Apple’s iCloud Private Relay encrypts DNS requests and routes Safari web traffic through two separate, secure internet relays to protect personal browsing privacy. However, certain local Wi-Fi environments—such as enterprise corporate networks, school campus Wi-Fi, hotel captive portals, and home setups with custom parental filters or local network attached storage (NAS)—require direct DNS visibility or block encrypted proxy connections. When this occurs, iOS and iPadOS display notifications stating that Private Relay is unavailable on the current network. Rather than disabling iCloud Private Relay entirely across your entire device, you can disable it selectively for specific Wi-Fi networks.
How iCloud Private Relay Interacts with Wi-Fi Networks
On Apple devices, per-network Private Relay behaviour is managed through the Limit IP Address Tracking setting in Wi-Fi connection preferences:
- Enabled (Default): iOS masks your real IP address and encrypts unencrypted DNS lookups in Safari and supported background services using Apple’s dual-hop architecture.
- Disabled: iOS bypasses the dual-hop relay system exclusively while connected to that specific network SSID. Traffic resolves using the local router’s assigned DNS servers, allowing captive login pages, local intranet resources, and network firewalls to operate without disruption.
- System-wide Protection Preserved: Disabling this toggle on a particular Wi-Fi connection does not affect your cellular connection or any other saved Wi-Fi networks, which continue using Private Relay uninterrupted.
Disabling iCloud Private Relay for a Specific Wi-Fi Network on iPhone and iPad
To turn off Private Relay for your currently connected Wi-Fi network:
- Open the Settings app on your iPhone or iPad.
- Tap Wi-Fi.
- Verify that you are connected to the network requiring adjustment, then tap the blue Info icon (i) located next to the network name (SSID).
- Scroll down the network properties page to locate the Limit IP Address Tracking toggle.
- Tap the toggle to switch it to the Off position (grey).
- If an alert appears warning that Private Relay will be turned off for this network, confirm the prompt.
- Disconnect and reconnect to the Wi-Fi network, or toggle Airplane Mode on and off, to flush the existing socket connections and apply the new network routing state.
Managing Known and Previously Saved Wi-Fi Networks
If you need to configure Private Relay settings for an office, school, or guest network before arriving on site:
- Open Settings > Wi-Fi.
- Tap Edit in the top-right corner of the screen and authenticate using Face ID, Touch ID, or your passcode.
- Locate the target network in your Known Networks list.
- Tap the Info icon (i) beside its name.
- Toggle Limit IP Address Tracking to Off.
- Tap Done in the upper right corner to save your changes. The next time your device associates with that network, it will automatically connect without attempting to engage Private Relay.
Troubleshooting Captive Portals and Local Network Access
If you encounter persistent captive portal redirect issues or cannot access local servers after toggling off Limit IP Address Tracking:
- Clear Safari Cache: Open Settings > Safari and tap Clear History and Website Data to remove stale redirect loops.
- Check Private Wi-Fi Address: On some enterprise networks, the randomised MAC address feature also causes authentication conflicts. In the same network Info screen, adjust Private Wi-Fi Address from Rotating to Fixed or Off if required by your network administrator.
- Verify System-Wide Private Relay Status: Check Settings > [Your Name] > iCloud > Private Relay to confirm the overarching service remains green and active for other network interfaces.