Cloaked Review 2026: One App for Aliases, Broker Removal, and $1M Insurance - But Read the Fine Print

A company just raised $375 million to protect your privacy. Investors include General Catalyst, Lux Capital, and, in a pairing that actually makes me cautiously optimistic, DuckDuckGo.

That company is Cloaked. And its pitch is ambitious: one app that gives you unlimited email aliases, disposable phone numbers, a password manager, data broker removal, dark web monitoring, AI-powered call screening, and a $1 million identity theft insurance policy.

I've spent the last week digging through Cloaked's security documentation, their SOC 2 Type II report, the actual AIG insurance terms, app store reviews, and every privacy forum thread I could find. The picture that emerged is more complicated than the marketing suggests.

Cloaked is genuinely innovative. It's also genuinely incomplete in ways that matter.

What Cloaked actually is (and what it isn't)

Founded in 2020 by brothers Arjun and Abhijay Bhatnagar (Forbes 30 Under 30, 2023), Cloaked started as an alias generator and evolved into what they call an "identity protection platform." Boston-based, 350,000+ users, and that massive $375 million Series B in March 2026 led by General Catalyst with participation from Liberty City Ventures and DuckDuckGo.

The core idea: every time you sign up for a service, you give it a unique, randomly generated Cloaked email and phone number instead of your real ones. If that service gets breached, leaks your info, or sells it to marketers, you burn the alias and create a new one. Your actual identity stays hidden.

That part works well. And with 10x user growth over the past year, clearly a lot of people agree.

It's everything Cloaked bolted on top of that core concept where things get complicated. The data broker removal is thin compared to dedicated tools. The password manager is basic. Several features are still in beta. And some of the most-marketed capabilities have real-world limitations that the sales page glosses over.

Pricing: no free tier, and the annual math

Let's get this out of the way because it affects everything else.

There is no free plan. You get a 14-day trial, and then you're paying. Here's what the plans cost:

• Individual (1 user): $12.49/month, or $9.99/month billed annually ($119.99/year)
• Couple (2 users): $19.99/month, or $14.99/month billed annually ($174.99/year)
• Family (4 users): $29.99/month, or $24.99/month billed annually ($299.99/year)

Every plan includes the full feature set. No tiered feature gates. That's refreshing compared to Privacy Bee's confusing three-tier structure where the base plan is deliberately crippled (something I covered in the Incogni vs Privacy Bee comparison).

But $120/year for an individual is not cheap. Incogni costs $96/year for dedicated broker removal. SimpleLogin is $30/year for email aliases. Bitwarden is $10/year for password management. You could build a DIY stack that covers most of what Cloaked does for less money. The question is whether the convenience of one app justifies the premium.

Email and phone aliases: the part that actually works

This is where Cloaked earns its reputation. Creating aliases is fast: tap a button, get a unique @cloaked email address and a US phone number. Forward emails to your real inbox. Receive texts and calls through the app. Reply from the alias, and the recipient never sees your real contact info.

Unlimited aliases on every plan. No caps.

I checked the privacy forums. The Techlore community generally agrees the alias system is solid. Privacy Guides users have raised concerns about VoIP detection (more on that in a minute), but the core email forwarding works reliably.

And here's the newer addition that actually matters: eSIM numbers. These are carrier-grade phone numbers locked to your device, not VoIP. They work with services that reject internet-based numbers. This directly addresses the single biggest complaint users have had since launch.

The VoIP problem nobody else will explain clearly

Here's what most reviews won't tell you.

Cloaked's standard phone aliases are VoIP numbers. Banks, financial apps, Uber, some government services, and plenty of others detect and reject VoIP numbers for SMS verification. Reddit's r/privacy is full of users who signed up for Cloaked expecting to use masked numbers everywhere, then found out their bank won't accept them.

This isn't a Cloaked bug. It's an industry-wide VoIP detection problem. Google Voice has the same issue. But Cloaked markets phone masking as a core feature without clearly flagging this limitation on their sales page.

The eSIM numbers fix this. But they're newer, and I couldn't find enough long-term user reports to confirm they work universally with every bank and service. If VoIP acceptance is critical for your use case, test during the 14-day trial before committing to annual billing.

Also worth stating plainly: Cloaked numbers cannot dial 911. If you're using a Cloaked number as your primary contact, make sure you have another way to reach emergency services.

Data broker removal: functional but thin

Cloaked scans 120+ data brokers, generates a personalized exposure report, and sends automated opt-out requests. The dashboard shows which brokers had your info and the removal status.

120+ brokers sounds decent until you compare it to the dedicated tools. Incogni covers 420+ brokers and backs that number with a Deloitte ISAE 3000 audit. DeleteMe covers 750+. If you read our data broker removal services roundup, you'll see how much the coverage numbers matter.

Cloaked's own website can't even settle on a number. Different pages claim 120+, 130+, and 140+ brokers. That inconsistency bothers me more than the actual count. If you're asking users to trust you with sensitive data, at least be precise about your own capabilities.

The removal process takes weeks. Records sometimes reappear. Both of these are normal for the industry. But if broker removal is your primary goal, you'll get more coverage for less money with Incogni ($96/year, 420+ brokers) or DeleteMe ($199/year, 750+ brokers).

What Cloaked offers that those tools don't: the broker removal is bundled with everything else. One subscription, one dashboard. For people who want "good enough" broker coverage combined with aliases and insurance, the convenience argument holds up.

