How Password Managers and Email Aliases Work Together

A password manager gives every account a unique password. Email aliases give every account a unique email address. Together, they create complete compartmentalization: no two accounts share any credential. A breach on one service reveals nothing about your other accounts.

The problem with shared credentials

Most people use one email address everywhere. When that address appears in a data breach (and it will), attackers have a key that works across every service you use. They try your email + leaked password on every popular site. If you reused the password anywhere, they are in.

A password manager solves half the problem (unique passwords). Email aliases solve the other half (unique email). Together:

• Service A knows you as shop-abc@cleanbox.me with password X7$kQ9...
• Service B knows you as social-xyz@cleanbox.me with password mP2#nR...
• A breach on Service A reveals nothing useful for Service B

The workflow

Signing up for a new service

1. Open your password manager (Bitwarden, 1Password, etc.)
2. Create a new login entry for the service
3. Generate a random password (the password manager does this)
4. Open Cleanbox and create a new alias (e.g., servicename@cleanbox.me or use the random generator)
5. Add a note to the alias so you remember what it is for
6. Use the alias as the email and the generated password to register
7. Save both in the password manager entry

Logging into an existing service

1. Open your password manager
2. Find the entry for the service
3. Autofill the alias email + password

When an alias gets compromised

1. Disable the alias in Cleanbox (one click)
2. Create a new alias
3. Update the service's email in account settings
4. Update the password manager entry

Setup with popular password managers

Bitwarden

Bitwarden has built-in email alias integration with several providers (including addy.io and SimpleLogin). In Settings → Options, you can configure an alias service to generate aliases directly from the Bitwarden popup. While Cleanbox is not yet integrated as a direct generator, you can store your Cleanbox aliases manually in each login entry's username field.

1Password

1Password supports "Masked Email" through Fastmail integration. For Cleanbox, use 1Password's login entry to store your alias as the username. 1Password's Watchtower feature alerts you when a stored email appears in a known breach — including your aliases.

Any password manager

The integration does not need to be automatic. The workflow is the same with any password manager: create alias, create entry, paste alias as username, generate password, save. The extra 10 seconds per signup buys you complete credential isolation.

Real-world example

Your password manager vault might look like this:

A breach at LinkedIn reveals linkedin-pro@cleanbox.me with a password that works nowhere else, tied to an email that is only used for LinkedIn. The attacker has nothing useful.

How many aliases do you need?

Most people have 50-200 online accounts. You do not need to migrate them all at once. Start with:

1. High-value accounts first — Banking, primary email, password manager itself
2. Shopping and social media — Most likely to be breached
3. New signups going forward — Every new account gets a unique alias from day one
4. Old accounts gradually — Migrate a few per week as you encounter them

Cleanbox's plans scale with your needs: 3 aliases on Free, 10 on Personal, 30 on Premium, 100 on Advanced.