Share email verification codes through one read-only link
A serverless shared OTP inbox on Cloudflare Email Routing. Set one forwarding filter in Gmail or Outlook; family and teammates read the latest login code themselves. No VPS, no mail server, no email password.
From your mailbox to the right person in seconds
- SourceGmail / Outlook filter
- Forwardcode@yourdomain
- ReceiveCloudflare Email Routing
- ProcessEmail Worker · D1 · R2
- ViewRead-only share link
Forward the right emails
Add a filter in your mailbox: only mail from Netflix, Disney+ or your team's tools, only subjects with a code. Everything else stays where it is.
An Email Worker receives them
Each message is parsed the moment it arrives: the code is extracted, the mail is sorted and stored in D1 and R2. Password resets, receipts and account alerts are kept out by default.
Share one link
Create a read-only link with a rolling window: the last 30 minutes, 24 hours or 7 days. Revoke it whenever you like.
No mail server to run
One Worker with D1 and R2 replaces the VPS, SMTP stack and IMAP polling that older tools need.
$0/month, nothing to maintain
No VPS, no Docker SMTP stack, no port 25 to unblock. The free tiers of Email Routing, Workers, D1 and R2 cover a family or a small team. All you need is a domain on Cloudflare.
Instant, no IMAP polling
An Email Worker is invoked for each forwarded message as it arrives, so the code is on the page before anyone refreshes.
No email password, no OAuth
InboxShare only receives what your forwarding rule sends. It never connects to Gmail or Outlook and never asks for read access to your inbox.
Built for one job: getting the code to the right person
Codes up front
4 to 8 digit codes are detected on arrival and shown as a large copy button. Full HTML is kept, so confirmation links still work.
Rolling time windows
A link shows only recent mail. Old codes scroll out of view on their own; nothing is shared forever.
Sensitive mail stays hidden
Password resets, receipts and account-security alerts never appear on a share page unless you opt in for that link.
Read-only by design
Viewers cannot reply, forward or delete. HTML is sanitized and sandboxed, tracking pixels do not load, attachments download only.
Works with any mailbox
Gmail, Outlook, iCloud or your own domain: anything that can forward mail can feed InboxShare.
Yours to run
One Cloudflare Worker with D1 and R2, deployed from GitHub in minutes. MIT licensed.
Households, small teams and self-hosters
Streaming at home
Family members signing in on a TV or a new phone read the verification code themselves instead of messaging you. Use within each service's household rules.
Small teams
Shared tool accounts that only support email codes: hand out a link instead of the mailbox password, and take it back when someone leaves.
A web UI for Email Routing
Email Routing can only forward. Point one address at InboxShare and you get a lightweight, read-only inbox viewer for it, with no mail server behind it.
A verification code is a key. We treat it like one.
Share links only with people you trust, keep sensitive filtering on, and revoke access when it is no longer needed.
32-character random keys, with optional expiry and instant revocation.
no-store, noindex and a strict Content-Security-Policy on every page. No third-party scripts or fonts.
Email HTML is sanitized in the browser and rendered in a sandboxed iframe with its own policy.
Mail and attachments are deleted automatically after the retention period, 30 days by default.
Questions
Does this bypass Netflix's household check?
No. It only shows emails you choose to forward. Streaming services set their own sharing terms; use InboxShare within them.
Can viewers see my other mail?
Only mail delivered to the shared address appears, and your own filter decides what is forwarded there.
What does it cost?
Nothing beyond a domain on Cloudflare. The free tiers of Email Routing, Workers, D1 and R2 cover typical use.
Is my data stored by you?
No. You deploy InboxShare in your own Cloudflare account. We never see your mail.
Do I need a mail server, a VPS or port 25?
No. Cloudflare Email Routing receives the mail and an Email Worker processes it. There is no SMTP or IMAP server anywhere in the setup.
Can I use it as a web inbox for Cloudflare Email Routing?
Yes. Any address you route to the Worker becomes a read-only web page. It is a viewer, not a full mailbox: no sending, no folders, 30-day retention by default.
How do I forward only verification emails?
Create a filter that matches senders or subjects, for example from:netflix.com, and set it to forward to your InboxShare address. Outlook and iCloud offer the same rule-based forwarding.
Run your own shared inbox in minutes
Deploy to your Cloudflare account, point an address at the Worker, create a link.
$ git clone https://github.com/funcin/inboxshare $ cd inboxshare && pnpm install $ pnpm run deploy