> For the complete documentation index, see [llms.txt](https://www.webhackingtips.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.webhackingtips.com/week-35-user-accounts.md).

# Week 35 - User Accounts

Have you ever been on an AppSec engagement that involved multiple levels of access (admin/merchant/user)? You could use a different email account for each level, OR you could just use one!\
&#x20;\
This is possible through Plus Addressing. All the below inboxes will send to the same email:\
&#x20;\
<test@website.com>\
<test+admin@website.com>\
<test+merchant@website.com>\
<test+user@website.com>\
&#x20;\
Any email sent to <username+whateveryoulike@domain.tld> is still sent to your account. I find this especially useful for:\
&#x20;\
-Testing Invite Features\
-Account Sign Ups\
-Account Blacklist Bypasses
