When I reconnected my iPhone to my home Wi‑Fi, it showed a privacy warning saying the network was not using a private Wi‑Fi address. The settings offered either "Fixed" or "Rotating."
I understand that Apple does not control my router, and my network is already password-protected with WPA2 or a similar security standard. So what exactly do these options change? Is this a genuine privacy improvement or mostly an unnecessary feature? Does it matter on a home network compared with public Wi‑Fi, and which option is usually better?
3 Answers
A password-protected WPA2 or WPA3 network protects the connection from unauthorized access; the private Wi‑Fi address solves a different problem. It limits passive identification and tracking based on your device’s MAC address. If your home network uses MAC-address allowlists or similar access controls, changing the address may require updating those settings. Otherwise, leaving the private address enabled is harmless, and rotating is a reasonable default for unfamiliar networks.
This changes the MAC address your device presents to the Wi‑Fi network. A MAC address is a hardware-level identifier that networks can use to recognize a device. With the normal device address, the same phone can be identified whenever it connects. A private address substitutes a different identifier, making tracking across networks more difficult.
It does not replace your Wi‑Fi password, encrypt your internet traffic, or make the router itself private. It is mainly useful on public networks, such as those at restaurants, stores, hotels, or libraries, where the operator could otherwise recognize your device over time.
For a trusted home network, the privacy benefit is usually small. Your router and internet provider can still see that a device is connected, and this setting does not hide your activity from the provider. It mainly prevents the same Wi‑Fi operator from easily identifying your device across visits or sessions.
“Fixed” uses one private MAC address for that particular network, so the device remains recognizable there but not by other networks. “Rotating” periodically changes the private address, which provides more resistance to tracking. Rotating is generally the more private choice, but fixed can avoid compatibility problems with captive portals, device access lists, parental controls, or routers configured to expect the same MAC address.
The choice is normally saved per Wi‑Fi network rather than applied as one universal setting. You can use rotating on public networks and fixed on a home network if a particular setup needs a consistent identifier.
So this is about randomizing the MAC address, not changing the phone’s IP address. Any IP change would only be a possible side effect of reconnecting.