In short: iCloud Private Relay is an iCloud+ feature that hides your IP address and encrypts Safari traffic by routing it through two separate relays. But it only protects Safari (not other browsers or apps), can't let you pick a country, and is disabled in several countries. A VPN encrypts your entire device, hides your real IP for every app, and protects you on public Wi-Fi. If you browse only in Safari, Private Relay is enough; if you use other apps, untrusted networks, or want one layer of protection for everything, you need a VPN. You can run both at once.
What iCloud Private Relay is
iCloud Private Relay launched with iOS 15 and is available to iCloud+ subscribers on iPhone, iPad and Mac. Apple still labels it a beta. Its goal is narrow: to stop any single website or network from seeing both your IP address and the pages you visit at the same time.
It works through a dual-hop design. The first relay — the ingress — is run by Apple: it sees your real IP address but not the site you're visiting, because the destination is encrypted. The second relay — the egress — is run by a third-party partner (Apple uses Cloudflare, Akamai and Fastly infrastructure): it sees which site you're reaching but not your real IP. As a result, no single party — including Apple — can link "who" and "where" into one picture.
That is the key difference from a classic VPN, where a single provider sees both your IP and the addresses you visit. This is exactly why a VPN carries its own requirement — to keep no logs and prove it with an independent audit.
What Private Relay protects and what it leaves open
The biggest misconception is that the "private relay" covers all of your iPhone's traffic. It doesn't. Private Relay covers three things: activity in the Safari browser, the system's DNS queries, and unencrypted app traffic over HTTP. Everything else — HTTPS connections from third-party browsers and apps — goes out directly, bypassing it.
| What you do | Through Private Relay? |
|---|---|
| Browsing sites in Safari | Yes — IP hidden, traffic encrypted |
| System DNS queries | Yes — resolved privately |
| Unencrypted HTTP app traffic | Yes — covered |
| Chrome, Firefox, Edge on iPhone | No — go out directly |
| Messengers, banking, email and other apps (HTTPS) | No — server sees your IP |
| Changing your country / region | No — no such feature |
The practical takeaway is simple: your banking app, messenger or email client send data exactly as they would with the feature off — your network and ISP can see them. Private Relay is privacy for Safari browsing, not protection for the whole device.
Private Relay vs a VPN: the difference
Both hide your IP address, but they solve different problems. Private Relay is a built-in "privacy bonus" for the browser. A VPN is a separate encrypted tunnel for the whole device that you control yourself — you choose the server, the protocol and the provider.
| Criterion | iCloud Private Relay | VPN |
|---|---|---|
| What it protects | Only Safari, DNS and HTTP traffic | All device and app traffic |
| Hides IP | Yes, but only for Safari | Yes, system-wide |
| Choose country/server | No | Yes |
| Public Wi-Fi | Protects Safari only | Protects every app on the network |
| Availability | iCloud+ only, off in some countries | Any device, most countries |
| Who sees the traffic | Split between Apple and a partner | One provider (needs no-logs) |
A word on location. Private Relay deliberately keeps your approximate region: in settings you can choose "Maintain general location" or "Use country and time zone", but you can't set an arbitrary country. A VPN, by contrast, shows the IP address of the server you pick — a different model by design. If hiding your real IP from every service is what you're after, see our guide on what incognito mode really hides.
When Private Relay is enough and when you need a VPN
Private Relay is enough if you:
- use the internet mostly through Safari;
- want ad networks and sites to stop profiling you by IP;
- stay on a home or trusted network and don't install separate privacy apps;
- already pay for iCloud+ and want protection in one tap.
You need a VPN if you:
- use other browsers and apps — banking, messengers, email, work tools;
- connect to public Wi-Fi in cafes, airports, hotels or on transit;
- want a single layer of encryption for the entire device, not just web pages;
- live in or travel to places where Private Relay is unavailable;
- want to control which server and protocol are used.
For end-to-end protection across every app, not just Safari, a VPN plan encrypts all traffic and works on any network. We cover protecting your data in AI tools and beyond in a separate guide.
Five myths about the "private relay"
- "Private Relay is Apple's VPN." No. Apple explicitly calls it a privacy feature, not a VPN: there's no country choice, no protection for third-party apps and no system-wide tunnel.
- "With it on, I can't be tracked." Your IP is hidden only in Safari. Browser fingerprinting, account logins and app data still identify you.
- "It changes my country." No — your region stays roughly your own, and you can't set an arbitrary location.
- "It protects the whole iPhone." No — Chrome, messengers and banking apps bypass it.
- "Apple sees everything I do." The opposite: the dual-hop design is built to stop Apple from linking your IP to the sites you visit. But that still doesn't make it a full tunnel for every app.
How to turn on Private Relay on iPhone
The feature requires an active iCloud+ subscription. Enabling it takes a few steps:
- Open Settings and tap your name at the top of the screen.
- Go to "iCloud", then "Private Relay".
- Turn on the "Private Relay (Beta)" toggle.
- Tap "IP Address Location" and choose "Maintain general location" for more privacy, or "Use country and time zone" if local results matter.
- If a network or site requires it off, you can temporarily disable it for a specific Wi-Fi network in that network's settings.
If Safari complains that a site won't open because of Private Relay, or other apps lose connectivity, that's a network restriction, not a bug. A VPN behaves differently here — it works on top of any app. If you want to confirm your connection isn't leaking, start by checking for DNS leaks.
Checklist: iPhone privacy in 2026
- Turn on Private Relay if you have iCloud+ and use Safari often.
- For banking, messengers and other apps, keep a VPN on — Private Relay doesn't cover them.
- On public Wi-Fi, always use a VPN, not just the "private relay".
- Check for a DNS leak — it can expose your queries even with a hidden IP.
- Limit tracking under Settings, Privacy and Security, Tracking.
- Turn off precise location for apps that don't need it.
- Don't rely on one tool: privacy is the sum of your settings, not a single switch.
Frequently asked questions
Does iCloud Private Relay replace a VPN?
No. It's an add-on for Safari browsing, not a full replacement. A VPN covers your entire device and works in every app, which Private Relay is not designed to do.
Why is Private Relay unavailable in my region?
For regulatory reasons Apple disables the feature in certain countries (for example China, Belarus and a few others). If it's missing from iCloud settings, it's usually down to your Apple ID country or your network operator.
Does Private Relay work in Chrome or Firefox on iPhone?
No. Protection applies only to Safari, system DNS and unencrypted HTTP traffic. Third-party browsers go out directly, exposing your real IP.
Can I run Private Relay and a VPN at the same time?
Technically yes, but with a VPN active all traffic already goes through the tunnel, so Private Relay usually pauses or becomes redundant. In practice one is enough: for the whole device, use a VPN.
Can Apple or Cloudflare see my traffic?
Neither side sees the full picture: Apple knows your IP but not the sites, and the egress partner knows the sites but not your IP. That split is the entire point of the dual-hop design.
Does Private Relay slow down the internet?
A small delay is possible because of the double routing, but it's usually unnoticeable during normal browsing. A noticeable drop is more often a congested network than the feature itself.
Does Private Relay hide me from ad trackers?
It stops your activity from being tied to your IP in Safari, but it doesn't remove tracking via browser fingerprinting, cookies or account logins. It's just one layer.