Apple will unify the email domains used for its privacy-focused features—Sign in with Apple and iCloud+ Hide My Email—under a single, shared domain: private.icloud.com. Starting later this summer, all new addresses generated by these services will be issued exclusively on this new domain, replacing the legacy addresses previously associated with each service. According to official documentation from Apple, existing addresses on the older domains will continue to function without interruption, ensuring that users do not experience service outages or mail delivery failures during the transition.
Transitioning to the private.icloud.com Domain
The move represents a streamlining of the infrastructure Apple uses to facilitate its email relay services. Historically, Sign in with Apple utilized the privaterelay.appleid.com domain to mask user identity when authenticating with third-party applications. Simultaneously, iCloud+ Hide My Email, which allows users to generate unique, random email addresses for sign-ups, primarily relied on the icloud.com domain.
For the end user, the change is largely transparent. Apple has confirmed that mail forwarding for existing addresses will remain active. Users do not need to take any action to update their current accounts or manually migrate their existing masked email addresses. The change primarily impacts the backend architecture and the way developers and email service providers (ESPs) handle incoming traffic from Apple’s relay servers.
Technical Requirements for Developers and Email Providers
The transition requires specific adjustments from developers and email service providers to ensure continued compatibility. Developers who have implemented Sign in with Apple must verify that their account systems and email validation logic are configured to accept the new private.icloud.com domain. If a website or application currently employs an “allowlist” or a restricted list of accepted email domains, developers must update these filters to include the new domain alongside the existing privaterelay.appleid.com and icloud.com addresses.
Email service providers face a similar requirement. Those who utilize domain-based filtering, routing rules, or suppression lists that explicitly enumerate relay domains must update their configurations. Failure to include private.icloud.com in these filters could result in legitimate emails being blocked or incorrectly routed by automated systems. Apple has provided technical documentation to assist engineers in updating their systems to accommodate these changes before the summer rollout.
Understanding the Private Email Relay Service
The Private Email Relay Service is a core component of Apple’s privacy suite, designed to prevent websites and apps from harvesting real email addresses. When a user chooses to hide their email, the service creates a unique, randomized address that forwards messages to the user’s personal inbox. This architecture prevents companies from building persistent profiles based on a user’s primary email address.
By unifying these services under a single domain, Apple simplifies the technical management of these relay addresses. The transition is scheduled for later this summer, though Apple has not specified a precise date for the final switch.
Related reading