I built myself a ‘new masked email’ workflow. I copy and paste the site url into the form and click create. It generates my random masked email, generates a strong password, prompts me for my keepass password then saves all the things and copies the generated password to the clipboard. Here are some screenshots. I did a test entry to demonstrate for you.

Dark-themed web form titled “New masked email”. The intro line reads “Mint a per-site alias at [redacted domain] and save a login to KeePass.” Below it are a “Domain or URL” field with the placeholder “amazon.com · https://infosec.pub/”, a “KeePass master password” field with the placeholder “used once, never stored” and the note “Used in memory to open the synced database, then discarded. Never written to disk or logs.”, and a teal “Generate & save” button.

New form.

The same form after a test run for google.com. A green check reads “Saved to KeePass · Logins / google.com (qvkk8729)”. Below it are the generated email “google.qvkk8729@[redacted domain]” and a random 30-character password, each with a copy button, the URL “https://google.com/”, and a “Mint another” link.

I type in my KeePass password and I get this screen while the entry is automatically saved to KeePass.

This all runs on an Intel NUC in my office and is accessible over my local network.