Apple’s Hide My Email, the iCloud+ feature that lets you create email aliases, still appears to have a privacy flaw that could connect an alias back to a real address. Researcher Tyler Murphy reported it in June 2025, and more than a year later, the issue still hasn’t been fixed.
Apple has reportedly acknowledged the flaw. Beyond that, not much is public. The details are being withheld, so it’s still unclear how easy the bug is to exploit, whether it requires any user interaction, or how many people it could affect.
If you use Hide My Email for anything beyond filtering spam, pay attention.
A leaked alias can apparently be tied back to your identity through data brokers and people-search services. That matters a lot if the point is to avoid harassment, stalking, or doxxing.
And this isn’t some edge-case feature. Apple bundles Hide My Email with iCloud+, you can use it for sign-ups, and about 55% of iOS Mail users had it turned on in 2023. It’s useful, sure, but it shouldn’t be mistaken for real anonymity. Apple has also provided account-linked data in response to legal requests.
Hide My Email works through iCloud+ on Apple devices and on the web. New aliases are also expected to shift to @private.icloud.com, a change critics say could make those addresses easier to spot or block, so until Apple patches this, you may want to think twice about how much protection the feature really gives you.
Author: Chema Carvajal Sarabia
{
"de-DE": "Journalist, spezialisiert auf Technologie, Unterhaltung und Videospiele. Über das zu schreiben, was mich begeistert (Gadgets, Spiele und Filme), ermöglicht es mir, bei Verstand zu bleiben und mit einem Lächeln im Gesicht aufzuwachen, wenn der Wecker klingelt. PS: Das stimmt nicht 100% der Zeit.",
"en-US": "Journalist specialized in technology, entertainment and video games. Writing about what I'm passionate about (gadgets, games and movies) allows me to stay sane and wake up with a smile on my face when the alarm clock goes off. PS: this is not true 100% of the time.",
"es-ES": "Content Manager - Periodista especializado en tecnología, entretenimiento y videojuegos. Escribir sobre lo que me apasiona (cacharros, juegos y cine) me permite seguir cuerdo y despertarme con una sonrisa cuando suena el despertador. PD: esto no es cierto el 100 % de las veces.",
"fr-FR": "Journaliste spécialisé dans la technologie, le divertissement et les jeux vidéo. Écrire sur ce qui me passionne (gadgets, jeux et films) me permet de rester sain d'esprit et de me réveiller avec le sourire aux lèvres quand le réveil sonne. PS : cela n'est pas vrai 100 % du temps.",
"it-IT": "Giornalista specializzato in tecnologia, intrattenimento e videogiochi. Scrivere di ciò che mi appassiona (gadget, giochi e film) mi permette di mantenere la sanità mentale e di svegliarmi con un sorriso sul viso quando suona la sveglia. PS: questo non è vero al 100% del tempo.",
"ja-JP": "",
"nl-NL": "",
"pl-PL": "",
"pt-BR": "Jornalista especializado em tecnologia, entretenimento e videogames. Escrever sobre o que me apaixona (gadgets, jogos e filmes) me permite manter a sanidade e acordar com um sorriso no rosto quando o despertador toca. PS: isso não é verdade 100% do tempo.",
"social": {
"email": "chemacs91@gmail.com",
"facebook": "",
"twitter": "https://twitter.com/chematopetazo",
"linkedin": ""
}
}
View all posts by Chema Carvajal Sarabia
