Apple Reverses Hide My Email Domain Change, Keeps icloud.com

Apple Reverses Hide My Email Domain Change, But Sign in with Apple Still Moves

In a notable pivot, Apple has announced that iCloud+ Hide My Email addresses will remain on the icloud.com domain, reversing a decision made earlier this year to unify the service under a new private.icloud.com domain. The reversal follows significant community backlash, which highlighted how the change would have made it easier for websites to block the privacy feature. However, the company is still proceeding with a domain shift for Sign in with Apple, which will move to private.icloud.com later this year.

The update, posted on Apple's developer news page on August 24, 2026, states: "After further consideration and reviewing community feedback, iCloud+ Hide My Email addresses will remain on icloud.com." This marks a direct response to concerns raised by users and privacy advocates who pointed out that a dedicated domain like private.icloud.com could be easily blocklisted by services, undermining the core purpose of Hide My Email—to protect user privacy when signing up for online accounts.

Why the Reversal Matters for Privacy

Hide My Email is a key feature of iCloud+ subscriptions, allowing users to generate unique, random email addresses that forward messages to their personal inboxes. Since these addresses share the icloud.com domain with regular iCloud Mail accounts, websites cannot block them at the domain level without also blocking legitimate iCloud users. This is a crucial privacy advantage that would have been lost if Apple had moved to a separate, easily identifiable domain.

The June announcement proposed unifying both Hide My Email and Sign in with Apple under private.icloud.com. While existing addresses would have continued to work, new addresses would have been issued on the new domain. This raised alarm among users who rely on Hide My Email to avoid spam and data collection, as a dedicated domain would make it trivial for platforms to reject signups from privacy-conscious users.

Sign in with Apple Still Transitioning

Despite the reversal for Hide My Email, Sign in with Apple is still on track to change domains. Starting later this year, new Sign in with Apple addresses—previously issued on privaterelay.appleid.com—will be issued on private.icloud.com. Existing addresses on the old domain will continue to function and forward mail without interruption, ensuring a smooth transition for users and developers alike.

This distinction is important. Sign in with Apple is a federated login service that also provides a privacy-preserving email relay. Unlike Hide My Email, which is a standalone feature, Sign in with Apple is integrated into authentication flows. The domain change for Sign in with Apple was less controversial, as the service's primary function is identity verification, not long-term email use. Still, developers will need to update their systems to accept the new domain.

What Developers Need to Do

Apple has issued clear guidance for developers. Those with apps or websites that use Sign in with Apple must ensure their account systems, email validation logic, and allowlists accept addresses on private.icloud.com in addition to the existing privaterelay.appleid.com. This is a critical step to prevent legitimate users from being locked out of services after the transition.

Apple recommends that developers test their systems with both domains and update any hardcoded domain checks. The company has provided documentation on communicating using the Private Email Relay Service, which explains how the relay works and what developers need to consider. Failure to update could result in users being unable to sign in or receive emails, which would be a significant user experience issue.

Timeline and Impact

The timeline for the Sign in with Apple domain change is "later this year," though Apple has not specified an exact date. The reversal for Hide My Email is effective immediately, meaning no changes are required for that feature. Existing Hide My Email addresses will continue to work as before, and new ones will still be generated on icloud.com.

This decision highlights Apple's responsiveness to community feedback, but it also underscores the delicate balance between privacy and usability. By keeping Hide My Email on icloud.com, Apple preserves the feature's effectiveness. At the same time, moving Sign in with Apple to a dedicated domain allows the company to streamline its infrastructure without compromising the core privacy protections that users expect.

For users, the practical impact is minimal. Those who rely on Hide My Email can continue using it without worrying about domain-based blocks. For developers, the main action item is updating email validation logic to support private.icloud.com for Sign in with Apple. As the transition approaches, Apple is likely to provide more detailed guidance and timelines.

Looking Ahead

Apple's reversal is a win for privacy advocates, but it also raises questions about the future of its email relay services. The company seems committed to maintaining the integrity of Hide My Email, but the decision to move Sign in with Apple suggests that not all services are treated equally. It's possible that Apple may revisit the domain strategy for other features in the future, but for now, the status quo remains for Hide My Email.

Developers and users should stay informed about the upcoming changes. Apple's developer documentation is the best source for technical details, and the company's news page will provide updates as the transition date approaches. In the meantime, the message is clear: Hide My Email stays on icloud.com, but Sign in with Apple is moving to private.icloud.com. Plan accordingly.