A street address changes when you move. A phone number changes when you switch carriers. The email address typed into a shopping cart in 2019 is still the same address, still sitting in the same lists, and still reachable by everyone who has ever been handed it. That gap is what an alternate email identity for online signups is sold to close, and Surfshark sells one under the name Alternative ID.
This is an independent editorial review. Surfshark did not review or approve this article.
The unsubscribe duty described below is a federal rule that binds the companies sending the mail, not a feature Surfshark provides, while the product terms quoted here are the published terms of Surfshark B.V., a company registered in Amsterdam. The two do different jobs and neither one replaces the other.
You can check current options here:
Use case 1: handing over an alternate email identity for online signups instead of your own address
Surfshark describes the feature plainly on its own page: Alternative ID “is a Surfshark product that generates a brand-new identity and email for you to use online.” You pick a gender, a date of birth, a country and a state, and the tool builds a persona around those choices, including a name and an email address you can keep or regenerate. The company says there is “no limit to the number of online personas you can generate,” but the part that actually matters day to day is narrower: you can “generate up to three unique email masks.”
The mechanics are simple enough to describe in a sentence. Surfshark says “any message sent to your alternate address is automatically forwarded directly to your primary inbox,” so the sender sees the mask and you read the mail where you always read it. Setting it up takes a few minutes in the web app, the browser extension or the iOS app, where it sits under the Antiscam tab as Personal data masking:
- Open the Alternative ID tab and choose Create.
- Select gender, date of birth, country and state, then generate the persona or regenerate until one suits.
- Link your real email address, which is the inbox everything will land in.
- Enter the verification code Surfshark sends to that real address.
- Copy the generated alias and use it the next time a form asks.
Two conditions sit behind all of that. Alternative ID requires an active Surfshark subscription, and the company says it is included “at no extra cost with all Surfshark bundles.” The separate Alternative Number, which generates a phone number rather than an address, is sold on top of any plan and offers USA numbers only.
Use case 2: an alternate email identity for newsletters you stop reading inside a month
There is already a law covering this situation, and it is worth knowing exactly what it promises before deciding you need a product. The Federal Trade Commission’s compliance guidance on commercial email says a sender’s opt-out option “must be able to process opt-out requests for at least 30 days after you send your message,” that “you must honor a recipient’s opt-out request within 10 business days,” and that a sender “can’t charge a fee, require the recipient to give you any personally identifying information beyond an email address.” The reader may only be asked to take one step, either “sending a reply email or visiting a single page on an Internet website.” Hiring an agency changes nothing: “even if you hire another company to handle your email marketing, you can’t contract away your legal responsibility to comply with the law.”
Read that list again and notice who performs every item on it. The sender does. An alternate email identity for newsletters moves one of those jobs to your side of the table, because Surfshark says “you can delete or pause the alternative email anytime,” and a paused mask stops delivering without anyone else agreeing to anything. The practical split looks like this:
- The unsubscribe link is the right answer for senders you expect to hear from again, since it keeps the relationship and the account intact.
- A mask is the right answer for a one-off download, a discount code or a competition entry, where you never intend to hear from the sender at all.
- A mask is also the only one of the two that survives the sender selling, merging or losing the list, because the address itself can be retired.
- Neither option removes an address that is already circulating, which is the reason to start using a mask before the next signup rather than after.
Use case 3: an alternate email identity for shopping accounts that outlive the purchase
A shopping account is the awkward middle case. You want the receipt, the shipping notice and the refund thread, and you do not want the eleven promotional sends a month that arrive with them. Because Surfshark forwards everything to your real inbox, an alternate email identity for shopping accounts does not cost you the receipt. What it changes is who holds the off switch afterwards.
The three-mask ceiling is the design constraint to plan around. Three is enough to run one mask for retail accounts, one for newsletters and trials, and one for forums and community signups, which is a tidier arrangement than one mask per store. It is not enough to give every merchant its own address, so the usual trick of spotting which company leaked your details does not survive the cap intact.
One more detail belongs in this section rather than the fine print. If a retailer needs to reach you about a recall, a failed payment or a refund, it will use the address on the account. A mask you pause or regenerate is a mask the retailer can no longer reach, so the account that holds your money deserves an address you plan to keep rather than one you plan to burn.
Use case 4: where an alternate email identity for privacy stops being the right tool
Surfshark is unusually direct about this, and the honest version of the article has to repeat it. The company’s own email page advises against using the alias for banking and finance, for healthcare and government services, for identity verification such as password managers and secure logins, and for professional correspondence where credibility matters. Its Terms of Service add that “your access to and use of the Alternative ID Service is permitted solely for your own personal and non-commercial purposes,” which rules out the freelancer who hoped to put a mask on client work.
The strongest sentence against an alternate email identity for privacy is one Surfshark publishes about itself. Its terms state that the company “does not assert or guarantee the prompt and exact delivery or reception of communications.” A password reset, a two-factor code or a flight change that arrives late, or does not arrive at all, is a bad outcome in a way that a missed sale email is not. Add the subscription condition from the first section and the rule writes itself: anything you would be sorry to miss belongs on an address that does not depend on a plan staying current.
Side-by-side by situation
| Your situation | What that situation needs |
|---|---|
| Grabbing a one-time discount code or a free download | A mask, retired the moment the code is used |
| A newsletter you may genuinely want in six months | Your real address plus the sender’s own unsubscribe link |
| A retail account holding a card and an order history | An address you intend to keep reachable, masked or not |
| A trial of a tool you are still evaluating | A mask, since the trial ends and the mail usually does not |
| Banking, insurance, medical or government accounts | Your real address, on the provider’s and Surfshark’s own advice |
| Work email where a reply has to look credible | Your work address; the terms exclude commercial use anyway |
Related Articles
- Dedicated IP VPN for Remote Work: Where the Add-On Actually Helps
- Best VPN for Public Wifi Security: What Actually Protects You
- Is a VPN Necessary for Online Banking: An Honest Answer
Frequently Asked Questions
Four questions come up more than any others once people understand what the feature does, and all four have answers published by Surfshark or by the Federal Trade Commission rather than by a reviewer.
Does a masked address hide me from the company I am signing up with?
No. It hides one identifier. The company still has whatever name, card, shipping address and browsing history you give it, and Surfshark’s advice to avoid using the alias for identity verification is an admission that the mask is not meant to carry that weight.
How many alternative email addresses does one account get?
Three. Surfshark says users can “keep up to three different alternative email addresses,” while the number of generated personas behind them is uncapped.
What happens to a mask if the subscription lapses?
Alternative ID requires an active subscription, so plan for the mask to stop being a dependable route to you if the plan ends. That is the argument for keeping anything important on your own address.
Can I reply from the alternative address?
Surfshark’s email page describes inbound forwarding and does not describe sending or replying, so treat the mask as a one-way door until the company says otherwise. The separate Alternative Number is explicitly limited in the same way, allowing outgoing texts only in response to a message someone else started.
You can check current options here:
Conclusion
The useful way to think about this purchase is not privacy against convenience. It is who has to act. An unsubscribe link is a duty the sender owes you, with a 30-day window and a 10-business-day deadline attached, and you are relying on a stranger to meet it. A mask is a switch in your own account, and Surfshark will pause or delete it on request. Give the switch to the signups you expect to regret, and leave your real address on the handful of accounts where a late message would cost you something.
