How to Set Up iCloud+ Hide My Email

If you’d rather not hand your real address to every website, Apple has a privacy feature built right into your iPhone, iPad, and Mac — and most people never turn it on. This guide shows you exactly how to set up Hide My Email, Apple’s alias tool: how to create your first address, where to manage and disable them, and the real limits worth knowing before you rely on it. It’s part of our provider setup series, and it’s one of the fastest privacy wins available if you’re already in the Apple world.

What iCloud+ Hide My Email Is

Hide My Email is Apple’s version of an email alias. Instead of typing your real address into a signup form, you generate a unique, random @icloud.com address that Apple creates on the spot. Mail sent to it is quietly forwarded to your real Apple inbox, so you receive everything as normal — but the website only ever sees the random address, never your actual email.

The point is separation. Give a different Hide My Email address to each site, and your real inbox stays private. If one of those random addresses starts attracting spam, you deactivate it and the flood stops — without touching your primary email or any of your other addresses. It’s the same core idea behind every alias service: a forwarding address you control sitting between you and the internet. Apple’s version just happens to be baked into hardware you already own.

Under the hood it’s email forwarding with a privacy layer: Apple runs a relay that accepts mail at the random address and re-sends it to your real inbox, so your true address is never exposed to the sender. That matters for email privacy because your real address is a permanent identifier — reused across enough sites it becomes the key that ties your accounts together and feeds marketing lists. A different mask per site quietly breaks that link, which is why building the habit is worth the minute it takes to set up.

What You Need: iCloud+ and Pricing

Here’s the first thing to know before you start: the full Hide My Email feature — where you create and manage your own addresses on demand — requires iCloud+, Apple’s paid tier. Any paid iCloud storage plan is iCloud+, and all of them include Hide My Email. As of 2026 the plans are:

• 50 GB — about €0.99/month
• 200 GB — about €2.99/month
• 2 TB — about €9.99/month

Every tier includes the same iCloud+ privacy features: Hide My Email, iCloud Private Relay, and the option to add a custom email domain to iCloud Mail. So even the cheapest plan unlocks unlimited Hide My Email addresses. (Sign in with Apple can generate a free hide-my-email relay when you use it to log in, but to create and manage your own addresses whenever you like, you’ll want iCloud+.) You’ll also need to be signed in with your Apple ID on an up-to-date iPhone, iPad, or Mac.

It’s worth understanding what you’re actually buying, because Hide My Email is only one slice of it. iCloud+ bundles the extra storage with a set of privacy tools, so the same €0.99 that gives you more space also gives you unlimited masked addresses, Private Relay (which hides your IP and browsing in Safari), and custom-domain support for your regular iCloud Mail. If you were going to pay for iCloud storage anyway, Hide My Email is effectively free on top; if you weren’t, the privacy features alone are a reasonable reason to take the cheapest tier. Apple’s own Hide My Email setup guide lists the current steps if Apple changes the menus after this is written.

How to Set Up Hide My Email on iPhone and iPad

This is the most common way to set up Hide My Email, and it takes about a minute:

1. Open Settings and tap your name (the Apple ID banner) at the top.
2. Tap iCloud.
3. Tap Hide My Email.
4. Tap Create new address.
5. Apple suggests a random address — tap Continue, or refresh for a different one.
6. Add a label (e.g. “Newsletter signups”) and an optional note so you remember what the address is for, then tap Next and Done.

That’s it — the address is live and forwarding to your Apple inbox immediately. The label matters more than it looks: because every address is a random string, a clear label is the only way you’ll later remember which one you gave to which site. Get in the habit of labelling every address by the service you created it for.

A couple of things worth doing on that first setup. Send yourself a quick test — sign up for a free newsletter with your new address and confirm the message lands in your inbox — so you know forwarding is working before you rely on it for anything important. And check which inbox it’s delivering to: if your Apple ID has more than one associated email, tap the address to confirm the forwarding destination is the inbox you actually read. Two minutes of verification now saves a “where did that confirmation email go?” scramble later.

How to Set Up Hide My Email on Mac

The Mac flow mirrors the iPhone one:

1. Open System Settings and click your name (Apple ID) at the top of the sidebar.
2. Click iCloud.
3. Click Hide My Email.
4. Click the + (add) button to create a new address.
5. Choose the suggested address or generate another, add a label and note, and click Continue, then Done.

Addresses you create on any device sync across all of them through iCloud, so an address made on your Mac shows up on your iPhone and at iCloud.com too. You never have to recreate them per device — set one up wherever you happen to be and it follows your Apple ID everywhere.

