Oops! Apple’s ‘Hide My Email’ Feature Might Not Be So Secret After All

So, you thought you were being all clever and tech-savvy by using Apple’s ‘Hide My Email’ feature? You know, the one that promised to keep your real email address a secret while you surf the web like a digital ninja? Well, hold onto your iPhones, folks, because it turns out that this feature has a bit of a vulnerability that could expose your actual email address. Cue the dramatic music!

Apple’s “Hide My Email” is an iCloud+ feature that generates unique, random email aliases to forward messages to a user’s real inbox, protecting their primary address from services and advertisers. However, the feature’s anonymity is compromised by two key factors: Apple plans to switch new aliases to the identifiable @private.icloud.com domain (instead of standard @icloud.com), allowing websites to block them, and the service does not provide legal anonymity, as Apple complies with subpoenas to reveal user data to law enforcement.

For those of you who might not be familiar, ‘Hide My Email’ is part of Apple’s iCloud+ subscription service. It allows users to create a random email address that forwards messages to their actual inbox. The idea is that you can sign up for services without giving away your personal information. Sounds great, right? Sign me up!

But here’s the kicker: a recent discovery has shown that this feature isn’t as foolproof as we once thought. According to reports, a vulnerability exists that could potentially reveal users’ real email addresses to the very people they were trying to hide them from. You know, the ones that you were hoping wouldn’t spam you with their latest newsletter or, worse, sell your info to the highest bidder.

Imagine you’re at a party (the social kind, not the kind where you’re sitting alone in your pajamas binge-watching Netflix) and you meet someone who seems interesting. You give them your ‘Hide My Email’ address, thinking you’re being all mysterious and cool. Then, a few days later, you get an email that says, “Hey, it’s me! From the party!” But wait! How did they find out your real email? Surprise! Your secret identity has been compromised.

Now, before you start throwing your devices out the window in frustration, let’s take a moment to unpack this a bit. Apple is aware of the issue, and they’ve stated that they’re working on a fix. So, there’s hope yet! In the meantime, it might be wise to rethink how you use this feature. Maybe save it for less sensitive situations, like signing up for a new online game or that subscription box service you’ve been eyeing (you know, the one that delivers snacks you’ll probably eat in one sitting).

And let’s be honest here: if you’re using ‘Hide My Email’ to dodge spam, you might want to consider a different approach altogether. Like, I don’t know, just using a spam filter? Or creating a completely separate email account for signing up for things you know will send you endless promotional emails?

In conclusion, while Apple’s ‘Hide My Email’ feature is still a nifty tool for maintaining some level of privacy online, it’s not without its flaws. So, keep your eyes peeled for updates from Apple, and maybe take a little extra care when sharing your email address. After all, the last thing you want is to end up on a mailing list for cat memes or worse, an endless stream of emails from that guy from the party.

Stay safe out there, folks, and remember: not all heroes wear capes, but some definitely should wear better email security!


Inspired by: “Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses” (r/technology)