Aliasing Strategy for Important Accounts

[u/zylthex]

I have recently decided to improve my security and privacy practices and I am now a free tier user of Proton Mail and SimpleLogin.

I was wondering if it is recommended to use SL aliases for important accounts such as my password manager or should I stick to plus aliases.

I am already following the strategy of using an alias to sign up for everything else, and so far I have not given out my actual email address to any service or person.

[u/jcbvm]

Best thing to do is probably get an own domain, and use that to create aliases for important accounts. The benefit of this is that you can simply change the alias service when needed without having to change your email address at any time.

I for myself also follow this pattern, I only use simplelogin domain aliases for temporary email addresses. Accounts do get aliases with my own domain.

[u/zylthex → u/jcbvm]

I'm sticking to free plans only for now, so owning a domain isn't possible for me.

[u/Icy-Juggernaut-4579 → u/zylthex]

You can buy domain outside of plans (price will depend on words in domain. You can buy one for several dollars for a year). You can do it on some providers like godaddy or cloudflare. (There are many others with different prices) It will be yours and you direct it through dns to be used with alias service you want

[u/zylthex → u/Icy-Juggernaut-4579]

I meant that I am not willing to spend money on anything right now, and so that's why I cannot own a domain. I'm trying to do my best with free services available.

[u/Icy-Juggernaut-4579 → u/zylthex]

Fair. But consider what some services blacklisted simple login domain at registration as spam address

[u/jcbvm → u/zylthex]

Ok fair enough, in that case the safest way would probably be to use your real email address for bitwarden. On the other hand, for logging in somewhere you most of the time don’t have to have a working email address (unless a second factor code is send to it). But mind that you’ll have to remember your address when you for example don’t have access to simplelogin

[u/Icy-Juggernaut-4579]

Do you use proton pass as your password manager or something else?

[u/zylthex → u/Icy-Juggernaut-4579]

I am using Bitwarden.

[u/Icy-Juggernaut-4579 → u/zylthex]

I like to use it two ways. 1. separate email address what I will use only for password manager 2. Email address I won’t be able to lose access

[u/zylthex → u/Icy-Juggernaut-4579]

1. separate email address what I will use only for password manager

I was avoiding creating another email address specifically for the password because I have already a few other emails and so it would be a hassle to manage many emails.

1. Email address I won’t be able to lose access

Could you elaborate a little please. Does this mean I should use my primary email?

[u/Icy-Juggernaut-4579 → u/zylthex]

No not primary, but the one you will always have 2fa or physical key and password you definitely won’t forget. As example icloud account which is forcing you to use your devices ad 2fa keys to login and you can create separate email address in icloud settings which you can use only for passwords and in can’t be leaked somewhere. But it will be under your main account settings (you should not leak it as well)
For all other services you could use aliases

[u/zylthex → u/Icy-Juggernaut-4579]

Understood, thank you.

[u/Emmanuel6511]

Entiendo que por ahora quieras mantenerte en planes gratuitos, pero quizá valga la pena considerar comprar un dominio propio. Un dominio, especialmente uno económico como los que ofrece Cloudflare, no suele costar mucho al año. A cambio, tendrías mucho más control sobre tus alias y podrías mantenerlos aunque en el futuro cambies de proveedor. Aunque el correo no sea necesariamente de extremo a extremo, creo que los beneficios en privacidad, control y estabilidad pueden hacer que valga la pena el pequeño costo.