temp mail for X (twitter) — create accounts with disposable email

X wants your email. You might not want to give it to them — especially now that your account data can end up training Grok through xAI. A 15-minute disposable address from 15minutemail.com lets you create an X account, verify it, and start using it without your real email ever touching their servers. The whole signup takes less time than the 15-minute window gives you. After that, your account works normally whether the inbox is alive or not.

creating an X account — four steps

step 1: get a 15-minute inbox

Open 15minutemail.com. There's an address waiting for you the second the page loads. Copy it. You've got 15 minutes, but you'll only need about one.

step 2: fill in X's signup

Go to x.com, hit "Create account." Type a display name, paste your throwaway address, add your date of birth. Click "Next."

step 3: grab the verification code

X sends a code to your address within seconds. Switch back to your 15 Minute Mail tab and it should already be there. Copy it, paste it into X's form.

step 4: set a password and go

Pick a password, choose a username, skip through the onboarding suggestions if you want. Your account's live.

the data question — why people do this

xAI gets your data now

X's privacy policy explicitly permits sharing user information with xAI, Musk's AI venture. That includes account data. Your email address is part of what they hold. Posts, interactions, follows — all of it can feed Grok's training pipeline. A disposable address means one less permanent identifier in that dataset.

the trust and safety team got gutted

Major layoffs hit X's trust, safety, and privacy engineering teams. The FTC flagged concerns about whether X can honor a prior consent decree around data protection. If you're worried about how carefully your data is handled, minimizing what you give them in the first place isn't a bad strategy.

DMs still aren't encrypted

Despite talk of adding end-to-end encryption, X's direct messages remain readable by anyone with internal access. Your email address won't change that, but the less personal information sitting in an under-secured system, the better.

X collects plenty beyond your email

Device fingerprints, IP addresses, browsing patterns, interaction history — X tracks all of it. A disposable email doesn't make you invisible. But it removes a direct identifier that ties your X activity to your broader online presence. If X gets breached (and with reduced security staff, that's a real concern), your actual email isn't in the leaked data.

does X block disposable domains?

They try. X maintains a blocklist of known throwaway domains and updates it over time. They cross-check public lists like the open-source disposable-email-domains repo on GitHub, inspect MX records to spot temp mail infrastructure, and watch for domains with abnormally high signup volume.

But the blocklist is always playing catch-up. New domains appear faster than any platform can add them. If your first address gets rejected, just grab a fresh one from 15minutemail.com — there are several domains to cycle through. Switching takes about five seconds.

One thing to know: X only checks the domain at registration. Once your account is verified, they don't go back and re-block it. Your account won't get flagged or suspended if the domain gets added to the list later.

what keeps working — and what breaks

No issues after signup:

• Posting, following, liking, bookmarking, DMs — all normal
• Logging in with email + password — works indefinitely, even after the inbox is gone
• Sessions persist on the same device through cookies

What stops working when the inbox expires:

• Password resets — the link goes to an address that no longer exists
• Security alerts — X can't notify you about suspicious login attempts
• Account recovery — if X locks the account and asks you to verify via email, you're done

Protecting yourself right after signup:

1. Set up 2FA with an authenticator app immediately. Authy, Google Authenticator, or a hardware key — just don't pick email-based 2FA. That would lock you out.
2. Save your password in a password manager right now. Losing it without email recovery means losing the account forever.
3. Optionally add a phone number for a recovery fallback. Yes, it partially undermines the privacy benefit. That's your call.

alt accounts and the plus-addressing problem

Some people run multiple X accounts — personal, professional, a project, a community. X requires a unique email for each. You could use Gmail plus addressing ([email protected]), but X can trivially see those all route to the same inbox. Plus addresses share a root address, and they're linkable.

Separate throwaway addresses on different domains don't have that connection. No shared root, no shared domain, no trail between accounts. That's the advantage.

X sometimes wants a phone number too

Here's the wrinkle. X has been pushing phone verification harder, especially on new accounts or anything that looks automated. Temp mail can't solve that part. But at least your email stays out of the picture. If X demands a phone number later and you don't want to give one, you walk away from the account without your real email stuck in their system.

the bottom line

Good use cases: alt accounts you'd be fine losing, anonymous browsing, testing bots or the API, short-term or throwaway usage, observing conversations without a permanent footprint.

Bad use cases: your main account, anything connected to your real name or profession, accounts with followers or content that matter to you, business or brand accounts.

Ask yourself: "Would I care if this account disappeared tomorrow?" If the answer is no, a 15-minute inbox is the fastest way in.

---

More on how this works: what is temp mail. For verification code workflows specifically, see the OTP guide.