A MAC address, short for Media Access Control Address, identifies a network interface on a local link. A Wi-Fi or Ethernet interface usually has a factory-assigned address, but the address actually used on a network can be locally administered or randomized. A MAC address is not a permanent identity for a person, and it is not the IP address used to route internet traffic.

Key Takeaways

A typical Wi-Fi or Ethernet MAC address has 12 hexadecimal characters, such as 00:1A:2B:3C:4D:5E.

Nearby observers may see Wi-Fi addresses, but scanning and connected-network addresses depend on the system and its privacy settings.

A visible address can be copied; a MAC allowlist alone is not strong authentication.

Prefer supported private-address settings. Randomization reduces some tracking opportunities without making a device anonymous.

How does a MAC address work?

A typical Wi-Fi or Ethernet MAC address is 48 bits, usually written as six hexadecimal pairs. IEEE assigns address blocks to organizations. For a universally administered address from a traditional 24-bit OUI block, the first six hexadecimal characters identify that assigned organization; this rule does not identify the vendor of a randomized, locally administered address. Other IEEE block sizes also exist.［1］

Here is the basic flow:

Local identification: a Wi-Fi interface uses an address when scanning or joining a network; the scanning address may differ from the connected address.
Link delivery: an access point or Ethernet switch uses link-layer addressing to deliver frames on that local network.
Routing onward: a router forwards the IP packet onto another link with that link's addressing. Your device's MAC is not carried unchanged through every internet router.

Most devices have more than one network interface, such as Wi-Fi and Ethernet. Each interface has its own MAC address. A virtual interface can also have an address, so one device can present several identifiers without being several physical devices.

What are the risks of exposing a MAC address?

MAC addresses are essential for local networking, but a stable address can also help an observer associate repeated activity.

Physical location tracking and profiling

An enabled Wi-Fi interface may send discovery frames even when it is not connected. Whether those frames reveal a stable address depends on the system, hardware, scanning behavior, and randomization settings. Do not assume every modern phone continuously broadcasts its factory address.［4］［5］

An operator with observations from several access points may estimate presence or movement using addresses and signal strength. This is a conditional observation, not proof of an exact location or identity. Private addresses make some cross-network association harder; accounts, sign-ins, timing, and other identifiers can still correlate activity.［2］

Unauthorized local access and man-in-the-middle attacks

A MAC address visible on a local link can be copied. A network that authorizes devices only by MAC address therefore should not treat the address as a password. Copying it does not by itself reveal a Wi-Fi password, decrypt HTTPS, or establish a man-in-the-middle attack.

For the wider visibility boundary, distinguish local observers from what an ISP can see, and use the complete VPN guide for the encrypted connection layer.

How to hide or change your MAC address

Use these three approaches only on your own device and networks where you have permission. The settings below follow the listed official documentation; this guide has not undergone complete end-to-end device testing. Record the current per-network setting before changing it, particularly on a managed network.

1. Turn off Wi-Fi when you do not need it

On iPhone or iPad, the Control Center Wi-Fi button disconnects the current network while leaving Wi-Fi available for some functions. To switch Wi-Fi off completely, open Settings > Wi-Fi and turn it off there. Re-enable it in Settings when you need connectivity. Do not infer that a gray quick-menu button means the radio is fully off.［3］

Android menus and location-scanning settings vary by manufacturer. Check the device's current instructions rather than assuming that its quick toggle stops every scan. Disabling Wi-Fi also removes that interface's connectivity; it does not remove tracking through cellular services or accounts.

2. Enable MAC address randomization

Prefer the operating system's private or random address feature over an arbitrary manual address.

Operating system	Supported setting	Version or hardware boundary	Verification
iOS / iPadOS	Private Wi-Fi Address in network details	iOS/iPadOS 14+; Off/Fixed/Rotating in 18+	Read the address for that network
macOS	Private Wi-Fi Address in Wi-Fi Details	macOS Sequoia 15+	Check the same network's details
Android	Per-network randomized MAC option	Android 10 generally enables it; implementation and managed profiles vary	Read the network-specific MAC
Windows 11	Random hardware addresses in Wi-Fi settings	Requires compatible Wi-Fi hardware and driver	Reconnect and inspect the active adapter

Apple's Fixed mode keeps a private address for the network. Rotating changes it every two weeks; the default depends on network security. These are not promises that every Apple device rotates on the same schedule. Android scanning and connected-network randomization are separate behaviors, and an upgrade or managed profile can affect availability. Windows offers both all-network and per-network controls.［2］［4］［5］

Set a private address on Apple devices

On iPhone or iPad, open Settings > Wi-Fi and the information button for the network. In supported versions, choose Private Wi-Fi Address; older versions offer an on/off switch.
On macOS 15+, open System Settings > Wi-Fi > Details for the network and choose the private-address mode. Earlier macOS versions do not have this documented setting.
Record the mode and the network-specific address. Reconnect if necessary, then verify access to the resources you normally use. Fixed mode need not produce a different address on every reconnection.［2］

Check Android and Windows settings

On Android, open the connected or saved Wi-Fi network's details and look for its privacy or MAC-address choice. Labels vary; choose the randomized option only if offered and permitted.
On Windows 11, open Settings > Network & internet > Wi-Fi. Enable Random hardware addresses if available, or select the network under Manage known networks and change its individual setting.
Reconnect to the selected network and compare its active address with your recorded value. The Windows per-network change applies on the next connection; a missing toggle can indicate unsupported hardware or policy, not a need for a registry workaround.［4］［5］

3. Limit manual changes and restore connectivity safely

Manually assigning a MAC address is adapter- and driver-dependent. There is no universal Device Manager field or macOS ifconfig command that works on every current device. Do not root or jailbreak a phone, copy another device's address, or change identifiers to evade a hotspot limit or an administrator's access rule.