Security: the audit trail is solid

I actually read the security documentation. Here's what Cloaked uses:

• ECC25519 for key exchange
• Xsalsa20-Poly1305 for authenticated encryption
• Argon2 for password hashing
• Zero-knowledge architecture: Cloaked can't access your stored data
• Per-user isolated databases with unique encryption keys

And the certifications back it up: SOC 2 Type II (completed), ISO 27001, ISO 27701, and PCI-DSS v4.0.1. That's a more complete compliance stack than most competitors in this space can show.

One limitation that's inherent to how aliases work: email and SMS forwarding can't be fully end-to-end encrypted. Your messages are encrypted at rest on Cloaked's servers and encrypted in transit, but the forwarding step means Cloaked's infrastructure processes the content. This is a protocol limitation, not a design flaw. But if you need true E2EE email, Proton Mail or Tuta are the answer, not an alias service.

The $1M insurance policy: real, but narrow

Underwritten by AIG. Covers up to $1 million in reimbursement for identity theft losses: legal fees, lost wages, dependent care costs. Includes 24/7 access to human resolution specialists who'll contact banks, freeze reports, and work through the recovery process with you.

Sounds great. Here's the fine print:

• US residents only
• Not active during the free trial. Paid subscribers only
• It's a reimbursement policy, not a payout. You prove losses first, then get compensated
• Cannot be purchased separately from the Cloaked subscription

For most people, the insurance is a safety net you'll probably never use. But if you do experience identity theft, having AIG-backed coverage and a dedicated resolution team is genuinely valuable. Most data removal tools don't include anything like this.

Password manager, dark web monitoring, and the beta features

Cloaked includes a built-in password manager with generation, autofill, and TOTP 2FA code storage. It works. But it's nowhere near as mature as 1Password or Bitwarden. No shared vaults, no Yubikey/hardware key support, no Firefox or Safari extension. If you already have a dedicated password manager, Cloaked's version won't tempt you to switch.

Dark web monitoring scans for your credentials on breach databases and dark web markets. Useful as part of the bundle, but nothing you can't get from Have I Been Pwned for free. Users on r/PrivacyGuides have pointed this out repeatedly.

Then there's the stuff that's still cooking: Cloaked Pay (virtual debit cards) is in beta with a waitlist. AI Defense (deepfake and AI scam protection) is listed as "New" but light on details. VPN integration exists but is also in beta. Some Reddit users signed up expecting virtual cards and found them inaccessible. If these beta features are part of your decision, wait until they're actually shipped.

Where you can actually use it

iOS app (4.5/5, ~5,500 ratings). Android app (ratings vary between 3.9 and 4.3 depending on the source). Browser extensions for Chrome, Brave, and Edge. Web dashboard at your.cloaked.app.

No Safari extension. No Firefox extension. Both are "on the roadmap." For a privacy company, not supporting the two browsers most favored by privacy-conscious users is an odd gap. If you're using one of the browsers we recommend for privacy, check compatibility before you subscribe.

Cloaked vs the alternatives

The real question isn't whether Cloaked works. It does. The question is whether one bundled app beats dedicated tools at each job.

The DIY stack costs roughly the same but gives you better broker coverage (Incogni's 420+ vs Cloaked's 120+), a more mature password manager (Bitwarden), and actual working virtual cards (Privacy.com). What you lose: the insurance policy, the convenience of one app, and the eSIM phone numbers.

If managing four separate accounts sounds exhausting, Cloaked's bundle makes sense. If you're the type who reads privacy forum threads (and if you've made it this far in this article, you probably are), the DIY approach gives you more control and better per-category coverage.

Who Cloaked is for (and who should skip it)

Good fit: People who sign up for lots of online services and want one tool to mask their identity everywhere. If you're tired of getting spam-called after giving your number to a delivery app, or you want a fresh email for every new account without managing multiple inboxes, Cloaked's alias system genuinely solves that problem. The insurance is a real bonus if you're in the US. Freelancers who give out contact info to dozens of clients will probably get the most daily use out of this.

Not a good fit: People whose primary concern is scrubbing existing data from broker databases. Cloaked's 120+ brokers is adequate but not competitive with dedicated removal tools. Also not ideal for users outside the US, since the insurance and broker removal are US-focused, and the phone aliases are US numbers.

And if you're considering Cloaked mainly for the beta features (virtual cards, VPN, AI Defense), wait. Don't pay for promises. Check back in six months when those features are actually stable and reviewable.

Final verdict

Cloaked is trying to be the privacy equivalent of a Swiss Army knife. And like a Swiss Army knife, every individual tool is worse than the dedicated version. The broker removal is thinner than Incogni's. The password manager is less capable than Bitwarden's. The VPN is still in beta. The virtual cards are behind a waitlist.

But here's what nobody else is doing: putting all of those tools, plus unlimited aliases and $1M insurance, into a single app with zero-knowledge encryption and a genuine compliance stack. That bundling has real value for people who want "reasonably good at everything" without managing a half-dozen separate subscriptions.

The $375 million in funding suggests Cloaked isn't going anywhere. The eSIM addition shows they're listening to user complaints. And the SOC 2 + ISO certifications show they're taking security seriously, not just marketing it.

Just go in with realistic expectations. Use the 14-day trial. Test whether your bank accepts Cloaked numbers. Check if your data actually appears in their broker scan. And don't pay for a year upfront until you've confirmed the features you need actually work for your specific situation.

If you're building a broader privacy setup, pair this with Proton VPN or another option from our solid VPN roundup, plus a proper authenticator app for your most important accounts. No single tool protects everything.