Understanding MAC Address Rotation in iOS18

Introduction

Apple released iOS 18 in September 2024. It includes many new features to improve user experience, security, and privacy. One of the updates is the introduction of a MAC address rotation strategy. Apple calls this the Private Wi-Fi address. MAC rotation is a feature aiming to boost user privacy on insecure networks. It makes it harder for public networks to track users and their devices by their MAC addresses.

What is MAC Address Rotation?

MAC address rotation is a feature introduced by Apple triggering your phone to periodically change the ID with which the network identifies the device. A Media Access Control (MAC) address is a unique ID for network interfaces. It helps devices communicate on a physical network. Historically, every device had a single MAC address. It was used to coordinate network activity and authorization across the network. Starting with iOS 14, Apple created virtual MAC addresses for each network. Android devices soon adopted this feature, too.

In iOS18, however, this rotation happens every two weeks, ensuring the device’s MAC address is not static and thus harder to track. IOS18 takes it further by making the rotation more frequent and seamless. iPhone users have the flexibility to

select between three options for their MAC address settings:

• Off: disables rotation and uses the original MAC address;
• Fixed: assigns a consistent MAC address for each network;  
• Rotating: periodically changes its MAC address.

It's worth noting that on secure networks, like those at home or in offices, Apple uses a fixed MAC address for each Wi-Fi network (SSID) you connect to. This is setting is optimized for residential-based networks, unlike the MAC address rotation settings intended for commercial areas and networks.

Why Apple Introduced MAC Address Rotation

Apple’s primary reason for introducing MAC address rotation is to address growing privacy and security concerns. In today’s world, digital tracking and network spoofing are becoming easier. Static MAC addresses on open networks can track a device’s location and behavior over time. However, by rotating the MAC address, Apple aims to make it impossible for scrupulous third parties to track an unassuming user’s network activity.

This translates to enhanced security and privacy for end-users. It’s now much harder for advertisers, data brokers, and hackers to track online activities. This feature also helps prevent cyber-attacks that use MAC address spoofing or rogue access points.