What the signup address actually reveals
The address you type into a signup form is not just a delivery route. It is a piece of identity data that the receiving service stores, displays in its own records, and may expose in support threads, breach dumps or account-recovery screens. The practical question is not which option sounds most private, but what a stranger can infer from the string itself and what you must keep working to retain access to that login later.
Proton offers three related tools that are easy to conflate: additional addresses, hide-my-email aliases and plus addresses. They differ in what the visible address says about you and in how permanently they are tied to your account.
The three options in plain terms
An additional address is a permanent address under the same Proton account. It looks like a normal address and behaves like one, but it remains part of your account rather than being a disposable forwarding layer.
A hide-my-email alias forwards messages to the mailbox without revealing the primary address to the service receiving that alias. The service sees the alias, not your main address. Hide-my-email aliases can be disabled or deleted, which makes them the most disposable of the three.
A plus address appends a plus sign and text to an existing address and routes to the inbox. The original address is easy to infer, because the plus tag sits on top of the real local part. Anyone who sees [email protected] can strip the tag and guess [email protected].
A Proton hide-my-email alias forwards messages to the mailbox without revealing the primary address to the service receiving that alias. Source
Proton plus aliases append a plus sign and text to an existing address and route to the inbox; the original address is easy to infer. Source
An additional address is a permanent address under the same Proton account; hide-my-email aliases can be disabled or deleted. Source
Decision table: what each option exposes
| Option | What the service sees | Can the original address be inferred? | Permanence | Best used when |
|---|---|---|---|---|
| Additional address | A normal address under your Proton account | It is a separate address, not a tagged version of your primary one | Permanent under the same account | You need a stable, long-lived identity for a service you will keep |
| Hide-my-email alias | The alias only | The primary address is not revealed to the receiving service | Can be disabled or deleted | You want a forwarding layer you can switch off later |
| Plus address | Your existing address with a plus tag | Yes, the base address is easy to infer | Tied to the existing address | You want lightweight sorting and accept that the base address is visible |
The table is about exposure, not about which option is universally better. A plus address is fine when the recipient already knows your address. A hide-my-email alias is the stronger choice when the recipient should not learn your primary address at all.
Step-by-step: choosing before you share an address
Step 1 — Identify what the signup reveals. Write down what the service will display or store. If the address may appear on a public profile, in a support ticket or in a future breach notification, treat it as public.
Step 2 — Ask whether you will keep the login. If you expect to use the account for years, a permanent additional address is easier to reason about than a disposable alias you might later disable. If the signup is exploratory, a hide-my-email alias limits what the service learns.
Step 3 — Check whether a plus address leaks the base. A plus address routes to your inbox, but the original address is easy to infer. Use it for sorting, not for concealment.
Step 4 — Preserve a recovery path you control. Before changing any address on an existing account, confirm you can still receive mail at the current address and that you hold the recovery method. Do not disable an alias or delete a forwarding route until the login is fully migrated and you have confirmed access.
Step 5 — Record the mapping. Keep a private note of which alias or address belongs to which service. This is the step most people skip, and it is the one that matters when a login fails months later.
Step 6 — Review your own public footprint separately. Choosing an alias changes what a new service sees. It does not remove handles you already published elsewhere. If you want to see which of your known public usernames are visible, an optional check such as TraceSeek can search 3,000+ platforms and return public matches in 20-30 seconds, with a free first scan. Those matches are leads, not proof of ownership, and the tool does not change privacy settings or access private content. Related reading: how to find accounts by email address and how to find forgotten online accounts.
Common mistakes
- Treating a plus address as anonymous. The tag is visible and the base address is easy to infer. It is a sorting tool, not a concealment tool.
- Disabling an alias before the login is migrated. A hide-my-email alias can be disabled or deleted, but that action affects forwarding, not the third-party account itself. Confirm the new address works before you cut the old route.
- Assuming an edited profile means deletion. Changing the email on a service does not necessarily remove stored data. Treat profile edits and data deletion as separate questions.
- Confusing an additional address with an alias. An additional address is a permanent address under the same Proton account; an alias is a forwarding layer that can be switched off.
- Deleting recovery methods too early. Keep a recovery method you control until the closure or migration is complete.
- Reusing one alias everywhere. If one alias appears in a breach, it links every service that received it. Decide deliberately whether to separate identities by service.
Owner-side review checklist
Use this before and after changing a signup address.
- I know which address the service will display publicly, if any.
- I know whether the address is an additional address, a hide-my-email alias or a plus address.
- I can still receive mail at the current address.
- I hold a recovery method I control for the account.
- I have recorded which alias or address belongs to which service.
- I have not disabled an alias until the login is confirmed working on the new address.
- I understand that removing a forwarding route is not the same as deleting the third-party account.
- I have reviewed my own public handles separately from this signup decision.
Limits worth stating plainly
No address choice makes you invisible. A hide-my-email alias conceals your primary address from the receiving service, but the service still has an address that reaches you. An additional address is permanent under the same account, so it is a long-term identity commitment. A plus address is visible and inferable by design.
A username search is not a complete account inventory. Public matches are leads, not proof that a person owns an account, and matching photos, biographies or handles cannot independently prove identity. Choosing an alias does not remove existing public profiles, and it does not change what a platform already stores.
Protecting your own footprint
Start with the address decision, then treat your public handles as a separate layer. Use a permanent additional address for services you intend to keep, a hide-my-email alias where you want a forwarding layer you can switch off, and a plus address only where sorting matters more than concealment. Before you disable anything, confirm the login still works and that you control the recovery path. Then, if you want a view of your own known public handles, an optional check with TraceSeek can surface public matches across 3,000+ platforms; treat the results as leads to review, not as proof of identity.
Key facts
A Proton hide-my-email alias forwards messages to the mailbox without revealing the primary address to the service receiving that alias.
Proton plus aliases append a plus sign and text to an existing address and route to the inbox; the original address is easy to infer.
An additional address is a permanent address under the same Proton account; hide-my-email aliases can be disabled or deleted.
TraceSeek covers 3,000+ platforms and states a scan time of 20-30 seconds with a free first scan.
Public username matches are leads, not proof of ownership, and a username search is not a complete account inventory.