Apple to consolidate Sign in with Apple and Hide My Email under new private email domain

Apple has announced plans to unify the email domains used by Sign in with Apple and iCloud+ Hide My Email, introducing a new shared domain that will become the default for both privacy-focused services later this year.

According to a developer update published by Apple, newly generated email addresses for Sign in with Apple and Hide My Email will use the domain private.icloud.com. The change replaces the separate domains currently used by the two services and is intended to create a more consistent experience across Apple’s privacy features.

Today, Sign in with Apple generates relay addresses using the privaterelay.appleid.com domain, while Hide My Email creates addresses associated with icloud.com. Once the transition begins, both services will issue new addresses through the private.icloud.com domain. Existing email addresses will continue to function normally, and Apple said emails sent to legacy addresses will continue to be forwarded without interruption.

The update primarily affects developers, website operators, and email service providers that interact with Apple’s relay email system. Apple is advising developers to update account validation systems, allowlists, and email handling logic to recognize the new private.icloud.com domain alongside the existing domains. Email providers may also need to revise filtering, suppression, and routing rules to ensure compatibility.

Sign in with Apple allows users to create accounts on apps and websites without sharing their actual email address, instead generating a unique relay address that forwards messages to their inbox. Hide My Email, available through iCloud+, offers a similar capability by creating disposable email aliases that help users limit exposure of their personal email addresses.

For end users, Apple indicated that no action will be required. Existing accounts and email forwarding functionality will continue to operate as before, while future addresses created through either service will automatically adopt the new domain.