Apple Will Segregate Anonymous iCloud Addresses, Raising New Privacy Concerns

Apple plans to start issuing anonymized email aliases under a distinct domain, a move that could make it simpler for websites and apps to detect—and block—users who sign up with masked addresses. In a developer advisory released this week, the company said addresses created by its Hide My Email service will begin using the @private.icloud.com suffix in the coming weeks.

Hide My Email, part of iCloud+, currently hands out temporary email aliases that forward messages to a person’s main inbox. Because those aliases have used the same @icloud.com ending as ordinary Apple accounts, services could not easily tell which addresses were forwarded aliases and which belonged to full account holders. Separating aliases onto a clear private subdomain would change that balance.

Apple told developers the existing aliases will keep working and messages will continue to be forwarded to users’ real mailboxes. The company also warned that email platforms and app operators may need to change their filters so messages to people who rely on the feature aren’t mistakenly rejected once the new addresses appear.

The change has prompted frustration among some customers online, with a number of users saying the new domain will make the tool less useful for maintaining anonymity. Apple did not answer a request for comment about the move or to explain why the domain is being split out.

The update arrives against a backdrop of increased law-enforcement pressure on tech companies. Media reports earlier this year said Apple disclosed identifying information tied to an alias used in an allegedly threatening message, and federal authorities have in past months pushed companies to turn over account details in investigations of political critics and others.

Privacy experts say the adjustment could have real consequences for people who depend on address masking. “This will allow services to treat forwarded aliases differently, and some will simply refuse them,” said Alicia Moreno, a privacy researcher who consults with nonprofits. “That could make it harder for journalists, activists and everyday users who don’t want to give out their primary email.” Security consultant Rajiv Singh added that users who want to avoid being flagged may need to look at third-party forwarding tools or separate inboxes to preserve anonymity.

For now, the practical effect will depend on how quickly sites and apps adopt filters targeting the @private.icloud.com domain. Consumers and organizations that rely on email masking will be watching for further clarification from Apple and changes in how online services accept new accounts.