Two management routes, one address
A private Duck Address is a forwarding alias: mail sent to it is passed on to your real inbox. Managing the alias and managing the account you created with it are separate jobs. The route you use depends on where you set the address up.
| How you use the address | Where management happens | What you are changing |
|---|---|---|
| DuckDuckGo browser on Android, macOS or iOS | Passwords menu in the browser | The private Duck Address stored with that login |
| Windows or the browser extension | Forwarded messages in your own inbox | Forwarding for that individual address |
DuckDuckGo’s Android, macOS and iOS browsers manage private Duck Addresses in the Passwords menu. Source
If you use the browser route, treat the Passwords menu as the place to look first, and check that you are in the same browser profile and device where the address was created. Addresses created elsewhere will not appear there.
Managing an address from a forwarded email
On Windows or with the extension, the inbox itself is the control panel.
For Windows or the browser extension, private addresses can be managed through forwarded messages in the user’s own inbox. Source
Searching that inbox for @duck.com can locate forwarded messages; their top banners provide individual deactivation or reactivation controls. Source
A practical sequence:
- Search your inbox for @duck.com.
- Open a forwarded message and read the top banner to confirm which alias it belongs to.
- Use that banner to deactivate the individual address, or to reactivate it if you change your mind.
- Keep the message until you have finished, so you can find the same banner again.
Two limits are worth stating plainly. First, this inbox search surfaces forwarded messages, not a list of every account that ever received one; messages you deleted, filtered or never received will not appear. Second, the banner controls forwarding for that address. It does not close, delete or change the account you signed up for with it.
Before you retire an alias: map what depends on it
Deactivating an address is easy to reverse; losing access to an account is not. Before you switch an alias off, work out what it is holding together. This checklist is editorial advice, not a product rule:
- Sign-in. Which accounts use this address as the username or as the email on file? If you cannot sign in without receiving mail at the alias, do not deactivate it yet.
- Notices. Which services send security alerts, billing receipts or password-reset links there? A reset link that never arrives can lock you out at the worst moment.
- Recovery. Is this address the recovery contact for another account? If so, changing it first in that account is the safer order.
- Newsletters and low-value signups. These are usually the easiest to let go, and often the reason the alias existed.
A useful test: try to name, from memory, every account that would notice if mail to the alias stopped tomorrow. Anything you cannot name is a reason to look before you switch it off, not a reason to assume it is safe.
Disabling forwarding is not closing an account
These are different actions with different consequences:
| Action | What it affects | What it leaves in place |
|---|---|---|
| Deactivating the private Duck Address | Mail forwarding through that alias | The third-party account, its profile and its stored data |
| Closing the third-party account | The account itself, under that service’s own process | The alias, which can still be reactivated |
If your goal is to stop a service from holding your data, deactivating the alias does not achieve it. You would need to use that service’s own account-closure process, and the details of that process are outside what these sources establish. Equally, an alias you have stopped using may still be the only route to a password reset for an account you forgot about.
A workable order of operations
- Decide what you actually want: less mail, or fewer accounts.
- For less mail, find the address by the route that matches your setup and deactivate it from the banner or the Passwords menu.
- For fewer accounts, list the accounts first, change each one’s email or recovery details where needed, close them through their own processes, and only then retire the alias.
- Keep the alias active until the last dependent account is closed, so you can still receive confirmations and reset links.
- Recheck after a few weeks; if a notice arrives through the alias, something still depends on it.
If step 3 turns up accounts you had forgotten, the guide to finding forgotten online accounts is a sensible next read. Inbox search is a starting point for that work, not a complete inventory.
Where this guidance stops
These sources describe the two management routes and the banner controls. They do not describe what happens to mail already forwarded, how long a deactivated address is retained, or whether an address can be reused. Treat those as unverified and check the current DuckDuckGo documentation rather than assuming an answer.
For a wider view of how username and account traces fit together, see the methodology and the glossary. TraceSeek, the app covered by this publication, looks up public username matches across 3,000+ platforms; a public match is a lead about a possible account, not proof of ownership, and it says nothing about which email address an account uses.