Public vs. Private IP Address: What's the Difference?

Every time you connect a laptop, smartphone, or smart TV to your home Wi-Fi, that device uses an IP address to communicate over a network. But not every IP address serves the same purpose.

Understanding the difference between public and private IP addresses helps explain how your devices communicate with each other, how your router connects your home to the internet, and what websites can learn about your connection.

The main difference is that a public IP address is used for communication across the public internet, while a private IP address is used within a local network, such as your home or office. Many home networks use both: individual devices receive private IPv4 addresses, and a router commonly uses Network Address Translation (NAT) to let those devices share an internet-facing public IPv4 address.

For example, your laptop might use 192.168.1.10, while your smartphone uses 192.168.1.11. Both can access the same website through your router without needing separate public IPv4 addresses.

Let's explore how these addresses work, why they matter, and how you can find them on your own devices.

What Is a Public IP Address?

A public IP address is an address used for communication across the public internet. Publicly routable IP addresses allow networks and internet-facing systems to exchange traffic with other networks around the world.

For an IPv4 connection, your internet service provider (ISP) commonly assigns a public IP address to your internet connection or the equipment serving it. Organizations can also obtain address space through the appropriate internet number registries and providers.

When you visit a website, the service usually sees the public-facing source IP address associated with your connection. This address helps the website or its network infrastructure send responses back along the appropriate network path.

For example, when you open a news website on your laptop, your request travels through your local network and internet connection. The website does not normally see your laptop's private IPv4 address as the source address of the internet-facing connection. Instead, it sees the address that emerges from the network path, which may be your ISP's public address or an address belonging to a VPN or proxy.

A public IP address is not necessarily permanent. Some ISPs assign dynamic addresses that may change over time, while others offer static addresses intended to remain fixed.

Does a public IP address make a device directly accessible from the internet?

No. Public routing and actual accessibility are different things. A public IP address identifies a destination that may be reachable through internet routing, but a firewall, router configuration, closed ports, or other network policies can prevent incoming connections from reaching a particular device.

In addition, some internet connections use Carrier-Grade NAT, meaning the public IPv4 address is shared by multiple customers rather than assigned directly to an individual household router.

What Is a Private IP Address?

A private IP address is used within a local network, such as a home Wi-Fi network, office, school, or internal business network.

These addresses let devices communicate without requiring every laptop, printer, smartphone, or smart TV to have its own public IPv4 address.

Your home router commonly assigns private IPv4 addresses to connected devices through the Dynamic Host Configuration Protocol (DHCP). Depending on the network, addresses can also be configured manually.

For example, a home network might use:

• Laptop: 192.168.1.10
• Smartphone: 192.168.1.11
• Smart TV: 192.168.1.12
• Router's local interface: 192.168.1.1

These are illustrative addresses, not universal defaults. Your network may use different addresses.

The defining characteristic of a private IPv4 address is that it is not globally routable across the public internet. A device using 192.168.1.10 can communicate with compatible devices on its local network, but that private address is not used as a globally reachable internet destination.

This is possible because many unrelated networks can reuse the same private addresses. Your home router and an office router, for instance, might both use 192.168.1.1 without creating a global addressing conflict.

A private IP address does not mean that a device is offline. Your laptop can use a private address on your local network while accessing websites, streaming videos, or downloading files through a router or other network gateway.

It also does not mean the traffic is automatically encrypted or completely private. Private addressing describes how an address is used, not whether communications are secure.

Private IPv4 Address Ranges Explained

The IETF's RFC 1918 defines three blocks of IPv4 addresses reserved for private use.

The numbers after the slash use Classless Inter-Domain Routing (CIDR) notation. In simple terms, /8, /12, and /16 indicate how many leading bits define the network block.

One detail is particularly important: the private range beginning with 172 covers only addresses from 172.16.0.0 through 172.31.255.255. Not every address beginning with 172 is private.

Similarly, 192.168.1.1 and 10.0.0.1 are examples of possible private addresses, not addresses that every router must use.

There are also IPv4 addresses reserved for other special purposes, such as loopback, testing, and shared addressing by service providers. Therefore, an address outside the three RFC 1918 ranges is not automatically a usable public IP address. The IANA IPv4 Special-Purpose Address Registry documents many of these special-purpose ranges.

Public vs. Private IP Address: Key Differences

The following table summarizes the differences between a public and a private IP address.

