A recent report says Apple’s Hide My Email feature may be vulnerable to a flaw that can expose a user’s real email address behind the random alias. The issue appears to affect accounts created through Apple’s email-hiding system and could undermine one of its core privacy promises.
According to the report, the vulnerability was first disclosed to Apple in June 2025but the problem is said to remain unresolved more than a year later. Researchers reportedly tested the issue and found it could work on the Hide My Email addresses they checked.
The report also says Apple told the researcher at one point that it had fixed the issue through a system change, but later testing allegedly showed the flaw still existed. That is why the matter is being described as a lingering security concern rather than a closed bug.
Hide My Email is meant to protect users from spam, tracking and unwanted exposure of their personal inbox. If a real email address can be uncovered, it could put users at risk of phishing, impersonation or unwanted targeting.
The concern is especially serious because the feature is used to keep contact details private when signing up for apps and websites. A weakness here affects not just convenience, but basic account privacy.
The report suggests Apple still has not fully fixed the issue, though it may be working on a future security update. Until that happens, users relying on Hide My Email should be aware that the alias may not be as private as expected.
