What is temp-mail?

Temp-Mail is a web application that gives people temporary, disposable email addresses. It is built to run entirely on Cloudflare's infrastructure, using Cloudflare Workers to run the backend code, Cloudflare D1 as the database, and Cloudflare's Email Routing feature to actually receive incoming mail. The visible part of the site is built with Vue, a JavaScript framework for building web interfaces. Anyone visiting the site can generate a temporary inbox without creating an account and read whatever mail arrives there. People who sign up for an account get a dashboard where they can save inboxes they want to keep track of and request an API key, which lets other programs create inboxes and read messages through code instead of a browser. An administrator can manage user accounts, approve or reject API key requests, and review messages, though the readme notes there is a "Privacy Lock" setting that can restrict even the administrator from inspecting message contents. The project pays close attention to security and access control. Every inbox, message, and API key is scoped to whoever owns it, checked on the server rather than trusted from the browser. Passwords are hashed with PBKDF2-SHA256, disabled users cannot log in, and revoked API keys stop working immediately. The readme is explicit about which files should never be committed to the repository, such as local secrets and environment files, and states that real secrets belong in Cloudflare's own secret storage rather than in the source code. Running this project requires a Cloudflare account with Workers and D1 enabled, plus a domain that has been set up and verified for Cloudflare Email Routing so incoming mail actually reaches the Worker. Setup involves creating the database, applying its schema, generating a set of secret keys, and seeding at least one verified mail domain before the first admin account can be created. The readme provides the exact commands for each of these steps using Wrangler, Cloudflare's command line tool, along with a combined test and verification command meant to be run before deploying to production.