Apple is cleaning up one of its more confusing privacy features. Later this summer, the company will unify the email domains used by Sign in with Apple and iCloud+ Hide My Email under one shared domain: private.icloud.com.
The change means new private relay addresses created for both features will use the same domain. Sign in with Apple addresses, previously issued through privaterelay.appleid.com, will move to private.icloud.com. Hide My Email addresses, already tied to iCloud privacy tools, will also be issued from the same private.icloud.com domain going forward.
For users, this is mostly a simplification. Apple is not removing the privacy idea behind either feature. It is making the email addresses look more consistent across the places where users choose to hide their real inbox.
That matters because Apple now has several privacy layers tied to identity, email, subscriptions, iCloud+, app sign-ins, and web accounts. The more unified those tools feel, the easier they are to understand.
One Domain for Two Privacy Tools
Sign in with Apple and Hide My Email solve related problems, but they appear in different moments.
Sign in with Apple is used when a person creates or accesses an account in an app or on a website. Users can share their real email address or choose to hide it. When they hide it, Apple generates a private relay address that forwards messages to the user’s real inbox without revealing the real address to the app or service.
Hide My Email is part of iCloud+ and lets users create random email addresses for websites, newsletters, apps, forms, shopping accounts, and other services. These addresses also forward to the user’s chosen inbox, while the real address stays private.
Until now, the domain naming made the two systems feel more separate than they really are. Sign in with Apple used privaterelay.appleid.com, while Hide My Email used iCloud-related relay addresses. Moving both to private.icloud.com makes the purpose easier to read: this is a private iCloud relay address.
The function remains familiar. The label becomes cleaner.
Existing Addresses Will Keep Working
The domain change applies to new addresses generated after the transition. Existing private relay addresses are not being shut down as part of Apple’s announcement.
That distinction is useful for users who already rely on private relay addresses for app accounts, website logins, newsletters, shopping accounts, banking notifications, travel services, or support messages. A private relay address may already be connected to an account, password manager entry, receipt history, subscription, or app profile. Breaking those addresses would create account problems, so Apple’s announcement focuses on new address generation.
Users should not rush to replace older addresses. A working Sign in with Apple or Hide My Email address can stay in place unless the user has a separate reason to change it.
New addresses created later this summer will simply follow Apple’s newer naming approach.
Why Apple Is Making the Change
The new private.icloud.com domain makes Apple’s privacy system easier to explain.
A user seeing privaterelay.appleid.com may not immediately understand whether the address belongs to iCloud, Apple Account, Sign in with Apple, or a specific app sign-in flow. The private.icloud.com domain is more readable. It connects the address to iCloud privacy and makes the purpose more obvious.
It also gives Apple a single public-facing domain for private email relay addresses. That can help users recognize Apple-generated aliases and help developers update support materials, account flows, allowlists, and email systems.
The change fits Apple’s services direction. iCloud+ is no longer only extra storage. It includes privacy features such as Hide My Email, iCloud Private Relay, custom email domains, and HomeKit Secure Video. Moving private relay addresses under private.icloud.com makes iCloud feel like the home for Apple’s email privacy layer.
Sign in with Apple still remains its own authentication tool. The domain change does not turn every Hide My Email address into a Sign in with Apple account. It only unifies the relay address format behind both features.
Developers Need to Prepare
Apple announced the domain change through its developer site, which signals that app makers and website operators need to be ready before the transition.
Developers who send account emails, verification messages, receipts, newsletters, password resets, support replies, or notifications to users who choose private relay addresses should make sure their systems accept the new domain. Email validation rules should not reject private.icloud.com addresses. Account systems should not assume that Sign in with Apple relay addresses always end in privaterelay.appleid.com.
This is especially relevant for apps with older email-validation logic. Some systems still reject unusual domains, long aliases, plus-style addresses, or relay domains. That can break sign-up, password reset, support, or account-recovery flows for privacy-conscious users.
Developers using Sign in with Apple should also review Apple’s private email relay documentation. Messages sent through the relay need to come from approved domains and follow Apple’s requirements so users can receive them.
