. Emails still arrive in your inbox, and you can create mail filters based on the tag. It sounds elegant, and for years it has been recommended as a quick privacy win.

But plus addressing has a credibility problem. Despite its popularity in tech circles, it fails at the very thing most people use it for: protecting their real email address. In this article, we break down exactly where plus addressing falls short and how dedicated email aliases solve each of those problems.

How Plus Addressing Works

Plus addressing, sometimes called sub-addressing, is a feature supported by Gmail, Outlook, and several other email providers. The format is straightforward:

yourname+anything@gmail.com

Everything after the + sign and before the @ is ignored by the mail server for delivery purposes. The email lands in the same inbox as yourname@gmail.com. You can put anything you want after the plus sign, creating an unlimited number of variations without any setup.

The common use cases are filtering incoming mail (create a rule that labels everything sent to yourname+shopping@gmail.com) and tracking which services share your address (if spam arrives at yourname+linkedin@gmail.com, you know where it came from).

On the surface, this looks like a free, built-in alias system. But there are critical differences between plus addresses and actual aliases.

Problem 1: Websites and Spam Filters Strip the Plus Tag

The first and most practical problem is that many websites simply do not accept plus addresses. Registration forms frequently reject the + character as invalid, either through overly strict email validation or deliberately to prevent users from creating multiple accounts. Major platforms have been known to strip or reject plus-tagged addresses for years.

Even when a website does accept your plus address at sign-up, there is no guarantee it will survive in their system. Marketing platforms, CRM tools, and data brokers routinely normalize email addresses as part of their processing pipeline. That normalization often includes stripping everything between the + and the @. Your carefully tagged address becomes your plain email address in their database, and you never know it happened.

This makes plus addressing unreliable for the very purpose most people use it: identifying who leaked their address. If the tag gets stripped before your address is sold, the trail goes cold.

Problem 2: Your Real Address Is Right There

This is the fundamental flaw. With plus addressing, your real email address is embedded in every variation. Anyone looking at yourname+amazon@gmail.com can trivially derive yourname@gmail.com. There is no obfuscation, no privacy, no barrier. A spammer, a data broker, or anyone who gets hold of a plus-tagged address already has your real address.

Compare this with a dedicated email alias like kx7m2p@yourdomain.com or a randomly generated address from an alias service. There is no mathematical relationship between the alias and your real inbox. Even if someone collects a hundred of your aliases, they cannot derive your actual email address from them.

This distinction matters enormously. Your email address is a persistent identifier that ties together your accounts, your communications, and your online identity. Plus addressing does nothing to protect that identifier. It just decorates it.

Problem 3: You Cannot Turn It Off

Imagine you use yourname+newsletters@gmail.com for a dozen mailing lists, and one of them starts sending spam or sells your address to third parties. What can you do? You can create a Gmail filter to delete messages sent to that address, but you cannot actually disable it. The address will continue to work. Messages will keep arriving. Filters can be fragile, and they do not stop the underlying problem: your address is out there and active.

With a dedicated email alias, disabling is straightforward. You flip a switch, and the alias stops forwarding. Any mail sent to it bounces or gets silently dropped. The alias is dead. If you used a unique alias for every service, disabling one has zero impact on the others.

This is the difference between a band-aid and actual control. Plus addressing gives you a labeling system. Aliases give you an off switch.

Problem 4: You Cannot Reply as the Alias

When someone emails your plus-tagged address and you hit reply, your response comes from your plain email address. Gmail does not let you send as a plus-tagged variation in any meaningful way. This means that even if you tried to keep your real address hidden, the first time you reply, the secret is out.

Dedicated alias services handle this differently. When you reply to a forwarded message, the reply is routed back through the alias. The recipient sees the alias address, not your real one. Your actual inbox remains hidden throughout the entire conversation. This is essential for situations where you want to communicate with someone (a marketplace seller, a Craigslist contact, a freelance client) without revealing your personal email address.

Problem 5: No Per-Service Isolation

Plus addressing provides tagging but not isolation. All your plus-tagged addresses deliver to the same inbox with no separation of concerns. If your Gmail account is compromised, every service you used a plus address for is exposed simultaneously. There is no compartmentalization.

Dedicated aliases create actual isolation. Each service gets a unique address that has no connection to the others. If one alias is compromised, the blast radius is limited to that single service. You can find out exactly who sold your email address because each alias maps to one and only one source.

Where Plus Addressing Actually Works

To be fair, plus addressing is not entirely useless. It has legitimate uses that do not depend on privacy:

• Internal mail sorting - If you want to automatically label or filter emails from services you trust, plus tags work well with Gmail filters. Give your bank one tag, your project management tool another, and set up filters to organize them.
• Testing during development - Developers frequently use plus addressing to create multiple test accounts with a single email inbox. It is fast, free, and does not require any external service.
• Quick one-off identification - If you just want to know whether a specific service sends marketing mail, a plus tag can work as a quick check, as long as you understand it might be stripped.

These are all valid uses. The problem is not that plus addressing exists. The problem is that it gets recommended as a privacy tool when it is really just a convenience feature.

How Dedicated Email Aliases Compare

A dedicated email alias is an entirely separate address that forwards to your real inbox. Unlike plus addressing, the alias has no visible connection to your real email address. Here is how the comparison breaks down across the factors that matter:

• Address privacy - Plus addressing exposes your real address. Aliases hide it completely.
• Acceptance by websites - Plus addresses are frequently rejected. Aliases are standard email addresses that work everywhere.
• Disable capability - Plus addresses cannot be turned off. Aliases can be disabled or deleted instantly.
• Reply anonymity - Plus addresses reveal your identity on reply. Aliases let you reply without exposing your real address.
• Breach isolation - Plus addresses all trace back to one account. Aliases are independent and isolate each service.
• Spam control - Plus addresses rely on inbox filters. Aliases can have per-address spam rules and protection through tools like Shield.

If you are new to aliasing, our guide to email aliasing covers the fundamentals of how these systems work and why they matter for your digital privacy.

The Real Cost of False Security

The biggest risk of plus addressing is not that it does nothing. It is that it creates a false sense of security. People use it thinking they have protected their email address, when in reality they have just added a decoration that anyone can remove. This false confidence can lead to sharing your (plus-tagged) address in riskier situations than you otherwise would, actually making your exposure worse.

Privacy tools should reduce your attack surface. Plus addressing does not reduce anything. Your real address is still the address. It is still exposed. It is still the single point of failure for your entire email identity.

Making the Switch

If you have been relying on plus addressing for privacy, switching to dedicated aliases does not have to happen overnight. Start with the highest-risk services: shopping sites, free trials, forums, and anything that requires an email but has no business knowing your real one. Create a unique alias for each, and start forwarding to your real inbox.

Over time, you can migrate more services to aliases and reserve your real email address for the handful of contacts and institutions that genuinely need it. The goal is simple: minimize the number of places your real address exists, and maximize your ability to cut off any address that starts causing problems.

Plus addressing was a clever idea for a simpler time. But email privacy has moved on, and the threats have become more sophisticated. Dedicated aliases are not just an upgrade from plus addressing. They are a fundamentally different approach, one that actually delivers on the promise of protecting your email identity.