In short: your smartphone constantly broadcasts a unique network identifier — its MAC address. Malls, airports and Wi-Fi hotspot owners use it to track your device's movements even when you never connect to their network. The fix is MAC randomization: iPhone (iOS 14 and later) and Android (10 and later) can show every network a random address. It takes a minute to enable in Wi-Fi settings. A MAC address is only visible nearby, on the local network, and never travels across the internet — so it does nothing against online IP-based tracking. That's a separate layer, and a VPN handles it.
What a MAC address is and why it exposes you
A MAC address (Media Access Control) is the hardware identifier of a device's network module — Wi-Fi and Bluetooth. It looks like six pairs of characters, for example A4:83:E7:2C:9F:10. Unlike an IP address, which is assigned by the network and changes, the factory MAC is tied to a specific chip and is meant to be unique. That permanence is exactly what makes it a convenient tracking marker.
When Wi-Fi is on, your phone doesn't stay silent. To find familiar networks faster, it periodically sends short broadcasts into the air — probe requests. Historically, each of these carried the real MAC address. Any nearby access point or receiver hears these signals; you don't have to connect to anything. Your phone literally announces itself to surrounding networks even while sitting in your pocket.
The second scenario is when you do join a Wi-Fi network (in a café, hotel or airport). The access point sees your MAC and remembers it. That lets the network owner tie all your visits into one history: today, yesterday, a month ago — the same device.
How you actually get tracked over Wi-Fi
MAC-address tracking isn't theory — it's a mature analytics industry. Here are the main ways your phone gives itself away.
- Retail analytics in stores and malls. Wi-Fi sensors count visitors by MAC address, measure how long someone lingers by a display, how often they return and which route they take through the store — with no consent and no connection to the store's network.
- Public hotspots. Free airport or café Wi-Fi is almost always wired to an analytics platform. The MAC address becomes an anchor to which they attach the email from the login form, visit times and in-network behavior.
- Outdoor Wi-Fi sensors. Standalone receivers on streets and in transit hubs listen for probe requests and map how devices move between locations.
- Home and office routers. The network admin sees the MAC of every connected device and can match it to a specific person.
The key point: a MAC address by itself carries no name or phone number. But it works as a stable key that a profile is built around. Link the MAC to your identity once — through a form, a payment, a loyalty program — and every past and future "anonymous" appearance of that device stops being anonymous.
MAC address vs IP address: two different markers
Beginners often think MAC and IP are the same thing. In reality they are markers at different levels, visible to different observers and closed by different tools. Here's the breakdown.
| Marker | Where it's visible | Who sees it | How to close it |
|---|---|---|---|
| MAC address | Local network, radio airspace around you | Wi-Fi hotspots, retail sensors, router, nearby sniffers | MAC randomization in phone settings |
| IP address | The entire path across the internet | Websites, apps, ISP, ad networks | VPN — replaces your public IP |
| DNS queries | Between device and DNS server | ISP, network owner, DNS provider | Encrypted DNS, VPN |
This leads to a point that's often misunderstood: a MAC address does not travel across the internet. It only works on the local segment — from your phone to the nearest access point. The website you open never sees your MAC. So MAC randomization won't help against online and ad tracking — there your IP address and browser identifiers do the work. And the reverse is true: a VPN replaces your IP but doesn't touch the MAC broadcasting in the physical airspace around you. Full privacy comes only from combining both. More on the IP layer in our guide on what a VPN protects against.
MAC randomization: what it is and what it does
Randomization (or "private address") is an operating-system feature that substitutes a randomly generated MAC for the real hardware one. The idea is simple: if your phone shows a unique random address to each network, and rotates it while scanning for networks, tying your visits into a single chain becomes far harder.
What it does in practice:
- Retail and street sensors see "different" devices instead of one persistent one — cross-location tracking falls apart.
- Different Wi-Fi hotspots get different addresses and can't be stitched together automatically.
- The real hardware-bound MAC stops leaving your phone at all.
The good news: on modern phones, randomization while scanning for networks is on by default. But for saved networks you actually connect to, it's worth checking the setting manually — sometimes a phone still shows a fixed address to "its" networks for connection stability.
How to turn on Private Wi-Fi Address on iPhone
In iOS the feature is called "Private Wi-Fi Address" and is available from iOS 14. Recent versions (iOS 18) added a mode that rotates the address on a schedule — more private than a fixed one.
- Open Settings → Wi-Fi.
