Apple’s latest developer bulletin shifts the domain of its Sign‑in‑with‑Apple and Hide‑My‑Email aliases to @private.icloud.com. The move lets Apple block all relay addresses without touching regular iCloud mailboxes, a change that could pressure services to reject these emails similarly to disposable inboxes for users who rely on private email links today.

Before the switch, Hide‑My‑Email aliases used the @icloud.com domain, offering plausible deniability that made mass bans costly for Apple. Now, with the new subdomain, providers can refuse the addresses outright, treating them like temporary mailboxes. Existing iCloud+ subscribers still have a window to create up to thirty aliases per hour on the old domain before the policy takes effect tomorrow.

The change threatens to erode a key privacy feature that many users value. Developers who depend on secure, anonymous sign‑in flows must now adapt or risk losing users who rely on Hide My Email. Apple’s decision signals a shift toward stricter email verification, potentially tightening the balance between user anonymity and platform integrity for developers seeking seamless authentication within their applications today.