Hide My Email, a feature designed to protect users' email addresses from unwanted solicitations and data breaches, has a major security flaw that can expose the email addresses behind its aliases. The vulnerability, which was discovered by security experts, allows almost anyone to tap into this flaw and learn the real email address behind any Hide My Email proxy.
The issue arises when users create an alias for their email address through Hide My Email. The feature appears to work by generating a new email address that looks like a typical iCloud address, such as sizzle_lax_3y@icloud.com. However, this alias can be compromised through "free, publicly accessible people-search sites," which can figure out the user's real email address. In one test, a security expert was able to discover the real email address behind an alias in just five minutes.
Apple has been aware of the flaw since June 2025, but despite multiple contacts from security experts, the company has yet to patch the issue. In fact, Apple has recently announced plans to change the domain of Hide My Email aliases from @icloud.com to @private.icloud.com, which would significantly reduce the effectiveness of the feature. This change would make it clear that the email address is an alias, potentially blocking users from creating accounts.
The timing of this revelation is particularly problematic, as Apple was already facing criticism for changing Hide My Email for the worse. The company's failure to address the security flaw and its planned changes to the feature have left many users questioning the effectiveness of Hide My Email. As one security expert noted, it's not enough for Apple to simply acknowledge the issue and promise to patch it – the company needs to take immediate action to address the vulnerability.
Users who rely on Hide My Email for their privacy and security may want to consider alternative solutions until the issue is resolved. In the meantime, Apple needs to take a hard look at its plans to change the feature and prioritize user security above all else.
