Giving your real email address to every website you use is not a particularly good idea.
Once an email address has been shared with enough companies, newsletters, services and online stores, it becomes increasingly difficult to control where it ends up. If one of those services suffers a data breach, your address may eventually find its way into spam and marketing databases.
This is where email aliases become useful.
Instead of giving every website your primary email address, you create a unique address for each service and forward everything to your real inbox. If an alias starts receiving spam, you can simply disable or delete it.
There are several services dedicated to this concept, including SimpleLogin and Addy.io. But what if you already own a domain and use Cloudflare Email Routing?
This is where Ghost Mail comes in.
Ghost Mail is a free and open-source iPhone and iPad application that provides a convenient interface for managing email aliases on Cloudflare-hosted domains.
It does not operate its own email-alias infrastructure. Instead, it communicates directly with Cloudflare's API and lets you manage your Cloudflare Email Routing configuration from your Apple device.
What Is Ghost Mail?
Ghost Mail is essentially a mobile management interface for Cloudflare Email Routing.
If you have a domain hosted on Cloudflare and have Email Routing enabled, you can use Ghost Mail to create, manage, disable and delete aliases without having to open the Cloudflare dashboard every time.
For example, instead of giving a website your primary address:
yourname@example.com
you can create something like:
netflix@example.com
or:
shopping@example.com
Mail sent to the alias can then be forwarded to your existing mailbox through Cloudflare Email Routing.
If the alias eventually becomes a source of spam, you can disable or delete it.
Why Use Email Aliases?
The main advantage of an email alias is compartmentalization.
Instead of using one address everywhere, you can give each website or service its own address.
This provides several benefits.
- Your primary email address stays private
- You can identify which service shared or leaked your address
- Spam can be isolated to a specific alias
- Compromised aliases can be disabled immediately
- You can create different addresses for different purposes
- You can reduce the amount of personal information exposed to websites
For example, if you start receiving spam at store@example.com, but you only ever gave that address to one online store, you have a pretty good indication of where the address originated.
You can then disable that alias without having to change your primary email address.
Cloudflare Email Routing
Ghost Mail depends on Cloudflare Email Routing, so it is important to understand what actually happens behind the scenes.
Cloudflare receives mail addressed to your alias and forwards it to a verified destination address that you configure in Cloudflare.
Ghost Mail simply provides a convenient interface for managing those routing rules.
This is fundamentally different from using a dedicated alias provider.
With a service such as SimpleLogin, the alias provider operates the infrastructure responsible for receiving and forwarding your mail. With Ghost Mail, Cloudflare remains the service handling the email routing.
Ghost Mail is the management client.
Creating Aliases
Creating a new alias is the main reason to use Ghost Mail, and this is where the application is particularly convenient.
Instead of opening the Cloudflare dashboard, navigating through Email Routing and creating a rule manually, you can create an alias directly from your iPhone or iPad.
You can also associate additional information with an alias, such as the website it belongs to and personal notes.
For example:
- Alias: shopping@example.com
- Website: example-shop.com
- Notes: Used for online shopping
This metadata makes a large collection of aliases much easier to manage.
Disable or Delete an Alias
This is arguably the most useful part of an alias system.
If an address starts receiving unwanted messages, you do not have to tolerate them indefinitely.
You can simply disable the alias.
Ghost Mail makes this process quick enough that creating a unique alias for every website becomes practical.
If an alias is permanently compromised or no longer needed, it can also be deleted.
This gives you much more control over your email address than using one permanent address for everything.
Multiple Domains
Ghost Mail is not limited to a single domain.
The current version supports multiple domains and subdomains, allowing users with larger domain setups to manage their aliases from the same application.
This is particularly useful if you maintain several domains or use different domains for different purposes.
Instead of maintaining separate tools or repeatedly logging into Cloudflare, your configured domains can be managed from one place.
Offline Alias Viewing
One surprisingly useful feature is the ability to view your aliases while offline.
