TempMaily.co
Guides

The Gmail Dot Trick: How It Works and Where It Fails

TempMaily Team7 min read

The Gmail dot trick is one sentence: Gmail ignores dots in the part before the @, so johnsmith@gmail.com, john.smith@gmail.com, and j.o.h.n.smith@gmail.com are all the same inbox — a fact Google documents plainly. What the one-line version leaves out is where the trick fails: Google Workspace accounts don't do this at all, a growing share of websites normalize dots away before checking if an email is "new," and every variant still ties straight to your identity. This guide covers the mechanics, the legitimate uses, the caveats Google itself publishes, and the point where you need a different tool.

We run TempMaily, a temporary email service — which is the tool we'll recommend for the jobs the dot trick cannot do, so weigh that disclosure as you read.

Quick answer

For personal @gmail.com addresses, Google treats all dot placements in the username as one address: dots are ignored on delivery, and you cannot register a Gmail address that differs from an existing one only by dots. This makes dotted variants useful as free aliases of one inbox — for filtering, and for spotting who shared your address. It does not work on Google Workspace (work/school/custom-domain) accounts, it does not create anonymity, and it increasingly does not fool signup forms, which normalize Gmail addresses server-side. For genuinely separate or disposable addresses, use plus addressing, an alias service, or a temp mail inbox.

How Gmail normalizes dotted addresses: john.smith, j.ohnsmith, and johns.mith all collapse to the same johnsmith inbox for personal Gmail, while on Google Workspace each is a distinct address

How the trick works

Gmail's addressing rule for personal accounts has two halves, and both are official, documented behavior rather than folklore:

  1. Delivery ignores dots. Mail sent to any dotted arrangement of your username lands in your inbox. Google's help page is unambiguous: "If someone accidentally adds dots to your address when emailing you, you'll still get that email."
  2. Registration ignores dots too. Nobody can create j.ohnsmith@gmail.com if johnsmith@gmail.com exists — Google considers them the same username. Your dotted variants are yours by construction; there is no risk a stranger registers one.

The practical consequence: a personal Gmail account comes with a combinatorial supply of aliases you never signed up for. A ten-letter username has 512 possible dot arrangements, every one of them deliverable to you.

The caveat that surprises people: none of this applies to Gmail accounts on Google Workspace — the paid Gmail used by companies, schools, and anyone on a custom domain. Google's documentation states it directly: if you use Gmail through work or school, "dots do change your address." j.smith@yourcompany.com and jsmith@yourcompany.com are different mailboxes that can belong to different people. Test before relying on anything below from a work account.

Three legitimate uses

1. Source-tagging without revealing the tag

Give each service a distinct dot pattern — john.smith@ for shopping, johns.mith@ for newsletters — and the To: header of every incoming mail tells you which one leaked or sold your address. Plus addressing does this more readably (john+amazon@), but the plus tag advertises itself and is trivially stripped by anyone laundering address lists; dot patterns look like ordinary addresses. The cost: you must keep your own map of which pattern went where, because nothing in the address names the source.

2. Filtering into folders

Gmail filters match the full To: address, dots included. A filter on to:(johns.mith@gmail.com) labels and archives everything sent to that variant — a lightweight routing system with no setup beyond the filter itself. For heavier use, plus addressing remains the cleaner mechanism since the tag is self-describing.

3. Recovering a "taken" address mystery

Understanding the rule dissolves a common support mystery: you receive mail obviously meant for someone else, addressed to a dotted variant of your username. Nobody hacked anything — a stranger with a similar name typed your address (dots or not, it is all yours) into a form. The rule also means you can safely tell a service "that dotted address is me" when its support team is confused about duplicates.

Where the dot trick fails — and what to use instead

The dot trick's three failure points: Workspace accounts treat dots as distinct, websites normalize dots before uniqueness checks, and every variant still links to one identity — with the matching tools that solve each: plus addressing for filtering, alias services for identity separation, temp mail for throwaway signups

Failure 1: multiple-account signups

The folk use of the dot trick — registering "different" accounts on the same site — is dying on two fronts. Technically: mainstream services increasingly canonicalize Gmail addresses (lowercase, strip dots, drop plus tags) before uniqueness checks, so variants collapse into duplicates. Policy-wise: multi-accounting typically violates terms of service regardless of the email mechanics, and platforms correlate far more than email — device, payment method, phone, IP. We cover the same reality for disposable addresses in why websites block temp mail: the address is rarely the only signal.

Failure 2: anything requiring anonymity

Every dot variant delivers to the inbox of one Google account with your name, your recovery phone, your search history. The dot trick is an organizational feature of a fully-identified inbox. If the job is keeping your identity out of a signup — a sketchy download, a Wi-Fi portal, a one-time verification — the tool is a disposable inbox that self-destructs and was never linked to you, not a rearrangement of your permanent address. The threat models differ enough that we wrote them up separately: can temporary emails be traced?