Creating an Address in Safari and Sign in with Apple

You don’t always have to dive into Settings. Apple weaves Hide My Email into the moments you actually need it:

• In Safari: when you tap into any email field on a website, a Hide My Email option appears above the keyboard. Tap it and Safari drops in a fresh random address (or reuses the one you already made for that site) — no trip to Settings required.
• With Sign in with Apple: when a site or app offers “Sign in with Apple,” you can choose Hide My Email instead of sharing your real address. Apple creates a relay address for that app automatically, and it works even without iCloud+.

These in-context shortcuts are the reason the feature is so low-friction on Apple devices — the privacy-protecting choice is right there at the exact second you’d otherwise type your real email. The Settings method and these shortcuts all feed the same list, so however you create an address, you’ll find and manage it in one place.

The two routes do behave slightly differently, and it’s worth knowing which you’re using. A relay created through Sign in with Apple is bound to that one app or service — it exists to let you log in privately, and it lives alongside your Sign in with Apple accounts. An address you create yourself (in Settings or via the Safari keyboard shortcut) is a free-standing alias you can hand to anything: a newsletter, a checkout, a form. For everyday “I don’t want to give this site my real address” moments, the self-created kind is what you want, because it isn’t tied to a login and you can reuse or retire it on your own terms. Knowing the difference stops the mild confusion of wondering why some addresses appear under your Apple ID logins and others in the standalone list.

How to Manage and Disable Your Addresses

Creating addresses is only half of it; the real power is being able to turn one off. Every Hide My Email address you’ve made lives in the same screen — Settings → [your name] → iCloud → Hide My Email (or System Settings on Mac, or the Hide My Email section at iCloud.com). Tap any address and you can:

• See its label and note, and which forwarding address it delivers to.
• Change the forwarding destination if you have more than one Apple email.
• Deactivate the address. Once deactivated, mail sent to it no longer forwards — it simply stops. This is your kill switch when an address starts getting spam.

One caveat worth knowing: deactivating is not quite deleting. Apple keeps deactivated addresses in a separate list (so a random string is never reissued to someone else), and you can reactivate one later. But while it’s off, anything sent to it bounces — so only deactivate an address once you’re sure you don’t need to receive at it again. In practice, that kill switch is exactly what makes per-site addresses worth the small effort: the moment one leaks or a service turns spammy, you cut it off and nothing else is affected.

It’s worth building a small routine around that list. Every few months, skim your addresses and deactivate the ones tied to services you’ve stopped using — a defunct trial, a shop you bought from once, a newsletter you unsubscribed from. Each one you switch off is a door you’ve closed to spam and to any future breach of that service. Because the addresses are labelled, this review takes only a couple of minutes, and it keeps the list meaningful instead of letting it sprawl into hundreds of forgotten strings. Think of it as the same hygiene you’d apply to app permissions: grant freely, but prune what you no longer need.

Common Hide My Email Problems and Fixes

Setup is simple, but a few things trip people up. Here are the ones that come up most, and what to do about each:

• “Hide My Email” is greyed out or missing. This almost always means you don’t have an active iCloud+ subscription, or you’re not signed in with your Apple ID. Check Settings → [your name]: if there’s no iCloud+ plan, the standalone feature won’t appear. Upgrading any iCloud storage tier to a paid plan enables it.
• A signup form rejects the @icloud address. Some sites block addresses they flag as masks. If that happens, you generally can’t force it through Hide My Email — you’ll need to use a different address for that one site. A cross-platform alias service on your own domain is one workaround, since custom-domain aliases are rarely blocked.
• Mail isn’t arriving. First check the address isn’t deactivated (deactivated addresses stop forwarding). Then check the forwarding destination is correct and that the mail isn’t sitting in spam. Because everything routes to your Apple inbox, a full or misconfigured iCloud Mail account can also stall delivery.
• You can’t remember which address went where. This is why labels matter — but if you skipped them, open the Hide My Email list and use the note field to annotate addresses now. Going forward, label every address at creation.
• You want to reply from a non-Apple app. Replying so the recipient sees the alias works in Apple Mail; third-party clients generally can’t send as the alias. If you rely on another mail app, this is a genuine limitation to weigh.

