Apple reverses planned Hide My Email domain change
Apple has reversed its previously announced plan to move iCloud+ Hide My Email addresses to a new domain, the company announced today. The decision comes after the initial change, revealed just two months ago, sparked backlash from users and, according to one report, objections from Apple's own employees.
In mid-June, Apple announced that Sign in with Apple and Hide My Email would both adopt a new shared email domain, private.icloud.com. Sign in with Apple currently uses privaterelay.appleid.com, while Hide My Email addresses use the same icloud.com domain as regular iCloud email accounts.
The earlier change was controversial because Hide My Email aliases are typically indistinguishable from regular iCloud email addresses. By moving them to a separate domain, websites would be able to block the privacy feature at the domain level without risking blocking regular iCloud users. TechCrunch reported that users criticized the move on social media and Reddit threads, calling it a threat to the service's effectiveness.
Now, Apple says iCloud+ Hide My Email addresses will remain on icloud.com. In a developer update, the company said: "After further consideration and reviewing community feedback, iCloud+ Hide My Email addresses will remain on icloud.com." The statement did not elaborate on the reason for the reversal.
However, Daring Fireball's John Gruber, who first reported the about-face, said that Apple employees had objected to the change. TechCrunch noted that Apple did not give a reason for changing its decision.
Despite the reversal for Hide My Email, Apple will proceed with the planned change for Sign in with Apple. New addresses for that service, previously issued on privaterelay.appleid.com, will be issued on private.icloud.com starting later this year. Existing addresses on privaterelay.appleid.com will continue to work and forward mail to users without interruption.
Apple recommended that developers using Sign in with Apple ensure their account systems, email validation logic, and allowlists accept private.icloud.com alongside the existing privaterelay.appleid.com domain.
The announcements come amid ongoing debate about how to balance user privacy with platform security. While Apple's decision to keep Hide My Email on icloud.com preserves the feature's ability to blend in with regular email addresses, it also means Apple retains the capability to provide identifying information about masked email users to law enforcement, as TechCrunch noted.
Perspectives
Apple: The company frames its decision as a response to community feedback and further consideration, choosing to keep Hide My Email addresses on icloud.com while still moving forward with the new domain for Sign in with Apple.
Technical observers and users: The initial change was criticized as making websites' ability to block the privacy feature too easy, undermining the service's usefulness. Users and, reportedly, some Apple employees objected to this change.