watchOS 8.5 Fixes Mail Privacy Protection Loophole That Could Expose IP Addresses

watchOS 8.5 fixes a security vulnerability in the Mail app that could leak a user's IP address when downloading remote content, security researchers have found.

ios15 mail privacy feature
Last year, it emerged that Apple's Mail Privacy Protection feature was undermined by a lack of Apple Watch support. Mail Privacy Protection was a new feature introduced with iOS 15, iPadOS 15, and macOS Monterey that hides your IP address so senders are not able to determine your location or link email habits to your other online activity. It also prevents senders from tracking whether you opened an email, how many times you viewed an email, and whether you forwarded the email.

The feature works by routing all content downloaded by the Mail app through multiple proxy servers to strip your IP address, and then it assigns a random IP address that corresponds to your general region, making email senders see generic information rather than specific information about you.

Apple's legal documentation on Mail Privacy Protection indicates that the feature is available for iPhone, iPad, and Mac only, but security researchers and developers Talal Haj Bakry and Tommy Mysk discovered that since the Apple Watch does not hide a recipient's IP address, it can compromise the overall security provided by Mail Privacy Protection.

The Apple Watch downloads remote content, such as images, using the recipient's real IP address, both when receiving a Mail notification and when opening an email, meaning that even for users who had enabled Mail Privacy Protection on their ‌iPhone‌, their IP address can be exposed.

While Mail Privacy Protection is a feature exclusive to iOS 15, iPadOS 15, and macOS Monterey, the fact that simply receiving a Mail notification on the Apple Watch could reveal a user's IP address and bypass Mail Privacy Protection on other devices seemed to be an oversight. Now, Bakry and Mysk have found that Apple has fixed the issue in watchOS 8.5.

As of watchOS 8.5, loading remote content is automatically blocked on the Apple Watch, and instead provides an option to "Load Content Directly." Users can also select "Always Load Content Directly" for all new emails or "Ask to Load Content" on a per-email basis. The improvement was not included in watchOS 8.5's release notes.

watchOS 8.5 was released to the public yesterday and the update brings a number of other improvements, including updates to irregular heart rhythm notifications designed to improve atrial fibrillation identification, audio hints in Apple Fitness+ workouts, the ability to authorize Apple TV purchases and subscriptions, and the ability to restore an Apple Watch using an iPhone.

Popular Stories

Apple Intelligence General Feature

Apple Intelligence Features Not Coming to European Union at Launch Due to DMA

Friday June 21, 2024 9:44 am PDT by
Apple today said that European customers will not get access to the Apple Intelligence, iPhone Mirroring, and SharePlay Screen Sharing features that are coming to the iPhone, iPad, and Mac this September due to regulatory issues related to the Digital Markets Act. In a statement to Financial Times, Apple said that there will be a delay as it works to figure out how to make the new...
Apple WWDC24 Apple Intelligence hero 240610

Apple Explains iPhone 15 Pro Requirement for Apple Intelligence

Wednesday June 19, 2024 4:48 am PDT by
With iOS 18, iPadOS 18, and macOS Sequoia, Apple is introducing a new personalized AI experience called Apple Intelligence that uses on-device, generative large-language models to enhance the user experience across iPhone, iPad, and Mac. These new AI features require Apple's latest iPhone 15 Pro and iPhone 15 Pro Max models to work, while only Macs and iPads with M1 or later chips will...
amazon echo dot

Amazon Could Charge Up to $10/Month for Alexa

Friday June 21, 2024 2:55 pm PDT by
Apple competitor Amazon is working on a revamp of its Alexa assistant, and the new version could cost up $10 per month, according to a report from Reuters. The upcoming version of Alexa will support conversational generative AI, and Amazon is planning for two tiers of service. There will be a free tier and a second, premium tier that is priced at $5 at a minimum, with Amazon considering...
General Spotify Feature

Spotify Launches Cheaper $10.99/Month Premium Plan Without Audiobooks

Friday June 21, 2024 4:22 pm PDT by
Spotify today announced the launch of a new Basic paid plan that offers a small discount for dropping access to audiobooks. Priced at $10.99 per month, the Basic option includes all of the music benefits of Spotify like ad-free playback, but without added monthly audiobook listening time. The $11.99 standard Premium Individual plan that Spotify offers includes ad-free playback and 15 hours...
iPhone 16 Pro Max Generic Feature 2

5 Biggest Changes Rumored for iPhone 16 Pro Max

Wednesday June 19, 2024 5:00 am PDT by
Given Apple's rumored plan to add an all-new high-end tier to its iPhone 17 series in 2025, this could be the year for Apple to bring its boldest "Pro Max" model to the table — the kind of iPhone 16 upgrade that stands tall above its siblings, both figuratively and literally. If you have been holding out for the iPhone 16 Pro Max, here are five of the biggest changes rumored to be coming...

Top Rated Comments

msackey Avatar
30 months ago

The watchOS team really needs a shake-down. I’ve got the newest watch, and it has recently been the glitchiest of all my Apple devices.
Shortcuts on Apple Watch are very glitchy too.

Anytime you have a Prompt with text in which the input is numeric (e.g., “Please input your weight” and the input is numbers only), the Apple Watch will not display the prompt and only ask you to input numbers. When you have a Shortcut with various prompts (e.g., What is your weight? What is your BMI? etc.) you need to see what the prompt is asking otherwise you lose your place and don’t know what the context is for inputting numbers! This doesn’t even need explanining.

This issue has been with us since about the last two Apple WatchOS versions!
Score: 3 Votes (Like | Disagree)
twistedpixel8 Avatar
30 months ago

Security vulnerability is a part of life.

It will always happen.
True, but this one was ridiculous for Apple to miss.
Score: 3 Votes (Like | Disagree)
pdaholic Avatar
30 months ago
The watchOS team really needs a shake-down. I’ve got the newest watch, and it has recently been the glitchiest of all my Apple devices.
Score: 3 Votes (Like | Disagree)
dk001 Avatar
30 months ago
Things like this make you wonder how segregated Apple teams are.
This should not have been missed.
Score: 2 Votes (Like | Disagree)
twistedpixel8 Avatar
30 months ago

The two most egregious glitches for me are the random failure to charge (even with the oem charger) and my inability to turn off screen time downtime. Downtime randomly turns on and I have to reboot the watch to get it to turn off, otherwise the watch is useless. There are other glitches, but those stand out!
I was almost late for work this morning because haptics just completely stopped and my watch alarm is set to vibrate only.
Score: 2 Votes (Like | Disagree)
pdaholic Avatar
30 months ago

Shortcuts on Apple Watch are very glitchy too.

Anytime you have a Prompt with text in which the input is numeric (e.g., “Please input your weight” and the input is numbers only), the Apple Watch will not display the prompt and only ask you to input numbers. When you have a Shortcut with various prompts (e.g., What is your weight? What is your BMI? etc.) you need to see what the prompt is asking otherwise you lose your place and don’t know what the context is for inputting numbers! This doesn’t even need explanining.

This issue has been with us since about the last two Apple WatchOS versions!
The two most egregious glitches for me are the random failure to charge (even with the oem charger) and my inability to turn off screen time downtime. Downtime randomly turns on and I have to reboot the watch to get it to turn off, otherwise the watch is useless. There are other glitches, but those stand out!
Score: 1 Votes (Like | Disagree)