Email relays
An email relay gives every signup a masked address that forwards to your primary inbox. If an alias is compromised or spammed, you can disable it without changing your primary email. Keyguard’s generator creates these aliases through a connected forwarder service.
Connect services under the generator’s Email forwarders screen. Each integration needs an API credential from the service:
| Service | What you enter |
|---|---|
| SimpleLogin | API key; server URL only if self-hosted |
| addy.io (AnonAddy) | API key and your alias domain; server URL if self-hosted |
| Firefox Relay | API key |
| DuckDuckGo | API key |
| Fastmail | API key |
| Forward Email | API key and your domain |
| Cloudflare Email Routing | API token, zone ID, your domain, and the destination email |
You can find the API key or token in the service’s account/developer settings. Once connected, pick the forwarder in the generator’s username options and Keyguard requests a fresh alias whenever you generate one — ready to drop into a new login item.
Notes on specific services:
- SimpleLogin generates aliases in the format configured in your SimpleLogin account (random words or UUID); Keyguard preserves this setting.
- addy.io and SimpleLogin both work with self-hosted installations: point the server URL at your instance.
- Cloudflare Email Routing creates routing rules on your own domain, so it needs the zone ID and the address the aliases should forward to.