All hackers have an email alias on HackerOne that forwards any emails to the email address that was used to register with HackerOne. This provides an easy way for programs to contact you in order to share credentials and information without having to access your actual email address. Programs no longer have to share credentials through spreadsheets, shared documents, or other means.
How It Works
Upon creation of an account on HackerOne, the email alias will automatically generate based on the username you choose.
Email aliases will be in the form of
[username]@wearehackerone.com
Programs will email you using your email alias to share special credentials or to communicate with you.
The email will automatically be forwarded to your actual email address.
Note: You can't send emails with your wearehackerone alias. You can only receive emails with your alias if it’s from an email address that’s not associated with your HackerOne account.
Multiple Aliases
You can have multiple email aliases tied to your HackerOne account. This enables you to create multiple test accounts on a program to be able to test different attack vectors on different account levels without having to create multiple HackerOne profile accounts.
You can create multiple email aliases by using [username]+[any_identifier]@wearehackerone.com. You can put anything you want behind the + sign to accommodate your needs. For instance, if you set up a test account using your default alias, jobert@wearehackerone.com, you can use jobert+test2@wearehackerone.com to create another test account.
FAQs
Question | Answer |
What happens if I change my username? | The email alias will automatically update with the new username. |
What happens if I change my email address on HackerOne? | The emails will be forwarded to your new, correct email. |
How do I disable my alias? | To disable your alias, you must disable your account. |
Note: In the interest of maintaining the integrity and trust of our platform, we kindly request that you refrain from using the @wearehackerone.com email alias for unauthorized testing activities. Any violations of our Code of Conduct will be subject to appropriate action.