The key distinction is scope. A private address identifies an interface within a local addressing environment, while a public address supports communication through the public internet.

Neither address type automatically determines whether a connection is secure. Security depends on factors such as encryption, firewall rules, authentication, software updates, and the network's configuration.

How Public and Private IP Addresses Work Together

Most traditional home IPv4 networks combine private addressing with NAT. Understanding this relationship makes the difference between public and private IP addresses much easier to visualize.

Imagine a home with a router, a laptop, a smartphone, and a smart TV.

The local network might look like this:

All private IPv4 addresses in this diagram are illustrative. Actual network configurations vary, and the router's internet-facing interface may not have its own public IPv4 address if the ISP uses another layer of address translation.

Here's what happens when the laptop opens a website.

The underlying mechanism is described in RFC 3022, Traditional IP Network Address Translator.

One important point: NAT is primarily a network address translation mechanism, not an encryption method or a complete security solution.

Can Multiple Devices Share the Same Public IP Address?

Yes. Multiple devices can access the internet through the same public IPv4 address.

Within a home, a router commonly lets a laptop, smartphone, smart TV, and other devices share one public-facing IPv4 address through NAT. The devices have separate private addresses, and the router tracks their individual connections.

However, sharing can also occur beyond the home.

Some ISPs use Carrier-Grade NAT (CGNAT) to let multiple subscribers share a public IPv4 address. In that arrangement, an ISP performs additional translation within its own network. The shared address space used for this purpose is documented in RFC 6598.

This distinction matters when troubleshooting connections. A subscriber behind CGNAT may not be able to accept unsolicited incoming connections in the same way as a subscriber with a directly assigned public IPv4 address and a suitable router configuration.

Hosting a game server, remotely accessing a home device, or configuring port forwarding may require additional steps or may be restricted by the ISP. The exact limitations depend on the network setup and service provider.

Does a Public IP Address Make Your Device Vulnerable?

A public IP address is not, by itself, proof that a device is vulnerable.

An IP address can provide information about the network through which a connection originates. IP geolocation databases can often estimate a country or broader region, but their results may reflect an ISP's network infrastructure rather than a person's actual location. An IP address alone normally does not reveal a person's name or exact residential address to an ordinary member of the public.

The more important question is whether a device or service can be reached and whether it has security weaknesses.

For example, exposure can depend on:

• Whether the device runs services that accept incoming connections.
• Whether ports are open or forwarded through a router.
• Whether firewall rules permit the traffic.
• Whether software contains unpatched vulnerabilities.
• Whether remote administration is configured securely.

A properly configured firewall can restrict unsolicited incoming traffic even when a network has a public IP address. Conversely, private addressing does not make a device invulnerable to threats originating inside the local network or through compromised software.

For everyday protection, keep operating systems and applications updated, use strong administrative passwords, secure your router settings, and maintain appropriate firewall protections. Focus on actual security controls rather than assuming that one address type is inherently safe.

How to Find Your Public and Private IP Addresses

Your public and private IP addresses serve different purposes, so you usually find them in different places.

How to Find Your Public IP Address

A public IP lookup service or a search for "What is my IP address?" can show the source address observed by the service.

Keep in mind that the result may not be the address assigned directly to your router. If you are using a VPN, the website will commonly display the VPN server's public-facing address. A proxy or another network intermediary may produce a similar result.

If your ISP uses CGNAT, the observed public IPv4 address may also be shared with other subscribers.

How to Find Your Private IP Address on Windows

1. Open the Start menu and search for Command Prompt.
2. Open Command Prompt.
3. Type ipconfig and press Enter.
4. Find the network adapter you're using, such as Wi-Fi or Ethernet.
5. Look for IPv4 Address.

The listed IPv4 address is the address assigned to your computer's network interface. The Default Gateway entry usually identifies the local router or gateway, not your computer's own address.

You can also open Settings → Network & internet, select your active Wi-Fi or Ethernet connection, and review the network properties. Menu names may differ slightly between Windows versions.

How to Find Your Private IP Address on macOS

1. Open the Apple menu and choose System Settings.
2. Select Network.
3. Choose your active Wi-Fi or Ethernet connection.
4. Open Details, then select TCP/IP.
5. Look for the IPv4 address.

Apple documents the relevant network settings in its Mac network configuration guide.

