Firefox Private Relay
relay.firefox.com
Developed and managed by Mozilla, Relay is a Firefox addon, that lets you make an email alias with 1 click, and have all messages forwarded onto your personal email. Relay is totally free to use, and very accessible to less experienced users, but also open source, and able to me self-hosted for advanced usage.
- Homepage: relay.firefox.com
- GitHub: github.com/mozilla/fx-private-relay
- Privacy: tosdr.org/en/service/4158
- Web info: web-check.xyz/check/relay.firefox.com
Firefox Private Relay Privacy Policy
Privacy Policy Summary
- Your browser's Do Not Track (DNT) headers are respected
Score
Documents
- Conditions of UseCreated 21 Jun 21, Last modified 1 year ago
- Firefox Relay Terms of ServiceCreated 21 Jun 21, Last modified 1 year ago
- Firefox Relay (Beta) Privacy NoticeCreated 21 Jun 21, Last modified 1 year ago
About the Data
This data is kindly provided by tosdr.org. Read full report at: #4158
Firefox Private Relay Source Code
Author
Description
Keep your email safe from hackers and trackers. Make an email alias with 1 click, and keep your address to yourself.
Homepage
https://relay.firefox.comLicense
NOASSERTION
Created
06 Jun 19
Last Updated
03 Jul 26
Latest version
Primary Language
Python
Size
64,022 KB
Stars
1,755
Forks
266
Watchers
1,755
Language Usage
Star History
Top Contributors
-
@dependabot[bot] (3349)
-
@groovecoder (2670)
-
@jwhitlock (2268)
-
@Vinnl (1242)
-
@actions-user (941)
-
@say-yawn (748)
-
@lloan (614)
-
@codemist (420)
-
@vpremamozilla (338)
-
@maxxcrawford (297)
-
@lesleyjanenorton (282)
-
@joeherm (202)
-
@rafeerahman (178)
-
@mozilla-blender[bot] (148)
-
@mozrokafor (80)
-
@mozilla-pontoon (44)
-
@EMMLynch (19)
-
@github-actions[bot] (14)
-
@pdehaan (10)
-
@flozia (7)
-
@birdsarah (7)
-
@grahamalama (6)
-
@joaonunomota (6)
-
@moz-astults (5)
-
@hransom528 (4)
-
@jbuck (4)
-
@fkiriakos07 (3)
-
@ggujjula (3)
-
@uvinduperera (2)
-
@Shalmalo (2)
-
@reuben (2)
-
@raffifu (2)
-
@nickspaargaren (2)
-
@gabrielluong (2)
-
@dholbert (2)
-
@wagnerand (2)
-
@janriokrause (1)
-
@xcsnowcity (1)
-
@suriyaa (1)
-
@schreven (1)
-
@mansaj (1)
-
@RafaelJohn9 (1)
-
@rohansachinpatil (1)
-
@tomaioo (1)
Recent Commits
-
Merge pull request #6674 from mozilla/dependabot/github_actions/actions/checkout-7.0.0 build(deps): bump actions/checkout from 6.0.3 to 7.0.0
-
Merge pull request #6664 from mozilla/MPP-1395 fix(emails): hide Relay user's real email in reply body
-
test(emails): cover HTML body in reply email masking test Address review feedback: the test only exercised the plain text body. Add an HTML alternative containing the real email so the test also covers the HTML replacement branch.
-
Merge pull request #6663 from mozilla/improve-caching-mpp-4692 feat(api): add cache-control headers and per-user rate limits to high-traffic endpoints
-
feat(api) MPP4692: add cache-control headers and per-user rate limits to high-traffic endpoints Add Cache-Control headers to prevent re-fetching for 60s, even when FirefoxRelay.sys.mjs caching doesn't work. Add per-user throttles (30/min) to cap runaway loops at the origin. - Profile, RelayAddress, DomainAddress GETs: Cache-Control: private, max-age=60 - ProfileViewSet: 30/min per-user throttle via PROFILE_RATE_LIMIT (scope "profile") - RelayAddress/DomainAddress ViewSets: 30/min per-user throttle via ADDRESS_RATE_LIMIT (scope "address") - Distinct throttle scopes keep profile and address limits in separate buckets instead of colliding on the default "user" scope - Rate limits relaxed to 1000/min in test/local/dev environments runtime_data is intentionally left uncached: its response varies per user (waffle flags, request geo) and SWR already memoizes it for the session, so a shared/edge cache would risk cross-user data.
