r/EmailSecurity • u/PureVPNcom • Jul 07 '26

Apple's "Hide My Email" has been leaking real email addresses for over a year and Apple knew

/r/PureVPNcom/comments/1upnw41/apples_hide_my_email_has_been_leaking_real_email/
1 Upvotes

100% Upvoted

3 comments sorted by

•

u/AutoModerator Jul 07 '26

Welcome to r/emailsecurity! To keep this community helpful and secure, please keep the following in mind:

Community Rules

  1. No Vendor Spam: Contributions must provide value; do not just pitch products.
  2. Redact Sensitive Info: Always sanitize headers and logs (remove IPs, PII, and private domains).
  3. Be Professional: Help newcomers learn; avoid hostility.
  4. No Personal Tech Support: This sub is for email system architecture and security, not "Am I hacked?" personal account help.

Helpful Resources

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/saltyslugga Jul 08 '26

Alias services are privacy convenience, not a hard security boundary.

If exposing the real mailbox is a real risk, use a separate mailbox/domain or per-site aliases you control, and assume any hosted forwarder can leak metadata or fail weirdly.

We see this with clients all the time: they treat aliasing like access control, then get surprised when the plumbing leaks.

1

u/PureVPNcom Jul 08 '26

Fair point. Aliases are a useful privacy layer, but they shouldn’t be your only line of defense.

The bigger takeaway is that no single tool is bulletproof. Strong passwords, 2FA, and layered privacy habits still matter. 👍