{"id":20200,"date":"2026-07-01T21:45:47","date_gmt":"2026-07-01T20:45:47","guid":{"rendered":"https:\/\/innovatenews.site\/index.php\/2026\/07\/01\/apples-hide-my-email-feature-has-an-unfixed-bug-that-leaves-email-addresses-exposed\/"},"modified":"2026-07-01T21:45:50","modified_gmt":"2026-07-01T20:45:50","slug":"apples-hide-my-email-feature-has-an-unfixed-bug-that-leaves-email-addresses-exposed","status":"publish","type":"post","link":"https:\/\/innovatenews.site\/index.php\/2026\/07\/01\/apples-hide-my-email-feature-has-an-unfixed-bug-that-leaves-email-addresses-exposed\/","title":{"rendered":"Apple\u2019s Hide My Email feature has an unfixed bug that leaves email addresses exposed"},"content":{"rendered":"
\n

The topic Apple\u2019s Hide My Email feature has an unfixed bug that leaves email addresses exposed<\/strong> is currently the subject of lively discussion \u2014 readers and analysts are keeping a close eye on developments.<\/p>\n

This is taking place in a dynamic environment: companies\u2019 decisions and competitors\u2019 reactions can quickly change the picture.<\/p>\n

Apple has been selling Hide My Email to keep your real email address hidden, but it has a vulnerability that does the exact opposite. The worst part is that the company has known about it for a year.<\/p>\n

Hide My Email, part of Apple\u2019s paid iCloud+ subscription, lets users generate anonymous email addresses for signing up to a website, so that their personal or work email remains free of promotional emails and spam.<\/p>\n

\"\"<\/figure>\n

However, the team at 404 Media, along with a security researcher, has now confirmed that the feature has a bug that links those anonymous addresses back to your real Apple ID email.<\/p>\n

Tyler Murphy, co-founder of privacy tool EasyOptOuts, reported the vulnerability to Apple in June 2025. Apple acknowledged it a month later and was looking into the issue.<\/p>\n

Then, in March 2026, Apple told Murphy the problem had been addressed in an update, which usually means that it has been fixed. To verify, Murphy tested it again and found the issue was still present, providing Apple with more information.<\/p>\n

As recently as May 2026, Apple told Murphy it was still investigating and asked him not to go public with the information. The company also said a fix was expected \u201cin the coming weeks,\u201d which still hasn\u2019t arrived.<\/p>\n

To verify independently, 404 Media verified the issue this week by generating a new Hide My Email address and providing it to Murphy. About five minutes later, Murphy returned the real email address associated with that Apple account.<\/p>\n

\"\"<\/figure>\n

In Murphy\u2019s own limited tests, 100% of Hide My Email addresses were exploitable.<\/p>\n

Since people-search websites can link an email address to a name, location, and other personal details, anyone using Hide My Email for safety could be at risk.<\/p>\n

The outlet has not published the technical details of the exploit since it remains active.<\/p>\n

Hide My Email is also set to become much less effective, but for a totally different reason. A separate report from June 2026 revealed Apple\u2019s plans to shift generated email addresses from the icloud.com domain to private.icloud.com.<\/p>\n

This would make it easier for websites and services to identify and block them, effectively reducing its usefulness for avoiding spam and unwanted tracking.<\/p>\n