Skip to content

Sign in with Apple is moving to a new email domain. Check your allowlists

When someone signs in with Apple and hides their email, your app gets a relay address that forwards to their real inbox. Later this year, new relay addresses get a new domain. Existing ones keep working, but any code that checks for the old domain could start turning new users away.

Pull House · · 3 min read

Book a 30-min call

What is changing

In an update on 24 August 2026, Apple said: “Starting later this year, new Sign in with Apple addresses, previously issued on privaterelay.appleid.com, will be issued on private.icloud.com.”

  • New addresses: private.icloud.com.
  • Existing addresses: stay on privaterelay.appleid.com, and keep forwarding mail.
  • iCloud+ Hide My Email: stays on icloud.com. An announcement in June had planned to move it too; Apple changed that after reviewing feedback.
  • Date: Apple says “later this year”, without a date. Plan as if it could be any day.

What could break

Apple asks developers to make sure their “account systems, email validation logic, and allowlists” accept the new domain as well as the old one. In practice, look for:

  • Code that recognises relay users by checking for privaterelay.appleid.com, for example to skip an email confirmation step.
  • Sign-up validation that rejects unfamiliar domains, or a list of allowed email domains.
  • Fraud or spam rules that treat a new, busy domain as suspicious.
  • Support and admin tools that search or filter by the old domain.

A quick check

Search your app and your backend for privaterelay.appleid.com. Wherever it appears, add private.icloud.com next to it rather than replacing it, because both will be in use from now on. In Swift, that can be as small as this:

// Both domains issue Sign in with Apple relay addresses.
let relayDomains: Set<String> = ["privaterelay.appleid.com", "private.icloud.com"]

func isAppleRelay(_ email: String) -> Bool {
    guard let domain = email.split(separator: "@").last?.lowercased() else { return false }
    return relayDomains.contains(domain)
}

Sending email to relay addresses

Mail to a relay address only reaches the person if it comes from the domains and addresses you have registered for Apple’s Private Email Relay Service. The announcement mentions no change there, but if your emails stop reaching new users, that is the first place to look. See Communicating using the Private Email Relay Service.

Sources: Apple’s Update: New domain for Sign in with Apple (24 August 2026) and Sign in with Apple.

Related: iOS app maintenance cost · Why apps get rejected by App Store review · iOS app development

More from the blog
Start a project

Have an iOS app to build?

Tell us what you are making. If we are not the right team for it, we will say so.

Book a 30-min call
hello@pull.house