-
Merge pull request #6670 from mozilla/dependabot/npm_and_yarn/typescript-eslint-8.62.0 build(deps-dev): bump typescript-eslint from 8.61.1 to 8.62.0
-
Merge pull request #6665 from mozilla/dependabot/pip/boto-29f65b74ae build(deps): bump the boto group with 3 updates
-
Merge pull request #6666 from mozilla/dependabot/pip/testing-libraries-7be846ec3e build(deps): bump coverage from 7.14.1 to 7.14.3 in the testing-libraries group
-
Merge pull request #6668 from mozilla/dependabot/npm_and_yarn/immutable-5.1.7 build(deps): bump immutable from 5.1.6 to 5.1.7
-
Merge pull request #6669 from mozilla/dependabot/npm_and_yarn/swr-2.4.2 build(deps): bump swr from 2.4.1 to 2.4.2
-
Merge pull request #6672 from mozilla/dependabot/npm_and_yarn/lint-staged-17.0.8 build(deps-dev): bump lint-staged from 17.0.7 to 17.0.8
-
Merge pull request #6673 from mozilla/dependabot/github_actions/ruby/setup-ruby-1.314.0 build(deps): bump ruby/setup-ruby from 1.313.0 to 1.314.0
-
build(deps): bump actions/checkout from 6.0.3 to 7.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v6.0.3...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
-
build(deps): bump ruby/setup-ruby from 1.313.0 to 1.314.0 Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.313.0 to 1.314.0. - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](https://github.com/ruby/setup-ruby/compare/v1.313.0...v1.314.0) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-version: 1.314.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
-
build(deps-dev): bump lint-staged from 17.0.7 to 17.0.8 Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 17.0.7 to 17.0.8. - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.0.7...v17.0.8) --- updated-dependencies: - dependency-name: lint-staged dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
-
build(deps-dev): bump typescript-eslint from 8.61.1 to 8.62.0 Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.61.1 to 8.62.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: typescript-eslint dependency-version: 8.62.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
-
build(deps): bump swr from 2.4.1 to 2.4.2 Bumps [swr](https://github.com/vercel/swr) from 2.4.1 to 2.4.2. - [Release notes](https://github.com/vercel/swr/releases) - [Commits](https://github.com/vercel/swr/compare/v2.4.1...v2.4.2) --- updated-dependencies: - dependency-name: swr dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
-
build(deps): bump immutable from 5.1.6 to 5.1.7 Bumps [immutable](https://github.com/immutable-js/immutable-js) from 5.1.6 to 5.1.7. - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/immutable-js/immutable-js/compare/v5.1.6...v5.1.7) --- updated-dependencies: - dependency-name: immutable dependency-version: 5.1.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
-
build(deps): bump coverage in the testing-libraries group Bumps the testing-libraries group with 1 update: [coverage](https://github.com/coveragepy/coveragepy). Updates `coverage` from 7.14.1 to 7.14.3 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](https://github.com/coveragepy/coveragepy/compare/7.14.1...7.14.3) --- updated-dependencies: - dependency-name: coverage dependency-version: 7.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: testing-libraries ... Signed-off-by: dependabot[bot] <[email protected]>
-
build(deps): bump the boto group with 3 updates Bumps the boto group with 3 updates: [boto3](https://github.com/boto/boto3), [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) and [mypy-boto3-s3](https://github.com/youtype/mypy_boto3_builder). Updates `boto3` from 1.43.30 to 1.43.35 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](https://github.com/boto/boto3/compare/1.43.30...1.43.35) Updates `boto3-stubs` from 1.43.30 to 1.43.35 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `mypy-boto3-s3` from 1.43.14 to 1.43.31 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto - dependency-name: boto3-stubs dependency-version: 1.43.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto - dependency-name: mypy-boto3-s3 dependency-version: 1.43.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto ... Signed-off-by: dependabot[bot] <[email protected]>
-