Because Ghost Mail maintains local information about your aliases and their associated metadata, you can browse your alias list even when you do not currently have an internet connection.
This is useful when you simply want to look up which address you used for a particular website.
Obviously, creating or modifying an alias requires communication with Cloudflare, but the locally cached information remains available for reference.
Website Information and Metadata
Cloudflare Email Routing itself is primarily concerned with the email address and routing destination.
Ghost Mail adds another layer of organization by allowing you to attach information such as:
- Website
- Notes
- Creation date
The application can also fetch website favicons so that aliases can be visually associated with the websites they belong to.
This makes a large alias collection much easier to browse.
Safari Share Extension
Ghost Mail also integrates with the iOS Share Sheet.
This is a particularly nice feature if you frequently create aliases while signing up for websites.
While browsing a website in Safari, you can use the Share Sheet to send the site to Ghost Mail and start creating an alias for it.
This reduces the number of steps required to create an alias at the exact moment you need one.
The application also supports a dedicated Create Alias Home Screen quick action and deep links for starting alias creation.
Send Email From an Alias
Ghost Mail has also expanded beyond simply managing incoming aliases.
The application can be configured to send email from an alias using your own SMTP server.
This means an alias does not necessarily have to be receive-only.
If you configure SMTP correctly, you can send messages using an alias while keeping your primary email address hidden from the recipient.
This is especially useful for people who use aliases as complete identities for particular services or purposes.
Catch-All and Subdomain Support
Ghost Mail also provides controls for more advanced Cloudflare Email Routing configurations.
This includes support for catch-all addresses and aliases on subdomains.
Catch-all routing can be particularly useful for people who want to accept mail sent to arbitrary addresses on a domain without manually creating every address beforehand.
However, catch-all configurations should be used carefully because accepting every address can also increase the amount of unwanted mail that reaches your destination inbox.
Email Statistics
Ghost Mail can optionally display email-routing statistics and charts.
These statistics use Cloudflare's API and therefore require the optional Analytics: Read permission in the Cloudflare API token.
Depending on the available Cloudflare data, the application can help visualize activity such as delivered, dropped and rejected email.
This is useful if you maintain a large number of aliases and want to understand which addresses are actually receiving mail.
If you do not need statistics, the additional Analytics permission is not required.
CSV Import and Export
If you already have a large collection of aliases, manually recreating everything would be painful.
Ghost Mail therefore supports CSV import and export.
This allows you to back up your alias information or move a collection of aliases into the application.
The import system can also preserve additional information such as website, notes, creation date, enabled state and forwarding destination.
This is particularly useful for anyone who has been maintaining an alias database manually.
iCloud Sync
Ghost Mail can optionally synchronize your alias information using iCloud/CloudKit.
This is useful if you use more than one Apple device.
For example, you might create an alias on your iPhone and later want to see the same alias and its associated metadata on your iPad.
iCloud synchronization can also serve as a backup for your locally stored alias information.
The feature is optional, so users who prefer to keep the alias database only on the device can leave it disabled.
Privacy and Security
This is probably the most interesting aspect of Ghost Mail.
There is no Ghost Mail backend.
The application does not require you to create a Ghost Mail account, and the developer says there is no Ghost Mail server collecting telemetry, analytics or crash reports.
Instead, the application communicates directly with the services you choose to use.
The basic data flow is essentially:
Ghost Mail → Cloudflare API → Cloudflare Email Routing
Optional services such as iCloud synchronization and your own SMTP server add their own connections.
This architecture significantly reduces the amount of infrastructure you have to trust.
Cloudflare API Token Security
Ghost Mail requires a Cloudflare API token to manage your domains.
This naturally raises an important security question: what happens to that token?
According to the project's documentation, the Cloudflare API token is stored in the iOS Keychain using a device-bound accessibility setting.
The application also recommends using a token with only the permissions it actually needs.
