Brave Browser Adds Email Aliases to Reduce Tracking and Phishing Risk
Summary
Brave 1.94 adds disposable email aliases that forward messages while hiding users’ primary addresses. Brave says aliases are stored encrypted, and its accounts use OPAQUE authentication; the company notes OPAQUE does not prevent phishing or weak passwords.
Key points
- Brave 1.94 lets users create disposable email aliases for sign-ups, forwarding messages while hiding their primary address from websites.
- Brave says aliases can reduce spam and cross-site identity matching, and limit exposure of users’ real email addresses in service breaches.
- Users must create a free Brave Account and register a primary email address; up to five aliases are free, with a paid Premium option planned.
- Brave says primary addresses and aliases are stored in an encrypted state, and forwarded messages are deleted from its servers within seconds after delivery.
- Brave Accounts use OPAQUE, a password-authenticated key exchange standardized as RFC 9807, to authenticate without sending passwords or hashes to Brave’s servers.
- Brave says OPAQUE reduces exposure to password logging and cracking but does not protect against phishing or weak passwords; forwarded messages receive automated spam and malware filtering.
Article Details
- Event Type
- Brave browser feature launch
- Impact
- Brave 1.94 introduces Email Aliases, allowing users to sign up with disposable addresses that forward messages while keeping their primary email hidden from websites. The feature is intended to reduce spam and cross-site identity matching and limit exposure of users’ primary addresses if a service is breached. Brave says free users can create up to five aliases; a paid Premium option is planned.
Vendors
Products
BraveBrave browser 1.94 adds Email Aliases, letting users create disposable addresses that hide their real email while still forwarding messages to their inbox.Brave AccountsBrave Accounts uses OPAQUE to authenticate without sending passwords or hashes.Brave SyncMessages are deleted from Brave’s servers within seconds after delivery, while notes attached to the aliases remain local or, if synced via Brave Sync, end-to-end encrypted.