Gmail Aliases Explained: Plus Addressing, Dots, and Their Limits

How Gmail Plus Addressing Works

Every Gmail address comes with an effectively unlimited supply of built-in variations, and most people never use them. The mechanism is called plus addressing, or sub-addressing: anything you append after a plus sign in the local part of your address is ignored for delivery. Mail sent to [email protected], [email protected], or [email protected] all lands in the same inbox as [email protected]. No setup is required, nothing needs to be registered in advance, and the tag can be invented on the spot at the moment you type your address into a signup form.

What makes this more than a novelty is that the full address — tag included — is preserved in the delivered message. Gmail records that the message was addressed to [email protected], and that detail is available to search operators and filters. In effect, plus addressing lets you hand out a distinct label to every service without creating any new accounts, giving each sender a return address that quietly identifies them. The technique is not a Gmail invention; sub-addressing is part of longstanding email standards and is supported by several other providers, including Outlook.com and Fastmail, though the separator and behaviour vary.

Google documents plus addressing as a way to create task-specific variations of your address: Google Workspace Learning Center — create variations of your email address ↗

Dots Don't Matter in Gmail Addresses

Gmail's second quirk is dot-insensitivity. Periods in the local part of a @gmail.com address are ignored entirely: [email protected], [email protected], and [email protected] are all the same mailbox. Nobody else can register a dotted variant of your username, and any mail sent to any dotted spelling reaches you. This surprises many people who believe they own two subtly different addresses, or who worry that a typo'd dot sent their mail to a stranger. Within Gmail's consumer domain, at least, it did not.

Two caveats are worth knowing. First, dot-insensitivity applies to @gmail.com specifically; Google Workspace domains owned by companies or schools decide their own policy, and most other email providers treat dotted addresses as genuinely distinct. Second, while dot variants can serve as crude signup labels the way plus tags do — some people register for a service with jane.doe@ and another with janedoe@ — they are a much blunter instrument. There are only so many dot positions, the variants are not self-describing, and you have to keep track of which spelling went where. Dots are best understood as a delivery convenience, not an aliasing system.

Google's help page confirms that dots in a Gmail address do not affect delivery: Gmail Help — getting messages sent to a dotted version of your address ↗

Using Tags to Trace Who Shared Your Address

The most satisfying use of plus addressing is attribution. If you sign up for a retailer's newsletter as [email protected] and six months later a cryptocurrency scam arrives addressed to that exact tag, you know precisely where your address travelled. Either the retailer sold or shared its list, or its database was breached — and either way, the tag is the evidence. Without it, an address that leaks from any one of a hundred services is indistinguishable from an address that leaked from any other, and you are left guessing.

For this to work, the discipline matters more than the mechanism: use a distinct, memorable tag for every service at signup, and be consistent about it. The tag costs nothing at the moment you type it and pays off only later, when spam arrives and you check the To header. Some people also use the knowledge constructively — a polite unsubscribe or a complaint to the company, or simply a decision never to trust that brand with anything again. Attribution does not stop the spam by itself, but it converts an anonymous nuisance into a named one.

Filtering and Organizing with Tags

Because the delivered message retains the tagged address, Gmail filters can act on it. A filter with the condition To: [email protected] can label every message from that signup, archive it past the inbox, or forward it elsewhere. Set up once per tag, this turns plus addressing into a lightweight routing system: newsletters tagged +news get a label and skip the inbox, receipts tagged +orders collect under their own label, and anything tagged for a service you have abandoned can be deleted on arrival.

The deletion filter is the closest Gmail's built-in aliases come to revocation. If jane.doe+acmestore@ starts receiving spam, a filter that trashes everything addressed to that tag silences it without affecting the rest of your mail. It is a useful backstop, but note what it is not: the address still exists, still accepts delivery, and still identifies your real mailbox. You have muted the noise, not closed the door.

The Big Limitation: Tags Are Trivially Strippable

Here is the honest assessment. Plus addressing offers zero protection against anyone who does not cooperate. The transformation from [email protected] back to [email protected] is a one-line operation — delete everything from the plus sign to the @ — and spammers who buy and merge address lists routinely normalize addresses exactly this way. A leaked tagged address is, for practical purposes, a leaked real address. The tag tells you who leaked it, which is genuinely valuable, but it does not prevent the leak from reaching your inbox under the stripped form, and it cannot be revoked, because the part before the plus sign is your actual account.

The second friction is rejection. A meaningful number of signup forms refuse the plus sign outright, usually because an overzealous validation pattern was written by someone who did not read the addressing standards — the character is perfectly legal in the local part of an address. Some services reject it deliberately, precisely because plus addressing makes duplicate signups and attribution easy. Either way, the result is the same: on the sites where you would most like to use a tag, you often cannot. Dots suffer the inverse problem — universally accepted, but useless as protection, since the canonical form is public knowledge.

Where a Separate Alias or Disposable Address Fits

The gaps in Gmail's built-in aliases define the tools that fill them. A dedicated aliasing service — SimpleLogin, Firefox Relay, Apple's Hide My Email, or a catch-all domain you control — generates addresses with no visible connection to your real one. There is nothing to strip: [email protected] reveals nothing about the mailbox behind it, and when it starts attracting spam you disable the alias and delivery stops at the relay, before your inbox is involved. This is the right tool for ongoing relationships you want to keep segmented and revocable.

For interactions with no ongoing relationship at all — a one-off download, a trial you are evaluating, a forum you will visit once — even an alias is more permanence than the situation deserves. A disposable address from a temporary email service such as PureTempMail receives the confirmation email and then expires, taking its entire history with it. Nothing persists to leak, strip, or trace. A sensible layered setup uses all three tiers: your real address for the accounts that matter, revocable aliases for services you use but do not fully trust, and disposable addresses for everything transient. Plus addressing then settles into its proper role — a free, frictionless labelling system for mail you have already decided to receive.

For the transient tier, you can generate a temporary inbox in one click and let it expire when you are done: Try a free disposable email address