The Limits of iCloud+ Hide My Email

Hide My Email is genuinely good, and if you live on Apple devices you should absolutely use it. But it’s worth being honest about where it stops — because those limits are exactly what send some people looking for a dedicated alias service. We cover these in depth in our companion piece on Apple Hide My Email’s limits, but in short:

• It requires iCloud+. The full feature is behind Apple’s paid tier, and if you ever stop paying for iCloud+, your Hide My Email addresses deactivate and mail to them bounces.
• It only forwards to your Apple email. Addresses deliver to your iCloud/Apple ID inbox — you can’t point them at a Gmail or work inbox as the destination.
• It’s an Apple-ecosystem tool. Creating and managing addresses smoothly assumes you’re on an iPhone, iPad, or Mac. On a Windows PC or Android phone, you’re limited to iCloud.com and the experience is clunky.
• The addresses aren’t customisable. Every one is a random @icloud.com-style string. iCloud+ lets you use a custom domain for your regular iCloud Mail, but not for the Hide My Email aliases themselves.
• Replying is Apple Mail only. You can reply from an address so the recipient still sees the alias, but that works within Apple’s Mail app — not from arbitrary third-party clients.

None of these make Hide My Email bad — they make it Apple-shaped. If your whole digital life is on Apple hardware and you’re happy forwarding to your iCloud inbox, the limits may never bother you. If you’re cross-platform, or you want a custom-domain address, or you want to forward somewhere other than iCloud, that’s where they start to pinch.

There’s also a subtler point about resilience. Because every Hide My Email address depends on an active iCloud+ subscription and your Apple ID, your masked addresses are only as durable as your relationship with Apple. Stop paying, get locked out of your Apple ID, or decide to leave the ecosystem, and the addresses that sit in front of your real accounts stop forwarding — which can quietly cut off password resets and receipts for logins you set up years ago. That’s not a reason to avoid Hide My Email, but it is a reason to keep your most critical accounts on an address you fully own. Masking your email also doesn’t undo exposure that already happened: if a service you used was part of a data breach before you switched to a mask, that older data is still out there. Aliases limit future damage; they don’t rewrite the past.

Hide My Email vs a Dedicated Alias Service

So how does Apple’s built-in feature stack up against a standalone alias service like ours? The honest answer is that they overlap a lot on the core job — hiding your real address behind a forwarding one — and differ on reach and control.

This isn’t an either/or verdict. If you’re fully in the Apple ecosystem, Hide My Email is a superb, free-with-iCloud+ default and you may need nothing else. If you split your time across an Android phone and a Windows laptop, want your aliases to forward to a non-Apple inbox, or want to run them on your own domain, a dedicated email alias service is built for exactly that. Many privacy-minded people use both — Hide My Email on their iPhone, and a cross-platform alias service everywhere else — and if you’re weighing options, our roundup of the best email alias services and the explainer on how email aliases work go deeper. Because a dedicated alias forwards to whatever inbox you choose and never expires, it’s a permanent, portable address you control — not a disposable inbox tied to one company’s ecosystem.

A quick way to decide: picture the next year of your online life. If nearly everything you do runs through an iPhone and a Mac and you’re content reading mail in your iCloud inbox, Apple’s built-in feature will quietly cover you and you can stop here. If, on the other hand, you carry an Android work phone, log in from a Windows machine, want receipts landing in Gmail, or plan to put your aliases on a domain you own so they look professional, you’ll keep bumping into the ecosystem walls — and that friction is the signal to add a portable alias service alongside it. The two aren’t in competition; they solve the same problem at different radii, and the right answer is simply whichever matches where you actually spend your time.

Final Thoughts

Setting up Hide My Email is one of the highest-value minutes you can spend on your privacy if you own an iPhone or Mac: open Settings, tap your name, iCloud, Hide My Email, Create new address, and you’ve got a forwarding alias standing between you and the next website that asks for your email. Do it once, then make it a habit — a fresh, labelled address for each new signup — and your real Apple inbox stays clean and private. Just go in clear-eyed about the boundaries: it needs iCloud+, it forwards only to your Apple email, and it’s happiest on Apple devices. Inside those lines it’s excellent. Outside them — cross-platform, custom domains, forwarding anywhere — a dedicated alias service picks up where Hide My Email leaves off. Either way, the principle is the same one worth building your whole email life around: never give a site your real address when a revocable alias will do.

If you take nothing else away, take the thirty-second setup and the labelling habit. The single biggest mistake people make with Apple’s masking feature isn’t a technical one — it’s turning it on, creating one address, and then forgetting it exists, so they drift back to typing their real email into forms out of habit. The value only compounds if you actually reach for it every time, and the way you make that automatic is to lean on the in-flow shortcuts (the Safari keyboard option, the Sign in with Apple choice) rather than treating it as a Settings chore. Set it up today, use it on your very next signup, and let the wall between your real inbox and the internet build itself one address at a time.

Frequently Asked Questions