iPhone Private Wi-Fi Address: Off, Fixed or Rotating?
Private Wi-Fi Address changes the MAC address an iPhone presents to individual wireless networks. It helps reduce tracking, but it can confuse networks that identify devices solely by MAC address. Understanding the three modes is usually more useful than turning the feature off without a reason.
What each mode means
| Setting | How the address behaves | When it matters |
|---|---|---|
| Off | Uses the device's hardware Wi-Fi MAC address | More persistent identification, less privacy |
| Fixed | Uses a private address that remains stable for that network | Often works with predictable network identity while limiting cross-network tracking |
| Rotating | Periodically changes the private address for that network | More privacy, but MAC-based reservations or allowlists may stop matching |
On iOS 18 and later, the per-network choices are Off, Fixed and Rotating. A newly joined WPA2-or-stronger network uses Fixed by default; a weakly protected or open network uses Rotating by default. In Rotating mode, Apple documents a change every two weeks. Fixed does not mean the address survives every reset: resetting network settings or erasing the device changes the address used on a later connection. Older iOS versions show an on/off control instead of these three choices.
Change the setting for one network
Open Settings > Wi-Fi, select the information button next to the network, then open Private Wi-Fi Address and choose the appropriate mode if your iOS version offers it. Prefer a per-network decision. Do not disable address privacy for every network simply to fix one home or office connection.
Why this can affect network administration
Some networks associate DHCP reservations, filtering rules, parental controls or access registrations with a specific MAC address. Changing the address can make a known iPhone look like a different client. Administrators should check the MAC address actually visible to the access point or DHCP server and avoid treating MAC filtering as a strong security control. Where possible, use better network authentication and device-management mechanisms instead of depending exclusively on static MAC lists.
Troubleshoot in the right order
If the iPhone joins the network but cannot reach a resource, first confirm whether the failure is DNS, DHCP, captive-portal login, authentication or a MAC-based policy. Check the network administrator's logs if available. Update device and network software. If a stable network-specific identity is genuinely required, consider Fixed before Off where the infrastructure supports it. Remember that a weak-security warning is about Wi-Fi protection and is not repaired by switching Private Wi-Fi Address off.
Privacy trade-off
Off exposes the hardware Wi-Fi address to that network and makes the device easier to correlate across networks. Fixed keeps a stable identity within that one network without exposing a single hardware address everywhere. Rotating makes longer-term address-based recognition less dependable. The most suitable option depends on the network; privacy is the default consideration.