Apple shifts Hide My Email to subdomain
Apple has announced a transition for its privacy-focused 'Sign in with Apple' and 'iCloud+ Hide My Email' services, routing all new aliases through the new `@private.icloud.com` subdomain instead of the primary `@icloud.com` domain. While this isolates relay traffic for Apple, it undermines user privacy by allowing websites and services to easily identify and block all alias addresses en masse, treating them similarly to temporary or throwaway email accounts.
Apple is prioritizing subdomain isolation and developer convenience over the core privacy promise of iCloud+, effectively turning a premium privacy feature into an easily blockable temporary email tier.
* Banning @private.icloud.com is trivial for any service wishing to block burner accounts, whereas blocking @icloud.com previously carried the risk of blocking legitimate personal emails.
* Existing aliases generated on the main @icloud.com domain remain safe for now, leading to a scramble by power users to pre-generate addresses.
* This move shifts the power dynamic back to services that demand real user data, rendering the 'Hide My Email' feature far less useful for bypassing aggressive data-harvesting registration walls.
DISCOVERED
1h ago
2026-06-16
PUBLISHED
3h ago
2026-06-16
RELEVANCE
AUTHOR
SXX