Hide My Email is the easiest recommendation in email privacy. It is built into hardware you already own, it appears in the exact places you would otherwise type your real address, and it comes with iCloud+, a subscription many Apple households already hold for the storage alone. There is nothing to install and almost nothing to learn.
It is also genuinely good at the core job. Addresses are generated on the spot in Safari, Mail, Apple Pay and supported third-party apps; mail forwards to your inbox; and when you reply from an Apple surface, the message goes out under the mask, with your real address kept out of it. If your digital life happens entirely on an iPhone, an iPad and a Mac, Hide My Email may be all the aliasing you ever need. That is not a grudging concession. It is the honest starting point.
But the feature has edges, and most of them only show up once you depend on it. Full disclosure before we start: YeyMail is an email alias service, so we compete with Hide My Email, and you should read this with that in mind. Everything below comes from Apple's own support pages, checked the day this was written. Where those pages are silent, we say they are silent instead of guessing.
What Hide My Email does well
The integration is the product. Tap an email field in Safari and a fresh address is offered before you can type your real one; the same happens in Mail, in Apple Pay when a site asks for an email at checkout, and in third-party apps that support the feature. Every address is unique, so one leaking site can be identified and cut off without touching the rest. Apple's guide says you can "create as many addresses as you need", and no cap appears anywhere in the documentation.
Two details deserve more credit than they usually get. Forwarding is not locked to iCloud Mail: masks can deliver to any email address associated with your Apple Account, so a Gmail or Outlook inbox works perfectly well as the destination. And one iCloud+ subscription covers a whole Family Sharing group, which makes the effective cost for most Apple households zero, because somebody is usually paying for storage already.
Every address is random, with no exceptions
You cannot choose what a Hide My Email address looks like. Apple's own instructions describe the flow: a randomly created iCloud address appears in a dialog, and if you dislike it, the refresh button produces another random one. There is no field for typing an address of your own, on any platform, in any of Apple's documentation.
For a signup form this rarely matters. It matters when you read an address aloud over the phone, when you try to spot your own aliases in a breach notification, or when you want newsletter and banking patterns you can recognise at a glance. In a breach dump, a random string tells you something leaked, but not which account it belonged to until you cross-check labels back in Apple's settings. Apple's mitigation is a label and a note attached to each address, which works inside Apple's interface and nowhere else. A readable email alias is a small thing until the day it is the only thing you want.
New conversations stay on Apple's surfaces
Receiving is universal; sending is not. Apple documents composing a new message from a Hide My Email address in Mail on iCloud.com, where a Hide My Email option sits in the From field, and in its own Mail apps. Replying works the same way: answer a forwarded message from an Apple surface and it goes out under the mask, with your personal address kept private.
Replying is more forgiving than it first looks. Apple's iCloud+ guide says you can read and respond directly to mail sent to a masked address and your personal email address is kept private, and that description covers a mask forwarding to a Gmail inbox. What Apple documents only on its own surfaces is starting a conversation: composing a new message as the mask happens in Apple's Mail apps and in Mail on iCloud.com, and nowhere in Apple's documentation is there a way to originate a fresh email as the mask from inside Gmail or Outlook, so a new message means a trip to iCloud.com. Apple's guide to Mail on iCloud.com also notes that a message sent with Hide My Email can only be delivered to a single recipient, which rules out group threads.
None of this is malice; it is architecture. A message from a masked address has to leave through servers entitled to send for that address. For replies, Apple's relay does that job wherever your inbox lives; for new conversations, only Apple's own interfaces can hand a message to those servers. Dedicated alias services close that last gap with per-alias credentials that let any mailbox originate mail as the alias, which is a heavier setup but travels further. The point is not that Apple got it wrong. The point is that starting a conversation is fenced.
If you live in Apple Mail this is entirely workable, and we have step-by-step guides for sending from an alias in Apple Mail and on the iPhone. If your actual mailbox is Gmail, replies still work from where you are, but starting a new conversation under a mask involves a detour through a second webmail interface.
iCloud+ is the price of admission, and the exit is undocumented
Hide My Email requires an iCloud+ subscription, your own or one belonging to someone in your Family Sharing group; Apple One, which bundles iCloud+, counts too. That is a fair deal while it lasts, and for many households it costs nothing extra. The awkward question is what happens when it stops.