The required permissions include access to Email Routing addresses, Email Routing rules and zone settings. Additional permissions are only necessary for optional functionality such as analytics or subdomain support.
This is a good approach because an API token should never have more privileges than necessary.
What Ghost Mail Does Not Protect Against
It is important not to confuse email aliases with anonymity.
An alias hides your primary email address from the website or person you give the alias to. It does not make you anonymous.
For example, if you use the same alias across several websites, those services may still be able to associate your activity with the same email identity.
There is also an important trust consideration: Cloudflare still handles the email routing.
Cloudflare can see the aliases you create and the destination to which they forward. During email routing, the contents of forwarded messages also pass through Cloudflare's infrastructure.
Ghost Mail does not change that.
It simply gives you a convenient and open-source way to manage the Cloudflare configuration.
Open Source
Ghost Mail is released as open-source software under the MIT License.
The complete project is available on GitHub, including the main iOS application and its Share Extension.
This is particularly valuable for a privacy-focused application that handles API credentials.
The developer also documents the application's data flow and explains which external services it communicates with.
The project documentation states that the source contains no closed components or bundled binaries and explains how users can build the application themselves using Xcode.
Of course, an App Store binary is still signed and distributed by Apple, so source availability does not mean that every user is independently reproducing the exact App Store binary.
But having the complete source available provides considerably more transparency than using a closed-source alias-management application.
Ghost Mail vs SimpleLogin and Similar Services
Ghost Mail occupies a slightly different niche from dedicated alias providers such as SimpleLogin or Addy.io.
| Feature | Ghost Mail | Dedicated Alias Service |
|---|---|---|
| Alias management | Yes | Yes |
| Uses your own domain | Yes | Usually supported |
| Cloudflare Email Routing | Required | Usually not required |
| Own infrastructure | No | Yes |
| Open source | Yes | Depends on provider |
| Subscription required | No | Depends on provider |
| System-wide email service | No | Provider dependent |
The biggest difference is that Ghost Mail is essentially a Cloudflare Email Routing client.
If you already own a domain hosted on Cloudflare and use Email Routing, this is a major advantage.
You do not need to introduce another alias provider into the chain just to manage your aliases from your phone.
If you do not have a Cloudflare domain, however, a dedicated alias service will probably make more sense.
Performance and Usability
Ghost Mail is designed around a fairly focused task, and that shows in the interface.
It does not attempt to become a full email client. Instead, the application is centered around your aliases, routing configuration and associated metadata.
The ability to view aliases offline also makes the application feel more like a local management tool rather than simply a web wrapper around Cloudflare.
The Safari Share Extension is another usability improvement because it puts alias creation closer to the point where you actually need it.
For people who create aliases frequently, those small conveniences add up.
What I Like About Ghost Mail
The biggest advantage is that Ghost Mail solves a very specific problem without introducing another service that needs to be trusted.
If you already use Cloudflare Email Routing, you already have the infrastructure required for aliases.
Ghost Mail simply makes managing that infrastructure from an iPhone or iPad considerably easier.
I also like the privacy architecture.
There is no Ghost Mail account, no Ghost Mail backend and no requirement to send your email through another alias provider. The app communicates directly with Cloudflare and, where applicable, your own SMTP server or iCloud.
The combination of:
Open source + no subscription + no Ghost Mail backend + direct Cloudflare API access
makes the project particularly attractive to privacy-conscious users.
The ability to add website information and notes is another feature I appreciate. Once you start using unique aliases for dozens or hundreds of websites, remembering why each alias exists becomes surprisingly difficult.
What Could Be Better?
The biggest limitation is also the application's defining characteristic: you need Cloudflare.
If your domain is hosted somewhere else and you do not want to move it to Cloudflare, Ghost Mail is not going to help you.
It also does not replace a dedicated email alias service.
