Hide My Email has a year-old issue that still hasn’t been fixed


A vulnerability was discovered in Apple’s “Hide My Email” that allows an attacker to work out your real email address. It’s not been fixed for over a year.

Hide My Email has been a great help for Apple users who need to communicate with services and companies, but don’t want to provide their real email address. Spam, as ever, continues to be a problem requiring solutions like this.

However, while it is capable of thwarting your typical spammer or marketing-happy small business, it’s not foolproof. As a report from 404Media reveals, it’s a feature that can be beaten.

The exact nature of the vulnerability hasn’t been detailed, due to the lack of action by Apple to fix it. Testing on Monday by the report verified that it is still a problem.

EasyOptOuts co-founder Tyler Murphy discovered an issue with Hide My Email in June 2025, and responsibly reported it to Apple as well as the publication. Twelve months later, and the problem still exists.

Murphy explains that the issue was reported and instructions to replicate it where provided to Apple. He doesn’t know why it hasn’t been fixed, but also didn’t feel comfortable waiting to discuss the problem any longer.

“Hide My Email users deserve to know that it may be possible for attackers to discover their hidden email addresses,” he declared.

There are free websites accessible to the public that link email addresses to other personal details, he adds. Anyone relying on Hide My Email may find themselves at risk of being identified on them.

Under Investigation

While Apple hasn’t yet fixed the hole in Hide My Email, it is certainly aware of the problem. One month after Murphy contacted Apple, it confirmed it was looking into the issue.

In March 2026, Apple said it had “addressed the reported issue in a recent system change.” However, Murphy discovered the hole hadn’t been plugged.

Again, more information was provided to Apple, which replied a month later saying it was doing more checks.

Apple updated Murphy in May, insisting it was “still investigating” the problem. It also wished for Murphy to hold off disclosing the problem until after the investigation concluded.

Murphy wrote back, proposing that Apple could stop selling access to Hide My Email until a fix was available, as a means to limit the number of users at risk.

By the end of May, Apple said that it would be addressed in a security update “expected in the coming weeks.”

After being alerted by Murphy, the publication contacted Apple multiple times, but did not get a response.

Questionable changes

While it is unknown exactly when and how the vulnerability will be fixed, it may end up accompanying other changes to the service. These are changes that have questionable value to its users.

A June 15 developer notice warned that the email domains used for Sign In with Apple and Hide My Email will be updated in the future. The intention is for email providers and developers to update their systems in advance of the changeover.

The changes basically mean that newly-generated relay email addresses for Hide My Email will change from the domain iCloud.com to private.icloud.com. Sign In With Apple currently creates relay addresses ending with privaterelay.appleid.com, and will change to the private.icloud.com version.

The problem here is that there’s nothing stopping a website or newsletters from blocking email addresses using private.icloud.com, forcing them to sign up with another legitimate account.

For Hide My Email at least, the change removes the source ambiguity protecting the service and its users.



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


Microsoft has spent the last several years pushing Copilot and new user interface designs, which has meant that several great features included with Windows don’t get the recognition that they deserve. These are some of my favorites that will run on any Windows 11-compatible PC.

Clipboard history remembers everything you copy

Win+V replaces one of the oldest frustrations in computing

Windows’s default clipboard has been a source of minor but constant annoyance: it holds exactly one thing. If you copy something new, the previous item is wiped out. It is enough of a problem that multiple third-party apps were created to address the shortcoming.

Now, Windows has Clipboard History built in, though it isn’t enabled by default. To turn it on, press Windows+i, then navigate to System > Clipboard, and click the toggle next to Clipboard history.

Once it is enabled, you can press Win+V to view up to 25 items in your clipboard history, including text, images, and links.

If you have specific pieces of information you use daily—like an email signature, a common code snippet, or a home address—you should pin up some of those items. Pinned items persist between system reboots and clipboard history clears, which means you never have to hunt to find something when you need it.

You can even enable sync in the Clipboard settings, allowing your copied text to follow you between different PCs signed in to the same Microsoft account. Once you get into the habit of using Win+V, the standard copy-paste function will feel useless by comparison.

Voice typing actually works now

Win+H lets you write with your voice

Notepad with Windows Voice Typing popup visible.

Windows dictation software has a reputation for being clunky and difficult to use, but that isn’t the case anymore. Thanks to the improvements in AI that we’ve seen since 2024, voice typing accuracy has improved significantly, especially for technical vocabulary. You don’t have to spend your time manually fixing formatting either. The tool supports punctuation commands like “period,” “new line,” and “question mark,” which prevents your text from turning into a rambling mess.

To use voice typing, press Windows+H anywhere there is a text field.

While it isn’t a full replacement for high-end professional software, it is free, built-in, and more than good enough for long-form writing, taking down a sudden idea, or writing quick messages when your hands are full.

Snap layouts make window management effortless

Hover over the maximize button and pick a layout

Notepad with the Windows Snap Layout window visible.

You can manually drag windows to the edges of your screen to split your display up, but you’re doing more work than is necessary in most cases. Windows’ Snap Layouts allow you to instantly arrange your Windows into predefined halves, thirds, or quarters. Just hover over the maximize button on any window or press Win+Z.

One of the most practical aspects of this system is the Snap Group. If you snap a browser and a document side-by-side, Windows remembers them as a pair. When you Alt+Tab, you can bring the entire group back together.

Live captions transcribe any audio on your device

Real-time subtitles for anything you’re watching

You can enable real-time subtitles for any audio playing through your speakers by going to Settings > Accessibility > Captions, or by pressing Win+Ctrl+L. The audio is processed locally on your device; nothing is sent to the cloud, which is critical if you’re privacy conscious or if whatever you’re captioning demands confidentiality.

I’ve mostly taken to using it when it is too hot to wear my headphones. I can just toggle it on and keep watching without disrupting anyone around me.

There are some hardware requirements you need to meet. Basic same-language captioning works on any Windows 11 PC running 22H2 and up, but if you want real-time translation, you will need Copilot+ hardware with an NPU and at least Windows 11 24H2.


The NZXT Capsule Elite USB microphone sitting on a desk.


Windows 11’s voice typing convinced me to skip Wispr Flow and other premium apps

Windows lets me turn my rambling thoughts into notes without typing anything.

Dynamic Lock locks your PC when you walk away

Pair your phone via Bluetooth and your computer can lock itself automatically

I can’t count how many times I’ve stepped away from my PC only to think, “Dang, I forgot to lock my PC.”

Fortunately, Windows has an easy way to handle that automatically by pairing your phone with your PC. When your phone gets out of range (about 20 feet in my house, though your wall materials and layout will affect that), your computer will automatically lock after about 30 seconds. There is no need to install a separate app on your phone, the setup just uses the Bluetooth connection itself. While the 30-second delay means it isn’t a guarantee no one can access my PC, it does mean it won’t remain unlocked if I step away for a long time.

I especially like this feature when I’m working on my laptop in public.

You can enable Dynamic Lock by navigating to Settings > Bluetooth & devices and pairing your phone, then enabling Dynamic Lock in Settings > Accounts > Sign-in options.


Microsoft includes tons of great tools if you dig for them

These tools aren’t alone either. There are tons of practical tools buried in Windows, unappreciated and underutilized.

Each of these tools takes less than a minute to enable, but they can make a significant difference in your day-to-day workflow. It is worth the small investment of time to find them and set them up.

If you’re looking for even more advanced customization options, I’d recommend checking out Microsoft PowerToys. It gives you a huge range of fantastic tools that make Windows much more pleasant to use.



Source link