Brave Browser Adds Email Aliasing to Block Cross-Site Tracking
The privacy-focused browser now generates unique email masks to prevent ad tech companies from using primary addresses as personal identifiers.
Brave has introduced a built-in email alias feature that allows users to register for online services without disclosing their primary email addresses. The tool is designed to block websites and advertising technology firms from using emails as permanent identifiers for cross-site tracking and targeting.
To utilize the service, users must first create a Brave account and provide a primary email address. Once configured, the browser detects email input fields on websites and offers a unique alias via a right-click menu or a pop-up. This alias acts as a mask, forwarding all incoming correspondence to the user's actual account. Free users are currently limited to five email aliases, though Brave plans to offer a higher quota for those on its Premium plan.
The Fight Against Shadow Profiling
Email masking has emerged as a critical defense against "shadow profiling," a practice where data brokers and tech giants link user activity across disparate websites using a consistent email address. While standalone services such as iCloud’s "Hide My Email" and Firefox Relay provide similar functionality, Brave is integrating the tool directly into the browser's form-filling workflow. This move is a strategic attempt to compete with Google Chrome by embedding essential privacy protections into the core browsing experience rather than requiring third-party extensions.
Security and Data Handling
Brave has emphasized the privacy of the mail transit process, claiming it does not read the contents of the emails it forwards. The company states that messages are processed only for virus and spam filtering before being deleted from Brave's servers immediately after forwarding. To further protect user data, account information is encrypted at rest. Additionally, any notes associated with specific aliases are stored locally on the device or encrypted end-to-end if the user has enabled synchronization across devices.
Industry Implications
By decoupling the primary email from the account creation process, Brave limits the ability of hackers and data brokers to leak or exploit a user's permanent contact information. This shift reduces the utility of the email address as a universal key for data aggregation, forcing ad tech companies to find alternative, and potentially less intrusive, ways to track users. It reinforces Brave's positioning as a privacy-centric alternative to the Chrome ecosystem.
What to Watch
As the feature rolls out, the reliability of mail delivery remains a key point of observation. Some forwarded messages may initially land in spam folders as Brave works to establish its reputation score as a legitimate mail provider. Users will likely monitor whether the delivery success rate improves as the service scales and whether the Premium tier's expanded alias limits provide enough utility for power users.