Ghost Mail manages Cloudflare's routing system; it does not operate an independent alias network. This means features and capabilities are ultimately constrained by what Cloudflare Email Routing provides.
Another consideration is the API token.
Giving a mobile application an API token capable of modifying your email-routing configuration is inherently sensitive. Ghost Mail takes sensible steps by storing the token in the iOS Keychain and documenting the required permissions, but users should still create appropriately scoped tokens and protect their devices.
Finally, some advanced features require additional Cloudflare permissions. For example, analytics requires the Analytics permission, while subdomain functionality requires DNS read access.
Who Should Use Ghost Mail?
I would particularly recommend Ghost Mail to:
- People who own their own domain
- Users already using Cloudflare Email Routing
- Privacy-conscious users
- People who use unique email aliases for websites
- Users who want to manage aliases from an iPhone or iPad
- People who prefer open-source software
- Users who want to avoid another subscription-based alias service
- People who maintain multiple domains or subdomains
If you do not use Cloudflare Email Routing, there is little reason to install Ghost Mail. A dedicated alias provider will be a better fit.
Is Ghost Mail Worth Using?
If you already have a Cloudflare-hosted domain, absolutely.
The application takes something that is somewhat inconvenient to manage through the Cloudflare dashboard and turns it into a purpose-built mobile experience.
More importantly, it does not add another intermediary to your email infrastructure.
Your aliases remain Cloudflare aliases. Ghost Mail is simply the tool you use to manage them.
The fact that the application is free and open source makes the proposition even better.
For someone who uses email aliases heavily, the ability to create an address for a new website in seconds, attach notes to it, disable it when necessary and manage everything from an iPhone is genuinely useful.
Final Verdict
Ghost Mail is a great example of a small application solving a very specific problem extremely well.
It does not try to compete with full-fledged email providers or dedicated alias services. Instead, it focuses on people who already use Cloudflare Email Routing and want a better way to manage their aliases from iOS.
The application provides alias creation and management, multiple domains and subdomains, offline viewing, CSV import/export, iCloud synchronization, Safari integration, optional analytics and even sending from aliases through your own SMTP server.
Its open-source architecture is perhaps its biggest strength. There is no Ghost Mail backend, no subscription and no advertising or tracking. Your device communicates directly with Cloudflare and the other services you choose to configure.
There are limitations, particularly the requirement for Cloudflare and the fact that aliases are not the same thing as anonymity. But within its intended use case, Ghost Mail is an extremely compelling tool.
If you own a Cloudflare-hosted domain and use email aliases, Ghost Mail is one of those apps that makes an existing service substantially easier to use.
Pros
- Completely free
- Open source
- No Ghost Mail backend
- No subscription or paywalls
- No ads or telemetry
- Direct Cloudflare API integration
- Create, disable and delete aliases easily
- Multiple domains and subdomains
- Offline alias viewing
- iCloud synchronization
- CSV import and export
- Safari Share Extension
- Optional email statistics
- Send from aliases with your own SMTP server
- API credentials stored in the iOS Keychain
Cons
- Requires a Cloudflare-hosted domain
- Requires Cloudflare Email Routing
- Requires a Cloudflare API token
- Not a standalone email-alias service
- Aliases do not provide anonymity
- Some advanced features require additional Cloudflare permissions
- Sending from aliases requires your own SMTP server
Bottom line: Ghost Mail is an excellent companion for anyone using Cloudflare Email Routing. It brings convenient, privacy-focused alias management to iPhone and iPad without adding another service to the email chain. If you already own a Cloudflare-hosted domain, it is hard to find a reason not to give it a try.
Download Ghost Mail
Ghost Mail is available for free on the App Store for iPhone and iPad.
Download Ghost Mail from the App Store →
Before using it, make sure your domain is hosted on Cloudflare, Email Routing is enabled, and you have at least one verified destination email address configured in Cloudflare.
Homepage / Source Code: https://github.com/sendmebits/ghostmail-ios