Anonymous Email Account: Create One Without a Phone Number

If you’re searching for how to make an anonymous email account, you’re probably trying to solve one of two different problems: hiding your identity from the recipient (a company, an ex, a stranger on a marketplace), or hiding your activity from your own provider and network operator. Those require different setups, and most guides online conflate them. This one doesn’t. It covers picking a provider that won’t demand your phone number, the signup steps that actually work in 2026, and the metadata leaks that quietly deanonymize people who did everything else right. (If the reason you’re here is a breach notice rather than general caution, outlets like techsentinel.news track which services got hit and when, which helps you judge whether your old address is actually burned.)

Pick a Provider That Doesn’t Require Phone Verification

Gmail, Outlook, and Yahoo all ask for a phone number during signup in most regions, specifically because a working phone number is a strong real-identity anchor — that’s the point, from their side. Two providers built their signup flow around not needing one:

Proton Mail lets you create a free account with just a username, a password, and either a CAPTCHA or an email-based verification code — no phone number required for that path. Proton’s own guide notes that if you do supply a backup email for recovery, “we only save a cryptographic hash of this personal data” rather than the address itself. Proton also runs an official Tor onion site at protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion, which keeps your real IP address out of Proton’s own connection logs during signup and every login after.

Tuta (formerly Tutanota) goes further on the account itself: “we only store the email address — nothing else,” according to Tuta’s anonymous-email guide, and the service states it does not log IP addresses by default. Tuta also accepts Bitcoin, Monero, and cash-via-gift-card (through a partner service) for paid tiers, so upgrading doesn’t force a credit card with your name on it back into the picture.

The tradeoff: both providers apply extra scrutiny to signups coming from Tor or a VPN, because that’s also where spam operations register from. Expect an occasional CAPTCHA retry, and for Tor signups specifically, Tuta’s guide mentions manual account approval can take up to 48 hours during high-abuse periods — a delay, not a phone-number demand.

The Actual Signup Steps

1. Connect anonymously first. Open Tor Browser (download only from torproject.org) or connect through a VPN that doesn’t log connections, before you touch the signup page. If your real IP hits the signup form, the provider’s zero-access encryption for your mail contents doesn’t matter — they still saw your registration IP once.
2. Go to the signup page. For Proton, use the onion address above in Tor, or proton.me over a VPN. For Tuta, use tuta.com.
3. Choose a username unrelated to your real name, other accounts, or writing style you’ve used elsewhere. This is the step people skip and regret.
4. Set a unique, long password, ideally generated and stored in a password manager you’re not also using for identified accounts.
5. Complete verification with CAPTCHA or a throwaway recovery email — never your primary personal address. If a phone number prompt appears, that’s your signal the IP or session looked suspicious to their abuse system; switching Tor circuits or trying again later usually clears it.
6. Skip optional profile fields. Display name, recovery phone, backup email — leave all of it blank unless a field is required to finish signup.

Why the Account Alone Isn’t Enough

Creating the mailbox is the easy 20%. The account gets deanonymized later, through channels that have nothing to do with the signup form:

Metadata survives encryption. Even with end-to-end encrypted providers, the sender address, recipient address, subject line, and timestamp of every message are typically visible to the mail system for routing — that’s true of Proton and Tuta as much as Gmail. EFF’s Surveillance Self-Defense project makes the point directly: “even a tiny sample of metadata can provide an intimate lens into a person’s life,” because a subject line and a timestamp together can reveal what you’re doing even when the body text is unreadable. If your anonymous address always emails the same three real people at the same times of day, the metadata pattern re-identifies you regardless of encryption.

Some webmail interfaces leak your IP in the headers. Older Hotmail/Outlook webmail added an X-Originating-IP header showing the sending client’s real IP address, a practice documented on Wikipedia’s write-up of the header — Hotmail dropped it in 2012 in favor of an obfuscated version, and Gmail and most modern webmail strip the field entirely, but the underlying risk is provider-specific and not guaranteed. Never assume a header is clean; check a test message’s raw source before you rely on an account for anything sensitive.

Writing style is a fingerprint. Reusing your normal vocabulary, sign-off habits, or typos across an anonymous account and your real one links them just as reliably as a phone number would. If the account exists specifically to be unlinkable, write differently on purpose.

Reused recovery info collapses the separation. A recovery email or phone number shared with any identified account defeats the entire point of the anonymous one — providers can’t distinguish “recovery” from “identity” once you enter it.

Choosing Between Proton and Tuta

Both work for the core goal. Proton has the larger ecosystem (calendar, VPN, drive) if you want everything under one anonymous identity, plus the maintained Tor onion site. Tuta has a narrower feature set but a stricter no-IP-logging default and clearer anonymous payment options for its paid tier. Neither is “more anonymous” in the abstract — pick based on whether you need the onion-site access path (Proton) or the anonymous-payment path (Tuta), and apply the same operational habits either way: connect anonymously, never cross-pollinate recovery info, and watch your metadata as carefully as your account credentials.

Related on this site

• How to Remove Personal Info from Google Search Results