Failure 3: spam that has your canonical address

Tagging identifies leakers, but once spammers have your base address (dots stripped), every variant reaches you and there is nothing to revoke — you cannot turn off j.ohn@ while keeping john@. Alias services (SimpleLogin, addy.io, Apple Hide My Email) fix precisely this: each alias forwards to you and dies individually when burned. The full comparison is in email alias vs temp mail.

The right tool per job, in one table

Job Right tool Why not the dot trick
See who leaked your address Dot trick or plus addressing — it's the right tool (plus is more readable)
Auto-filing mail into folders Plus addressing Tags are self-describing; dots need a manual map
Signup you'll forget tomorrow Temp mail Dots keep your real inbox in the blast radius
Long-term account, revocable address Alias service Dot variants can't be individually killed
Separate identity per account Alias or custom-domain inbox All dot variants are one identity
Testing signup flows in code Receiving API Normalization breaks dotted "unique" emails

That last row bites quietly: test suites that generate user.1@, us.er1@ style variants against Gmail addresses collide the moment the system under test normalizes. Fresh inboxes per test — the pattern in our email testing guides — sidestep normalization entirely.

Common mistakes

  • Relying on it from a work or school account. The Workspace exception is the most-skipped line in Google's documentation. On custom domains, dots make different addresses — a mistyped dot pattern is someone else's mailbox or a bounce.
  • Treating variants as private. Anyone who knows your base address knows every variant. Dot patterns are obscurity, not access control — there is no password on a dot.
  • Using it where terms prohibit multi-accounting. The email trick working does not make the second account allowed; enforcement usually arrives via payment or device signals you can't rearrange.
  • Confusing Gmail's rule with a universal one. Dots are significant almost everywhere else. Outlook, Yahoo, iCloud, and standard mail servers treat j.ohn and john as different users; the trick is a Gmail-specific behavior.

When you're done rearranging dots

The dot trick is a good inbox-organization hack and a poor privacy tool. The moment a signup shouldn't touch your real inbox at all, that's the job we built for: open TempMaily and you have a private disposable address for the next 24 hours — no signup, no dots to bookkeep, and it deletes itself when the job is done.

Sources

Frequently asked questions

Does Gmail really ignore dots in email addresses?

Yes, for personal @gmail.com accounts — this is documented Google behavior, not a glitch. Google's own help page states that johnsmith@gmail.com and j.o.h.n.s.m.i.t.h@gmail.com are the same address and deliver to one inbox. You can insert dots anywhere in the local part (the text before the @) and mail still reaches you. The critical exception: accounts on Google Workspace — work, school, or custom-domain Gmail — do NOT get this behavior; there, dots create genuinely different addresses.

Can I use the Gmail dot trick to make unlimited accounts on a website?

Sometimes the signup form will accept dotted variants as 'new' emails — but you should not rely on it, and repeat-account schemes usually violate the site's terms. Many services now normalize Gmail addresses by stripping dots before checking uniqueness, so the trick fails silently. And every dotted variant still delivers to the same Gmail inbox tied to your identity: it provides zero anonymity, and all the accounts trace to you. For separate, genuinely distinct addresses, a temporary email or alias service is the honest tool.

What is the difference between the dot trick and Gmail plus addressing?

Both produce variant addresses of one inbox. Plus addressing appends a tag — john+shopping@gmail.com — which is better for filtering because the tag names the source and Gmail can filter on it directly. The dot trick moves dots around — j.ohn@ — which is subtler (senders rarely realize it is an alias) but carries no label, so filtering means maintaining a list of which dot pattern you gave to whom. Plus addresses are also trivially stripped by spammers, while dot variants are harder to normalize away without knowing the Gmail rule — though large services increasingly do exactly that.

Why did the dot trick stop working on some sites?

Because the site normalizes email addresses before checking uniqueness: it lowercases the address, strips dots from the local part when the domain is gmail.com, and often removes plus tags too. After normalization, every dotted variant collapses to the same canonical address and the signup is rejected as a duplicate. This server-side defense has spread widely — which is why the dot trick is best treated as an inbox-organization feature, not a reliable way to create multiple accounts.

Is the Gmail dot trick safe? Can someone else's mail reach my inbox?

The trick itself changes nothing about your account's security. The practical risk is human: people who don't know the rule sometimes sign up for services with a dotted variant of someone else's address, or believe adding dots 'creates' a new private address. If you receive mail clearly meant for another person at a dotted variant of your address, it is because the sender typed your address — dots included or not, it is all your inbox. Never act on accounts or resets you didn't request.

Get a free disposable inbox

A live throwaway address, no signup, real-time delivery. Upgrade to Premium for custom domains, forwarding, and no expiry.