If an administrator requires a fixed address on your own network, use the supported setting or the adapter vendor's documented procedure. Changing an address can invalidate a DHCP reservation or MAC-based authorization. It is not a harmless way to renew access.

If the change breaks connectivity, stop changing other settings. Restore the previous per-network mode and reconnect. If private addressing is incompatible, consult the network owner before selecting Off or the device address; this exposes a stable address to that network. Do not reset all network settings as the first recovery step. On managed devices, ask the administrator to correct the profile rather than overriding it.［2］

Keep a small check record: system version, selected network, old mode, new mode, and whether normal access returned. A changed address confirms that setting for that connection only. It does not prove that every discovery frame is randomized or that observers cannot correlate the device.

Can a VPN hide your MAC address?

A VPN connection does not replace the Wi-Fi or Ethernet address used on your local link. The access point still needs link-layer information to deliver frames, even when the payload contains encrypted VPN traffic.

An ordinary remote website reached through routed IP traffic does not receive your local MAC as the packet's link-layer address. That is already a routing boundary, not a privacy feature created by the VPN. A local application may separately collect or upload device identifiers; accounts, cookies, and browser fingerprints remain other ways to associate activity. See what a VPN can hide for the separate internet-visibility question.

How can you check your public IP separately?

For that separate public-IP task, use AethoVPN on Windows or Android, select a currently available in-app location, connect, and compare the public address shown by the IP check before and after the connection. This checks the chosen traffic path, not MAC randomization or anonymity. Keep private-address settings in the operating system: the VPN does not change the local MAC or remove account and fingerprint tracking. Start the 3-day AethoVPN trial if you need to evaluate that public-IP task.

Summary

A MAC address identifies an interface on a local link; the active address can differ from the factory address.
Stable addresses can support local association, but location and identity claims require additional evidence.
Private-address settings reduce some association opportunities, not every form of tracking.
Use supported settings, verify the selected network, and restore the previous mode if access fails.
A VPN changes the protected internet path, not the local Wi-Fi identity.

FAQ

What is a MAC address on a computer?

It is a link-layer identifier for a network interface. A typical Wi-Fi or Ethernet address has 12 hexadecimal characters; its active value can be factory-assigned, locally administered, or randomized.

Do routers have MAC addresses?

Yes. Each router interface, such as WAN and LAN, usually has its own MAC address for communicating with devices and the ISP gateway.

What is the difference between a MAC address and an IP address?

A MAC address identifies an interface on a local link; an IP address supports routing between networks. Either can change in supported configurations, so neither should be treated as an immutable personal identity.

Does a factory reset change a MAC address?

A reset normally does not rewrite the factory-assigned address, but it can change private-address state. Apple documents that resetting network settings changes the private address used on the next connection. Distinguish that active address from the hardware value.［2］

Is changing a MAC address legal?

Permission depends on the jurisdiction, network policy, and purpose. Check the rules for your own device and network; do not use another device's address or change identifiers to evade authorization, bans, or service terms.

How do I find my MAC address?

First select the correct interface and distinguish its factory address from the address used for the current network:

Windows: run ipconfig /all and read Physical Address for the active adapter, not a disconnected or virtual adapter.
macOS: on macOS 15+, inspect System Settings > Wi-Fi > Details for the selected network's private-address setting.
Android: inspect the selected Wi-Fi network's MAC or privacy setting; an About-phone hardware value may differ.
iOS: inspect the selected network's information page under Settings > Wi-Fi. The Wi-Fi address under General > About is not a substitute for checking that network's private address.［2］［4］

Can a device be located by MAC address?

Within a local observation area, repeated stable addresses and signal measurements may help estimate presence or movement. A MAC address alone does not reveal an internet location or identify a person; any association with account or tracking data needs separate evidence.

Disclaimer This technical guide is for education, research, and lawful personal privacy protection. Always follow applicable laws and service terms when changing network identifiers.

Sources:

IEEE Standards Association, Registration Authority — https://standards.ieee.org/products-programs/regauth/
Apple Support, Use private Wi-Fi addresses on Apple devices — https://support.apple.com/en-us/102509
Apple Support, Use Bluetooth and Wi-Fi in Control Center — https://support.apple.com/en-us/102412
Android Open Source Project, Implement MAC randomization — https://source.android.com/docs/core/connect/wifi-mac-randomization
Microsoft Support, Connect to a Wi-Fi network in Windows — https://support.microsoft.com/en-au/windows/experience/connectivity-networking/connect-to-a-wi-fi-network-in-windows

Sources checked 9 October 2026.

Related Articles:

What Is a MAC Address? How to Hide or Change It