How Hide My Email Works in Safari on iOS 15

Apple’s Hide My Email feature, introduced as part of iCloud+ in iOS 15, integrates natively into Safari to protect user privacy during online registrations and sign-ups. This article explains how the system detects web form fields, generates randomized addresses on demand, autofills user credentials, and routes incoming messages directly to a private inbox without exposing the user's real email address.

Automatic Detection in Safari

Safari detects email input fields using standard HTML form attributes, such as type="email" or common name identifiers like email or signup. When a user taps into an email field on a webpage, iOS 15 identifies the context as a registration or contact prompt. Instead of merely offering standard AutoFill contact cards, the QuickType bar above the keyboard immediately displays a dedicated "Hide My Email" suggestion.

On-Demand Address Generation

Selecting the "Hide My Email" prompt launches a native system sheet directly over the Safari interface. Within this interface, iOS 15 automatically generates a unique, randomly created email address ending in @icloud.com.

The sheet clearly outlines:

  • The randomly generated email address.
  • The destination address where incoming messages will be forwarded (the user's primary Apple ID email).
  • The specific domain or website associated with the address.
  • A label and notes field allowing the user to track where the address is being used.

Users can also tap a refresh icon to generate a different random address before confirming if desired.

Autofill and Keychain Integration

Once the user confirms the selection by tapping "Use," Safari automatically populates the form's email field with the generated address. Simultaneously, the system offers to pair this address with a password generated by iCloud Keychain. When the user creates an account, both the unique email address and the password are saved together under that specific domain within the Keychain, enabling seamless future logins via Face ID or Touch ID.

Message Forwarding and Management

Behind the scenes, Apple creates a private relay record associating that specific website with the generated alias. Any verification links, newsletters, or notifications sent by the website are forwarded to the user's personal inbox. Users can reply directly from their standard mail client; Apple’s relay transparently rewrites the outgoing message so the recipient only sees the randomized address.

Users retain complete control over these generated addresses. By navigating to Settings > [Apple ID] > iCloud > Hide My Email, users can deactivate forwarding, reactivate it, or delete the generated addresses entirely, immediately cutting off spam from that specific sender.