Apple introduces new tracking protection in Safari

Apple has introduced a new feature in Safari browsers across its latest operating systems to prevent "identity resolution," a tracking method that uses email addresses instead of traditional cookies. This feature is available in iOS 27, iPadOS 27, macOS 27, and visionOS 27.

How identity resolution tracking works

When a user enters their email address to log in or subscribe to a service, a third party collects the email and sends it to its servers. These servers then link the email to an anonymous identifier, which is returned to the website and used to track the user across different sites.

Why email tracking is a concern

An email address is often considered personal information and can be stored for years. Advertisers use this data to follow users across multiple websites and devices. Apple clarifies that tracking occurs when a third party connects data across sites, not when a website uses an email for its own service.

Safari blocks tracking infrastructure

In its latest software updates, Safari and WebKit block access to the network infrastructure used by tracking services. This prevents third-party servers from receiving email addresses or generating identifiers. The blocking applies at the domain level and cannot be bypassed by changing request formats.

Apple’s history with tracking prevention

Apple previously introduced Intelligent Tracking Prevention in 2017, which limited how long advertisers could use navigation data. The new update focuses specifically on email-based tracking, offering users tools like alias generators to avoid sharing the same email address across different services.

Options for users to avoid tracking

Users can use tools such as Simple Login (Proton), Addy.io, Firefox Relay, DuckDuckGo Email Protection, and Hide My Email for iCloud+ subscribers. These services create unique, random email addresses for each site, ensuring no cross-referencing of user data across platforms.