EvilMail vs TempMaily
EvilMail
evilmail.pro
TempMaily
tempmaily.coSide by side
| Figure | EvilMail | TempMaily |
|---|---|---|
| Price from | Free | $7.50/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Temporary email services | 7.8 (#18) | 8.4 (#11) |
| Spec score · Temporary Email Services | 7.9 (#15) | 7.7 (#20) |
| Receive only | Temporary inboxes cannot send email; EvilMail says this prevents sending spam from its domains. | Mailboxes are receive-only and cannot send email. |
| Security | EvilMail says traffic uses HTTPS/TLS, passwords are bcrypt-hashed, and API keys can be revoked by regenerating them. | The service uses HTTPS, sanitizes incoming HTML mail, renders it in a sandboxed iframe with scripts disabled, and blocks remote images by default. |
| Support | Paid plans include priority support via Telegram and email. | Premium includes premium support; abuse reports can be sent to [email protected] for human review. |
Plans
In their own words
TempMaily
TempMaily provides disposable email inboxes for receiving verification codes and signup mail through web and API access. Its free inbox is created without signup, a password, or personal details, and messages appear in the browser as they arrive. Mailboxes are receive-only, so they cannot send email, although incoming messages can include attachments. The free plan permits one shared-domain address at a time; the inbox and its messages are permanently deleted 24 hours after creation, with transient storage and ads. Premium supports up to 10 addresses, custom and dedicated domains, long-term or permanent addresses, and 2GB of email storage. It also adds a REST API and MCP server for programmatic inbox creation and message reading. The MCP server works with Claude Desktop, Claude Code, Cursor, and MCP-capable agent frameworks. Premium costs $7.50 a year when billed annually ($90/year), or $9.90 a month. HTTPS, HTML sanitization, sandboxed rendering, disabled scripts, and blocked remote images are listed protections.