Edgar Cervantes / Android Authority
TL;DR
- Google appears to working on an email forwarding alias system.
- Called “Shielded Email,” the intent appears to be hiding your main email address from apps demanding one.
- If spam ever becomes a problem, you can just turn off the forwarding.
It feels like every service, app, and website you use these days wants you to create an account for it. How many times have you been checking one of those out, only to pause slightly when it asks for your email address? Sure, Gmail is an absolute champ at filtering out spam, but every time you share your email with someone even a little bit shady, do you feel like you’re playing with fire and risking a whole bunch of unwanted contact? Google may just have a solution in the works, at least by the looks of our latest teardown.
You're reading an Authority Insights story on Android Authority. Discover Authority Insights for more exclusive reports, app teardowns, leaks, and in-depth tech coverage you won't find anywhere else.
An APK teardown helps predict features that may arrive on a service in the future based on work-in-progress code. However, it is possible that such predicted features may not make it to a public release.
The APK on the menu this afternoon is the new 24.45.33 release of Google Play Services, and upon cracking it open, we find a whole boatload of strings referencing and in support of something called “Shielded Email.”
Code
<string name="autofill_datatype_shielded_email_subtext">Generated email addresses</string> <string name="autofill_datatype_shielded_email_title">Shielded Email</string> <string name="autofill_shielded_ids_cancel_button_text">Cancel</string> <string name="autofill_shielded_ids_create_button_text">Use address</string> <string name="autofill_shielded_ids_email_dialog_lower_message_new_user">Emails forward to ^1. To control spam, you can turn off forwarding at any time in your Google Account. <a href="^2">Learn more about Shielded Email</a>.</string> <string name="autofill_shielded_ids_email_dialog_title_new_user">Keep your email address private with Shielded Email</string> <string name="autofill_shielded_ids_email_dialog_title_returning_user">Use Shielded Email?</string> <string name="autofill_shielded_ids_email_dialog_upper_message_new_user">Use an email address created for this app. This can protect you from online tracking and data breaches.</string> <string name="autofill_shielded_ids_email_dialog_upper_message_returning_user">Use an email address created for this app. Emails will forward to ^1</string> <string name="autofill_shielded_ids_email_label">Use Shielded Email</string> <string name="autofill_shielded_ids_error_retry_button_text">Try again</string> <string name="autofill_shielded_ids_generic_error_message">Something went wrong. Please report the issue to <a href="https://go/sme-bugs">go/sme-bugs</a>. Error: ^1</string> <string name="autofill_shielded_ids_progress_indicator_content_description">Progress indicator</string> <string name="autofill_shielded_ids_refresh_button_content_description">@string/common_refresh</string>Just from that text, we’re able to infer quite a lot about what we’re looking at here, and it appears that Shielded Email consists of a system to create single-use or limited-use email aliases that will forward messages along to your primary account. And while we could imagine that something like this might be pretty useful in Chrome, here it looks like Google is building it specifically to address apps that ask for your email address.
The messages in there touch on a couple reasons beyond spam that you might want to keep your main email private, like reducing the extent to which your online activities can be tracked, and mitigating your personal risk from potential future data breaches.
This all sounds like a great idea, presuming Google ultimately follows through with it, and we’re mainly just curious about how it might be implemented. Will these be unique per each use in a way that’s trackable, if your information later gets out? Can we expect any limits on who can use this, or how much they’ll be able to? There are a lot blanks to still fill in right now, but we’ll be keeping an eye on future Google Play Services releases in the hopes of learning more about what Google’s planning here.
Got a tip? Talk to us! Email our staff at [email protected]. You can stay anonymous or get credit for the info, it's your choice.