fix(emails): hide Relay user's real email in reply body Relay rewrites a reply's headers to the mask but sent the body as-is. Clients like Outlook quote the original message, which can include the user's real email in a quoted "To:" line, leaking it to the recipient. Replace the user's real email with the mask in the plain text and HTML reply bodies, mirroring the get_body/set_content pattern the forwarding flow already uses. Fixes #1377
-
Merge pull request #6637 from mozilla/blender/security-bump-@babel/core chore(deps): bump @babel/core to 7.29.6
-
Merge pull request #6660 from mozilla/joe/bump-playwright chore(playwright): bump playwright dependency to fix e2e tests
-
chore(playwright): bump dependency to fix e2e tests
-
Merge pull request #6655 from mozilla/dependabot/npm_and_yarn/nextjs-ffacf418a5 build(deps): bump the nextjs group across 1 directory with 2 updates
-
build(deps): bump the nextjs group across 1 directory with 2 updates Bumps the nextjs group with 2 updates in the / directory: [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties) and [next](https://github.com/vercel/next.js). Updates `@next/third-parties` from 16.2.7 to 16.2.9 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.2.9/packages/third-parties) Updates `next` from 16.2.7 to 16.2.9 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/compare/v16.2.7...v16.2.9) --- updated-dependencies: - dependency-name: "@next/third-parties" dependency-version: 16.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nextjs - dependency-name: next dependency-version: 16.2.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nextjs ... Signed-off-by: dependabot[bot] <[email protected]>
-
Merge pull request #6652 from mozilla/dependabot/github_actions/ruby/setup-ruby-1.313.0 build(deps): bump ruby/setup-ruby from 1.312.0 to 1.313.0
-
Merge pull request #6653 from mozilla/dependabot/npm_and_yarn/eslint-6d76de260b build(deps-dev): bump eslint from 10.4.1 to 10.5.0 in the eslint group
-
Merge pull request #6654 from mozilla/dependabot/pip/boto-7174edbe15 build(deps): bump the boto group with 2 updates
-
Merge pull request #6656 from mozilla/dependabot/npm_and_yarn/typescript-eslint-8.61.1 build(deps-dev): bump typescript-eslint from 8.61.0 to 8.61.1
Firefox Private Relay Security
Firefox Private Relay Website
Website
Firefox Relay
Firefox Relay makes it easy to create email masks that forward your messages to your true inbox. Use them to protect your online accounts from hackers and unwanted messages.
Redirects
Does not redirect
Security Checks
All 65 security checks passed
Server Details
- IP Address 151.101.65.91
- Location San Francisco, California, United States of America, NA
- ISP Fastly Inc.
- ASN AS54113
Associated Countries
-
US
Safety Score
Website marked as safe
100%
Blacklist Check
relay.firefox.com was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
Firefox Private Relay Reviews
More Mail Forwarding
-
A long-standing aliasing service. As well as receiving, 33Mail also lets you reply to forwarded addresses anonymously. Free plan, as well as Premium plan ($1/ month) if you'd like to use a custom domain. Note that 33Mail usese Google Analytics.
Not Open Source -
An open source anonymous email forwarding service, allowing you to create unlimited email aliases. Has a free plan.
-
Catch-all email forwarding service with unlimited aliases and custom domains, configured via DNS records. Self-hostable; the hosted version has a limited free plan, with paid plans (from $3/month) adding encrypted IMAP/POP3 mailboxes. Audited by Cure53 in 2026.
-
If you already have ProtonMail's Professional (€8/month) or Visionary (€30/month) package, then an implementation of this feature is available via the Catch-All Email feature.
-
Fully open source (view on GitHub) alias service with many additional features. Can be self-hosted, or the managed version has a free plan, as well as hosted premium option ($2.99/ month) for using custom domains.
About the Data: Firefox Private Relay
API
You can access Firefox Private Relay's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/firefox-private-relayThe REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share Firefox Private Relay
Help your friends compare Mail Forwarding, and pick
privacy-respecting software and services.
Share Firefox Private Relay and Awesome Privacy with your network!