- Tap the "i" icon next to the network you want.
- Find "Private Wi-Fi Address" and turn the toggle on.
- If a mode choice is offered, prefer "Rotating" over "Fixed" so the address refreshes periodically.
- Repeat for every network you trust and connect to regularly.
After you enable it, the phone reconnects under a random address. On a home network where you set up MAC-based bindings (a static IP or router-level parental controls), you may need to re-authorize the new device once.
How to turn on MAC randomization on Android
Android has supported a randomized MAC since version 10. Menu labels differ slightly between manufacturers, but the logic is the same.
- Open Settings → Network & internet (or Connections) → Wi-Fi.
- Tap the network you want and open its settings (the gear icon).
- Find "MAC address type" or "Privacy" and choose "Use randomized MAC".
- On Android 12 and later there's a "non-persistent" randomization option, where the address changes on each new connection — more private than "persistent".
- Make sure public networks use the randomized option, not "Phone MAC".
If a familiar network stops letting the phone in after the change, open the router settings and refresh the list of allowed devices — the old permanent MAC won't appear there anymore.
What MAC randomization does not cover
It's important to know this tool's limits so you don't get a false sense of security. MAC randomization is about not being tracked as a physical device near a Wi-Fi hotspot. It has nothing to do with what happens on the internet itself.
- It doesn't encrypt your traffic. On an open public network, an outsider can still intercept unprotected data. Encrypting the channel is the VPN's job — see our guide on what a VPN protects against.
- It doesn't hide you from websites. To web services you are your IP address and browser fingerprint, not your MAC.
- It doesn't stop tracker apps. Surveillance inside installed apps is handled by other measures, and a MITM attacker on public Wi-Fi is a separate risk — see how a man-in-the-middle attack works.
The logic is straightforward: MAC randomization hides your device in the physical Wi-Fi airspace, while a VPN hides your traffic and real IP on the internet. Together they close both the local and the network layer of tracking. LiMP VPN encrypts your connection on iPhone and Android and replaces your public IP — you can subscribe on the pricing page, and to clean up what's already out there, see how to remove your data from the internet.
Checklist: stop your phone from broadcasting itself over Wi-Fi
- Turn on randomization (private address) for every Wi-Fi network you connect to.
- Where a mode choice exists, pick "rotating"/"non-persistent" rather than a fixed address.
- Switch Wi-Fi and Bluetooth off when you don't need them so the phone stops sending probe requests.
- Don't join open networks unnecessarily and don't save them "for later".
- Remove networks you no longer use from the saved list.
- On public networks, turn on a VPN to encrypt traffic and hide your real IP.
- Re-check the setting after OS updates — it can reset for new networks.
Frequently asked questions
Can my name or location be found from a MAC address?
A MAC address on its own is anonymous and holds no precise coordinates. The danger is different: it's used as a permanent key that other data gets attached to — the email from a Wi-Fi form, a payment, the time and place of visits. That turns a set of "anonymous" appearances into a specific person's profile.
Will MAC randomization slow down my Wi-Fi or drop the connection?
It has no effect on speed — only the identifier changes, not the channel parameters. The one side effect: if your router has MAC-based bindings (device filtering, static IP, parental limits), you'll need to re-authorize the new random address once.
Do I still need randomization if I already use a VPN?
Yes — these are different layers. A VPN replaces your IP and encrypts traffic on the internet, but it doesn't touch the MAC address your phone broadcasts on the air near Wi-Fi points. Randomization closes exactly that local, device-level tracking. Maximum privacy comes from pairing MAC randomization with a VPN.
Can the websites I visit see my MAC address?
No. A MAC works only on the local network segment — up to the nearest access point — and isn't routed over the internet. Websites see your IP address and browser parameters, not your MAC.
What if my home network won't let the phone in after I enable a private address?
Most likely the router has MAC-address filtering enabled and the phone now shows a new random one. Open the router panel and add the device's current address to the allowed list, or keep a fixed private address for the home network.
Does MAC randomization help against ad tracking?
Barely: ad networks rely on your IP address, advertising ID and browser fingerprint, not your MAC. To limit ad tracking, disable the advertising ID and use a VPN — the MAC is secondary here.
Is MAC randomization available on older phones?
The feature arrived in iOS 14 and Android 10. Older versions have no built-in randomization, so those devices broadcast a permanent address. That's one more reason to keep the system updated and, when possible, move to a current OS version.