How to Find Your Private IP Address on Android

The exact menu names depend on the manufacturer and Android version, but a common method is:

1. Open Settings.
2. Go to Network & Internet or Connections.
3. Open Wi-Fi or the currently connected network.
4. Select the active network and look for its network details or IP address.

Some devices display the IP address immediately; others place it under an advanced or details menu. If these steps do not match your phone, search for "IP address" in Settings or consult the manufacturer's support documentation. Google's Android network settings guide explains how network menu layouts can vary.

How to Find Your Private IP Address on an iPhone or iPad

1. Open Settings.
2. Tap Wi-Fi.
3. Tap the information icon (ⓘ) next to the connected network.
4. Look under IPv4 Address for IP Address.

This is the device's address on that Wi-Fi network. If you switch to another Wi-Fi network or use a cellular connection, the applicable network addressing can be different.

Static vs. Dynamic IP Addresses: Is That the Same as Public vs. Private?

No. Public versus private and static versus dynamic describe two different properties of IP addressing.

Public versus private describes where and how an address is used.

Static versus dynamic describes whether an address is intended to remain fixed or may change through an assignment process.

A public IP address can be static or dynamic. An ISP might assign a dynamic public address that changes periodically, or offer a static address for a particular service.

Private IP addresses can also be static or dynamic. A home router might automatically assign your laptop a private IP address through DHCP. A printer might use a manually configured address or a DHCP reservation so that it consistently receives the same address on your local network.

Therefore, a private address is not necessarily dynamic, and a public address is not necessarily static. These labels answer different questions.

How Do Public and Private IP Addresses Work With IPv6?

IPv6 is the newer version of the Internet Protocol. It uses 128-bit addresses rather than IPv4's 32-bit addresses, providing a much larger address space. The protocol's basic specifications are documented in RFC 8200.

IPv6 has addressing categories that differ from the familiar private IPv4 ranges.

For example, Unique Local Addresses (ULAs) are designed for local communications and are not expected to be routed across the global internet. Their addressing format is defined in RFC 4193. The ULA block is fc00::/7, with locally assigned prefixes commonly using fd at the beginning.

IPv6 also has link-local addresses, typically in the fe80::/10 range, which are used on a directly connected network link. These are different from ULAs.

In addition, devices can use globally scoped IPv6 addresses for internet communication. Depending on the network, an individual device may have a globally routable IPv6 address rather than relying on the same shared-public-IPv4-and-NAT arrangement common in home IPv4 networks.

However, a globally scoped IPv6 address does not automatically mean a device is accessible from anywhere on the internet. Firewalls, router policies, and other security controls still determine what incoming traffic is allowed.

The key takeaway is that IPv6 has its own address types and network behavior. The three private IPv4 ranges defined in RFC 1918 should not be applied to IPv6.

Do VPNs Change Your Public or Private IP Address?

A virtual private network (VPN) typically routes selected or all internet traffic through a VPN server, depending on its configuration.

When you visit a website through a VPN, the website commonly sees the VPN server's public-facing IP address instead of the public IP address associated with your ordinary internet connection. This can change the IP address visible to the website.

However, connecting to a VPN does not necessarily change the private IP address assigned to your device by your home router. Your laptop may still have 192.168.1.10 on its local Wi-Fi network while its internet traffic travels through a VPN tunnel.

VPN software can create additional virtual network interfaces and assign its own addresses to the tunnel. These are distinct from the address assigned to the device's local Wi-Fi interface.

The exact behavior depends on the VPN implementation, device, and routing configuration.

A VPN can improve privacy in certain situations, but it does not make a user completely anonymous or eliminate every security risk. To understand the technology in more detail, read What Is a VPN?.

Frequently Asked Questions

Final Thoughts

Public and private IP addresses serve complementary purposes. Public IP addresses support communication across public networks, while private IPv4 addresses let devices communicate within local networks without requiring each device to have its own public IPv4 address.

Routers and NAT commonly connect these two addressing environments, making it possible for multiple devices to use the same internet-facing IPv4 address. Other arrangements, including CGNAT and IPv6, introduce additional details, but the basic distinction remains useful.

Understanding these concepts makes it easier to troubleshoot connectivity, interpret router settings, recognize what websites can see about your connection, and make informed decisions about online privacy.

For a deeper foundation, continue with Synth Visual's guides to what an IP address is, how DNS works, and what a VPN does.