Apple's page on downgrading or cancelling iCloud+ says you lose access to iCloud+ features, and Hide My Email is one of them. What it does not say is what happens to the addresses you already created: whether mail sent to them keeps forwarding, stops silently, or bounces. We could not find an answer anywhere on Apple's public support pages, and we looked specifically. If your accounts at other websites are registered under masks, that silence is worth taking seriously. Before letting iCloud+ lapse, it would be prudent to keep a list of which logins use which addresses, because Apple's documentation does not tell you what the morning after looks like.
The addresses are not portable
Every Hide My Email address lives on Apple's domain. There is no way to attach a domain you own, and Apple's documentation never mentions one. As long as you stay, that is invisible. If you ever leave, every account registered under a mask has to be migrated by hand, one password-reset email at a time, before the addresses stop working; and as covered above, Apple does not say when that would be.
This is the structural difference between built-in masking and services designed around a domain you control. An address on your own domain can follow you to any provider, because the domain points wherever you say. An address on Apple-owned infrastructure cannot, and no amount of careful management changes that.
On Windows and Android, it is a website
Apple's requirements for Hide My Email name iOS 15, iPadOS 15, macOS 12 or later, plus iCloud.com from any supported browser. That last item is the entire Windows and Android story. From a browser on either platform you can sign in to iCloud.com, create and manage addresses in Settings there, and send or reply under a mask in Mail on iCloud.com. That deserves to be said plainly: the feature is usable off Apple hardware.
What is missing is everything that makes it pleasant on Apple hardware. Apple's Hide My Email documentation mentions no Android app, no support in iCloud for Windows, and no browser extension, so nothing offers you a fresh address as you type into a form in Chrome on a PC. Signing up for something from a work computer means generating the address on iCloud.com in another tab and pasting it across, which works, and which nobody would call ambient. On other platforms it becomes a manual tool you visit, not a feature that meets you at the form field.
Per-address control is a light switch
Apple documents a tidy but small set of controls for each address: a label and a note, a choice of forwarding destination, deactivation, reactivation, and permanent deletion of deactivated addresses. Deactivating an address stops messages sent to it from reaching you, and you can reactivate it later if you change your mind.
Apple does answer the sender-side question: its guide on deactivating addresses says any emails sent to a stopped address are returned to the sender, so a deactivated mask bounces rather than swallowing mail silently. What dedicated alias services tend to layer on is everything beyond on and off. We cover what that looks like in practice in our posts on Firefox Relay's limits and SimpleLogin.
| The question | What Apple's pages say |
|---|---|
| Pick your own address | No; addresses are randomly created |
| Forward to Gmail or Outlook | Yes; any address on your Apple Account |
| Reply under the mask from Gmail | Yes; "respond directly" and your address stays private |
| Start a new email as the mask from Gmail | Not documented; Apple's apps and iCloud.com only |
| Use without iCloud+ | No; yours or a Family Sharing member's |
| Masks after iCloud+ lapses | Not stated |
| Bring your own domain | Not offered |
| Windows and Android | iCloud.com in a browser |
When Hide My Email is honestly enough
Limitations lists can make a good product sound bad, so here is the counterweight. Hide My Email is a sound choice, arguably the best one, when most of the following are true:
- Your devices are Apple's and Safari is your browser, so address generation happens where you already are.
- Someone in your household already pays for iCloud+, making the marginal cost nothing.
- You mostly receive. The occasional masked reply from Apple Mail or iCloud.com does not bother you.
- You do not need readable addresses or a domain of your own, and labels cover your organising needs.
- You accept that leaving Apple, or letting iCloud+ lapse, would mean re-registering accounts by hand.
That describes a lot of people, and they should simply turn the feature on and enjoy it. The limits above are not flaws in what Hide My Email is. They are the outline of what it was never built to be: a portable, provider-independent identity layer that works the same from any mailbox on any platform. If that outline matters to you, it is worth knowing before the masks multiply, because every month of use raises the cost of changing your mind.