Email relays

An email relay gives every signup its own masked address that forwards to your real inbox — one leak or spammy newsletter, and you disable a single alias instead of changing your email everywhere. Keyguard’s generator creates these aliases for you through a forwarder service you connect.

Connect services under the generator’s Email forwarders screen. Each integration needs an API credential from the service:

ServiceWhat you enter
SimpleLoginAPI key; server URL only if self-hosted
addy.io (AnonAddy)API key and your alias domain; server URL if self-hosted
Firefox RelayAPI key
DuckDuckGoAPI key
FastmailAPI key
Forward EmailAPI key and your domain
Cloudflare Email RoutingAPI token, zone ID, your domain, and the destination email

You can find the API key or token in the service’s account/developer settings. Once connected, pick the forwarder in the generator’s username options and Keyguard requests a fresh alias whenever you generate one — ready to drop into a new login item.

Notes on specific services:

  • SimpleLogin generates aliases in the style configured in your SimpleLogin account (random words or UUID); Keyguard does not override it.
  • addy.io and SimpleLogin both work with self-hosted installations: point the server URL at your instance.
  • Cloudflare Email Routing creates routing rules on your own domain, so it needs the zone ID and the address the aliases should forward to.