Had this exact experience happen to one of my coworkers. We started embedding a secondary “password” in some of our email addresses, by leveraging googles user

Had this exact experience happen to one of my coworkers. We started embedding a secondary “password” in some of our email addresses, by leveraging googles username+tag feature. So something like johndoe@gmail.com becomes johndoe+1bayjdh1x91nj12e@gmail.com One less piece of guessable info.