Apple gives you two things most providers don't: Mail Privacy Protection, which blocks open tracking by default, and Hide My Email, which issues per-signup addresses if you have iCloud+. Combined with marking junk and blocking senders, that covers more ground than the equivalent setup elsewhere. What it doesn't cover is the addresses you handed out before — and Hide My Email addresses live on Apple's domain.
1. Turn on Mail Privacy Protection
Settings → Apps → Mail → Privacy Protection → Protect Mail Activity.
This routes remote content through Apple's proxy, so senders can't see your IP address or reliably tell when you opened a message. It's on by default for many users and it's the single best-designed anti-tracking feature any mainstream mail provider ships.
Worth knowing: it works by loading images rather than blocking them, so the sender may still register an open — it's the location and timing signal that's broken. How tracking works
2. Mark junk, don't delete
Moving a message to Junk trains the filter; deleting teaches it nothing. Check the Junk folder occasionally for legitimate mail that landed there — filters fail in both directions.
3. Block senders
Tap the sender → Block this Contact. Blocked mail goes to Trash or Junk depending on your settings.
The usual caveat applies: bulk senders rotate the part before the @, so blocking one address achieves little. Block or filter the domain where you can. What blocking does and doesn't do
4. Use rules on iCloud.com
iCloud's web interface supports rules — Mail → Settings → Rules. More capable than what the iOS app exposes: match on sender or domain and move to a folder or bin. This is where you handle recurring senders precisely, rather than relying on the classifier.
5. Hide My Email, if you have iCloud+
The strongest tool in the list. It generates a unique random address per signup, forwarding to your real inbox, and each can be deactivated individually. It's integrated into Sign in with Apple and Safari's autofill, so the friction is close to zero — which matters more than any feature, because it determines whether you actually use it.
It's not the same as iCloud+ Custom Email Domain. Those are separate features and constantly confused. Hide My Email addresses are always @icloud.com; they are not created on your custom domain.
The addresses are Apple's. If you ever leave the Apple ecosystem, every one has to be replaced at every service using it. That's fine if you're committed to Apple and a real cost if you're not. The comparison
The ceiling
Everything above except Hide My Email works on messages after they've arrived. None of it reduces how many organisations hold your existing address, and that number only grows.
Hide My Email is the exception because it changes what you hand out — which is why it's the item worth adopting even though it's the one that costs money. If you want the same benefit on addresses you own rather than Apple's, that's the custom-domain route. The trade-off
Apple's own support pages are authoritative on any interface detail, and menus move between iOS versions. More: the Gmail equivalent · the full guide