For developers, this is not a cosmetic change. It is an account reliability issue.
Users Can Still Manage Hide My Email
The everyday controls for Hide My Email remain the same. Users can create, label, deactivate, and manage Hide My Email addresses from iCloud settings.
On iPhone or iPad:
Settings > Apple Account > iCloud > Hide My Email
From there, users can view existing addresses, see where an address forwards, create new ones, add labels, or deactivate addresses they no longer need.
For Sign in with Apple accounts, users can review which apps use their Apple Account and whether an app has a private relay address.
How to Sign In:
Settings > Apple Account > Sign-In & Security > Sign in with Apple
These menus are useful because private relay addresses can accumulate over time. A user may have one address for a shopping account, another for a newsletter, another for an app, and another for a trial service. Labels help explain which address belongs to which account.
The new private.icloud.com domain may make that list easier to recognize, especially for users who have mixed Sign in with Apple and Hide My Email addresses.
Private Relay Addresses Are Not Disposable Logins
Hide My Email can feel like a disposable address tool, but users should treat private relay addresses carefully when they are tied to real accounts.
A private relay address can be connected to a password reset flow, receipt history, subscription, bank alert, order confirmation, school account, travel booking, or support ticket. Deactivating the address may stop messages from reaching the user. Changing the address on a service may require signing in and updating account settings manually.
For low-value newsletters, deactivation can be useful. For accounts that matter, users should check the service first and update the login email if needed.
The same applies to Sign in with Apple. If an app account was created with a private relay address, that relay address may be the email identity attached to the account. The user’s real email remains hidden, but the app still depends on the relay address to communicate.
Apple’s domain change does not remove that responsibility. It only gives new addresses a more unified format.
A Cleaner Privacy Brand for iCloud+
The private.icloud.com domain also strengthens iCloud+ as Apple’s privacy brand.
Many users still think of iCloud as storage for photos, backups, and files. Apple has spent years expanding it into a privacy and account layer. Hide My Email lets users create random addresses. iCloud Private Relay hides some web browsing activity from network providers and websites. HomeKit Secure Video stores encrypted camera clips. Custom email domains bring personal domains into iCloud Mail.
The new domain name brings email relay more directly under that iCloud identity. private.icloud.com sounds like part of an iCloud privacy product, not a leftover Apple ID relay address.
That may seem like branding, but branding affects understanding. If users understand what an address is, they are more likely to trust it, manage it, and use it correctly.
Apple’s privacy features often work best when they disappear into normal account flows. A cleaner domain helps that happen.
The Change Also Helps Support
A single domain may also reduce confusion when users contact customer support for apps and websites.
Today, support teams may see relay addresses ending in different Apple-related domains and not immediately understand that they belong to Apple privacy features. A single private.icloud.com domain makes it easier to recognize that the address is intentional, not fake or suspicious.
That can help when users request receipts, account recovery, refunds, shipping updates, password resets, or login help. If support teams are trained to recognize private.icloud.com as Apple’s private email relay domain, they are less likely to reject the address or ask users to provide their real email unnecessarily.
This also helps users explain what they are using. “It is my private iCloud relay address” is simpler than explaining why a Sign in with Apple account uses privaterelay.appleid.com while another Apple privacy address uses a different format.
Less confusion means fewer broken account experiences.
A Small Update With Real Account Impact
Apple’s move to private.icloud.com is not a flashy WWDC-style feature, but it touches a part of digital life that creates constant friction: email identity.
People use email addresses to sign up, recover passwords, receive receipts, manage subscriptions, communicate with support, join services, and verify accounts. Sharing a real email everywhere creates spam risk, tracking risk, and long-term exposure when companies are breached or sell data. Apple’s relay system gives users a buffer.
Unifying the domain makes that buffer easier to understand.
The next step is execution. Developers need to accept the new domain. Users need existing addresses to keep working. Apple needs the transition to feel invisible for anyone already using Sign in with Apple or Hide My Email.
If that happens, private.icloud.com will become the new face of Apple’s email privacy layer: one domain for sign-ins, aliases, forwarding, and a cleaner way to keep a real inbox out of places it does not need to be.
