posted by VaelMail · 15 November 2026
What Is an Account-Number Login? Email Without a Password
An account-number login replaces your username and password with a random number. How it works on VaelMail, what it protects against, and its one big risk.
Most email accounts use an address and a password, plus a recovery email or phone number for when you forget it. An account-number login removes all three. You get a random 16-digit number when you sign up, and that number is how you sign in. This guide explains the idea, the benefits and the risk.
How it works
When you create a VaelMail account, VaelMail generates a random 16-digit number and shows it to you. You choose an address for receiving mail, but you sign in with the number, not the address. There is no password. You can add a second factor, such as an authenticator app or passkeys.
What it protects against
Password reuse: there is no password to reuse from another site.
Phishing and breaches of other sites: a leaked password from elsewhere does nothing here.
Account takeover through recovery: there is no recovery email or phone number for an attacker to take over.
Linking to you: the number carries no name, phone number or ID.
The one big risk
If you lose the number, the account cannot be recovered. There is no reset link and no staff override, because any such route would also be a route for an attacker. You must keep the number safe. That is the whole trade: a lot less to attack, in exchange for taking responsibility for one secret.
How to keep it safe
Store it in a password manager.
Keep a second copy offline, such as on paper.
Add a second factor so a leaked number is not enough, and save the recovery codes.
Never send the number by email or chat.
Where the idea comes from
Mullvad VPN popularised the pattern of a random account number with prepaid time and no personal data. VaelMail applies the same idea to email. Read the account-number model for email for the comparison with a usual account.
What it does not do
A random number does not make everything anonymous. Your connection still reveals your IP address to the sites you use, and the mail you send still says what you write. For the network side, see Tor and I2P access.
Try it
The sign-up takes about a minute and asks for no phone number or email. Read how it works step by step, or create an account. The feature page has the short version.
In short
An account-number login trades a password and a recovery route for one random secret that you must keep. It removes password reuse, phishing of a password and recovery-based takeover, and it makes you the only person who can get back in. If you are comfortable storing a key safely, it is a strong, simple design for a mailbox.
