All articles tagged with #hide my email
Apple has reversed its plan to move Hide My Email to a private.icloud.com domain and will keep Hide My Email addresses on icloud.com; Sign in with Apple will use private.icloud.com later this year, and developers should allow both domains.
A California Apple user filed a proposed class-action alleging Apple misled customers about Hide My Email’s privacy protections, citing a long-running flaw that could reveal real addresses behind aliases. Apple acknowledged reports of the issue and promised fixes, but researchers say the vulnerability remained exploitable in 2026. The plaintiff seeks class certification and a remedy to fix or clearly disclose limitations, with iCloud+ subscribers among those affected and potential damages cited at over $5 million.
A proposed class-action claims Apple's Hide My Email feature does not work as advertised and violates California consumer-protection and false-advertising laws; a security researcher reported the flaw in 2025, though no exploits are publicly known and details have not been released.
A vulnerability in Apple's Hide My Email feature could allow attackers to discover the real email addresses behind generated iCloud addresses. Reported by EasyOptOuts and independently confirmed by 404 Media, the flaw reportedly persisted for over a year after Apple was informed. Apple says it's investigating; the company had indicated it addressed the issue in March 2026, but tests reportedly show it remains exploitable. Apple is moving Hide My Email to the private.icloud.com domain, which could limit its usefulness until fixes are in place.
A vulnerability in Apple's Hide My Email, an iCloud+ feature that creates anonymous aliases, could reveal users’ real email addresses. 404 Media, with EasyOptOuts, verified the flaw by generating an alias and linking it to an Apple account in about five minutes. Apple reportedly knew about the issue for over a year and said fixes were applied in a system update, but the vulnerability persisted. The story also notes Apple’s shift to a new anonymized domain for these emails (such as @privaterelay.appleid.com / @private.icloud.com), a change critics say could make it easier for sites to block anonymous signups.
A security researcher claims Apple's Hide My Email feature can expose real email addresses; tests reportedly showed 100% of generated addresses could reveal the linked account. The researcher says he reported the flaw to Apple over a year ago and, despite Apple saying it was fixed in March, the issue persists, according to 404 Media verification. Apple has discussed moving Hide My Email to a private.icloud.com domain to mitigate the issue.
Security researchers warn that Apple’s Hide My Email has a flaw that could reveal users’ real email addresses; the issue has reportedly persisted for over a year, with 404 Media confirming exploitability but withholding precise details to prevent misuse.
Apple will unify the domains used by Sign in with Apple and iCloud+ Hide My Email by migrating to the private.icloud.com domain later this summer. Legacy domains will continue to work with mail forwarding; developers must update account systems and allowlists to accept the new domain, while regular users don’t need to take any action.
Apple will unify the email domains for Sign in with Apple and iCloud+ Hide My Email under a single shared domain, private.icloud.com. New addresses will be issued on this domain, while existing addresses on legacy domains will continue to work and forward mail. The rollout is planned for later this summer. Developers should update account systems, email validation, and allowlists to accept private.icloud.com, and email service providers should adjust domain-based filtering, suppression lists, and routing rules accordingly.