Apple has reversed course on a planned change to Hide My Email, preserving one of iCloud+’s better-known privacy tools after users argued that the update would have made it easier for websites to block masked addresses during sign-up.
Apple keeps Hide My Email on @icloud.com
Hide My Email is a feature for paying iCloud+ subscribers that creates unique, disposable email addresses users can hand to websites instead of sharing their real inboxes. Messages sent to those aliases still arrive in a user’s regular inbox, giving people a way to limit exposure of their personal email address while continuing to receive site confirmations, newsletters, and account notices.
Earlier this year, Apple said it would move users to the @private.icloud.com domain. That change drew criticism because it appeared to make the addresses stand out as generated aliases, potentially allowing websites to reject them during account creation or other sign-up flows. Users on social media and in Reddit threads argued that such a move would undermine the main privacy benefit of the feature.
Apple confirmed on Monday that Hide My Email addresses “will remain” on @icloud.com, reversing its earlier plan to shift them to @private.icloud.com. The company did not explain why it changed direction.
Why the change mattered to users
At a practical level, Hide My Email works by letting people create a randomized Apple-managed address that forwards messages to their normal inbox. The idea is simple: instead of giving a company a personally identifying email address, a user can provide a disposable alias that can be turned off later if spam starts arriving or if they want to stop contact from that service.
The controversy centered on whether the proposed @private.icloud.com domain would have made those aliases visibly different from standard Apple email addresses. Critics said that websites could treat them as obviously masked or temporary, which could lead to extra friction at sign-up or even outright rejection. By keeping the addresses on @icloud.com, Apple preserves the appearance of a regular Apple email address, which users said was the whole point of the privacy feature.
That distinction matters because privacy tools often depend on blending into normal behavior. If a service can be easily identified as a privacy workaround, companies can build rules around it. For users, that can mean being forced to hand over a real address anyway, or losing the convenience of a simple alias that works across websites.
Apple did not explain the reversal
Apple did not provide a reason for walking back the planned move. However, Daring Fireball’s John Gruber, who first reported the about-face, said Apple employees had objected to the change all along. The source material does not include further detail on those internal concerns, but the update suggests the company may have concluded that the original plan would have weakened the feature’s usefulness more than it helped.
The timing also places the reversal in the context of broader scrutiny of Apple’s privacy branding. Apple has often positioned itself as a company that offers more user control over data and identity than many of its competitors. A change that appeared to make a privacy feature easier to detect and block would have cut against that message, even if the technical underpinnings of the tool remained intact.
Hide My Email still has limits
Even with this reversal, Hide My Email is not a guarantee of anonymity. The feature helps conceal a user’s real email address from websites, but the source material notes that Apple can still tell law enforcement who is behind a masked email address. In other words, the service hides the address from the site receiving the email, but it does not make the user invisible to Apple’s own systems.
That is an important nuance for readers who may assume disposable email aliases provide complete privacy. They do not. They are best understood as a practical layer of compartmentalization: useful for reducing spam, limiting data sharing, and keeping a personal inbox from becoming the universal login identifier for every service a person uses.
The feature can also be useful in everyday situations where users do not want a retailer, app, or newsletter sender to have their main address. Since the messages still forward to the normal inbox, the user gets the convenience of a working contact point without exposing their preferred email identity everywhere.
A separate bug exposed real addresses
The reversal comes after another recent issue involving Hide My Email. Earlier this year, 404 Media reported that a bug in the feature revealed people’s real email addresses. According to the source material, Apple fixed the bug more than a year after it was first made aware of the problem. The flaw involved emails that were rejected as spam, which could leak the masked users’ actual email addresses.
That report is relevant because it underscores how privacy tools can fail in subtle ways. Even features built to hide personal information can expose data if the underlying routing or error handling is flawed. For users, that means privacy services should be treated as helpful protections, not absolute guarantees.
Apple’s decision to preserve the @icloud.com format may help reassure users that the company is listening to criticism when a change appears likely to reduce the effectiveness of a privacy feature. It does not, however, erase the need for continued scrutiny of how these tools behave in practice.
What to watch next
- User reception: Apple’s reversal is likely to be welcomed by iCloud+ subscribers who rely on Hide My Email for sign-ups and account management.
- Website filtering: The change should reduce the chance that sites can spot and block alias addresses simply because of their domain.
- Privacy expectations: Users still need to remember that Hide My Email is a forwarding tool, not a guarantee of anonymity.
- Future updates: Apple has not said whether it will make any further changes to the feature’s behavior or presentation.
For now, the important takeaway is straightforward: Apple’s Hide My Email feature will stay tied to @icloud.com, not the more conspicuous @private.icloud.com domain. That keeps the service closer to how users understood it in the first place, and avoids a change many believed would have weakened one of iCloud+’s most useful privacy options.
Source: Original report
Was this helpful?
Explore more: More Big Tech & Platforms Tech News Blog
Last Modified: August 26, 2026 at 1:52 am
0 views
