Mainstream devices now treat Wi-Fi address randomisation as standard privacy protection

Major operating systems including Apple, Microsoft, and Google now incorporate built-in Wi-Fi address randomisation, marking a significant shift from manual MAC address changes and enhancing user privacy in public networks.

For ordinary privacy use, the current advice is no longer to force a custom MAC address on every device. Apple, Microsoft and Google now treat address randomisation as a standard Wi‑Fi privacy control, built into mainstream operating systems and designed to stop a device presenting the same identifier everywhere it goes. That marks an important shift from older how-to guides: on current Apple software, users can choose “Off, Fixed, or Rotating” for a network, while Windows offers random hardware addresses without any registry edits or third-party tools. Help Desk Geek, in a recent consumer guide, argues that these built-in controls should be the starting point, with manual overrides kept mainly for testing and administration.

The privacy case is straightforward. Microsoft says a Windows device that is searching for wireless networks can expose its unique hardware address while scanning, and warns that “shopping malls, stores, or other public areas” may use that identifier to follow movement. Apple makes the same point from the other side, saying its devices now identify themselves to each network with a different Wi‑Fi address by default. RFC 9797, the Internet standard describing randomised and changing MAC addresses, frames the practice as a response to the privacy risks created when a device, its traffic, its location and its user can all be linked through a persistent network identifier.

That privacy gain is not free of operational consequences. Networks that tie rules to a MAC address may treat the same phone or laptop as a new client after a change, which can affect access controls, DHCP reservations or device-specific policies. Google explicitly notes that Android 10 and later keep both a hardware Wi‑Fi MAC address and a separate randomised address, and says anyone configuring parental controls should include both. Apple likewise says some organisations may need to update Wi‑Fi security settings to work properly with private addresses, or use mobile-device-management policies to switch the feature off on enrolled hardware. RFC 9797 adds the lower-level explanation: peers and routers cache the relationship between IP and MAC addresses, so a changed address can leave stale state behind until those mappings are refreshed.

Apple’s newer implementation is the most detailed of the mainstream platforms. On iOS 18, iPadOS 18, macOS Sequoia 15, watchOS 11 and visionOS 2, the company offers three per-network modes. “Off” uses the hardware MAC address. “Fixed” keeps a private address that stays stable for that network. “Rotating” changes the private address every two weeks. Apple says devices choose Fixed by default on networks using WPA2 or stronger security, and Rotating by default on weakly secured or open networks. It also says that if a user makes a device forget a network, the private address for that network is forgotten too, unless that happened less than 24 hours earlier.

Windows presents the same privacy idea differently. Microsoft documents two controls: one for all Wi‑Fi networks and another for a specific saved network. In the latter case, the randomised address is used the next time the PC reconnects. Consumer reporting from Android Authority suggests some Windows installations go further and expose an “On” or “Change Daily” choice in Settings, implying that behaviour can vary by version, hardware or interface. That matters because Windows documentation is focused on privacy settings, while older manual instructions still circulate widely online even though they are no longer the easiest route for most users.

On Android, Google’s official guidance is narrower but useful. The company tells users to find the phone’s permanent Wi‑Fi MAC address under About phone, then look up the separate “Randomized MAC address” from the settings page for an individual wireless network. That distinction matters for home administrators as much as for privacy-conscious users, because the identifier seen by a router may not be the same one printed in the device information screen. Google also warns that interface labels vary by manufacturer, and advises people who cannot find the setting to search the device settings for “MAC address” or consult the handset maker.

Manual MAC changes still exist, but they now sit in a more specialist category. On Windows, guides from Android Authority and Help Desk Geek still point to adapter properties and the “Network Address” field for supported hardware, with the custom value entered as 12 hexadecimal characters and then checked with ipconfig /all after a restart. On macOS, older terminal-based methods remain possible, but Apple’s current documentation shows that recent Macs also expose private-address controls directly in Wi‑Fi settings. Help Desk Geek cautions that not every adapter or driver accepts a manual override, and says users should assume the driver is the problem if the chosen address never appears in system output or keeps reverting.

The technical standard helps explain why that caution is sensible. RFC 9797 notes that self-assigned IPv6 addresses and static-address configurations depend on mechanisms such as duplicate-address detection and neighbour discovery to bind network-layer addresses to link-layer identifiers. Frequent MAC changes can therefore trigger extra address-resolution traffic and, at scale, even contribute to cache pressure in network equipment. In practical terms, that means a random or spoofed MAC address is best seen as a privacy or lab-testing tool, not a magic way to improve connectivity. For everyday use on phones and laptops, the cleaner option is usually the one now endorsed by the platform vendors themselves: enable the built-in per-network privacy feature, and reserve manual spoofing for authorised testing, troubleshooting or controlled network administration.