Apple is preparing to change how its Hide My Email privacy feature works, raising concerns that apps and websites may soon find it easier to identify and reject private email aliases.
Apple plans to move anonymously generated Hide My Email addresses to a new @private.icloud.com domain, a shift that could make private sign-ups more visible to online services. Apple will migrate Hide My Email and Sign in with Apple addresses to a dedicated subdomain, replacing the current use of @icloud.com and @privaterelay.appleid.com.
What Hide My Email Does
Hide My Email is designed to help users create online accounts without exposing their real email addresses.
TechCrunch explained that the iCloud+ feature generates anonymous email addresses that forward messages to a user’s actual inbox.
Cybernews similarly described the feature as a tool that lets users rely on a randomly generated alias instead of their real email address.
The privacy benefit comes from the way the aliases currently blend in. Hide My Email addresses have worked partly because they cannot be easily distinguished from regular Apple users with @icloud.com addresses. That design made it harder for apps and websites to block private aliases without also blocking ordinary iCloud email users.
Why the New Subdomain Matters
The proposed change may weaken that protection because the new domain creates a clearer signal. The move to @private.icloud.com could make it significantly easier for services to block Apple privacy aliases entirely. The change could make it easier for apps and websites to know that an address is private and prevent users from signing up.
Arseniy Shestakov, co-founder and CTO at Hack The Publisher, warned that the dedicated subdomain makes it much easier to ban aliases without affecting non-relay iCloud mailboxes. Shestakov also argued that some services may treat these addresses like temporary email accounts and refuse them.
Existing Addresses Will Still Work
Apple is not cutting off current aliases. Existing Hide My Email addresses will continue to function and forward mail without interruption.
However, the change still creates work for developers and email providers. Apple told app and email providers to update filtering so messages sent to customers using the feature continue to go through. That means the shift is not only a user-facing privacy issue but also an operational issue for services that handle Apple relay addresses.
Users React Before the Switch
The change has already triggered concern among privacy-focused users. Some users are rushing to generate aliases on the old domains before the migration takes effect. The announcement drew more than 500 points on Hacker News, showing that the update quickly became a topic of concern among technical users.
Several Apple users on Reddit criticized the domain change, saying it could make the service harder to use. Some users noticed that the service appears to be rate-limited, even as others discussed creating extra aliases before the change.
A Small Domain Change With Bigger Privacy Effects
The controversy shows how small technical changes can affect privacy in everyday sign-ups. Apple’s Hide My Email feature does not make users invisible, but it gives them a practical way to reduce spam, limit tracking, and avoid giving every website their real inbox.
The problem is that privacy tools only work when services cannot easily single them out. If @private.icloud.com becomes an obvious label for masked addresses, some websites may decide that anonymous sign-ups are not allowed. That would not break Hide My Email entirely, but it could make the feature less effective in the places where users need it most.
For Apple, the challenge is to explain why the change is necessary while preserving the trust built around Hide My Email. For users, the concern is simpler: a privacy feature that becomes easier to detect may also become easier to block.
