How to Configure and Rotate Private Wi-Fi Addresses in macOS Sequoia

Every network interface card (NIC) manufactured contains a factory-assigned Media Access Control (MAC) address—a unique 48-bit physical identifier. When a laptop connects to various Wi-Fi hotspots at airports, coffee shops, hotels, or corporate campuses, network routers log this permanent MAC address across connection sessions. Commercial data aggregators and network analytics providers correlate these logs to build detailed tracking profiles of device physical movements and browsing habits over time.

Beginning with macOS Sequoia, Apple expanded its network privacy architecture with Rotating Private Wi-Fi Addresses. Rather than broadcasting the static hardware MAC address or maintaining a single static randomised identifier, macOS dynamically alters the private MAC address periodically across connections, breaking cross-session tracking without interrupting active Internet connectivity.

Understanding Private Wi-Fi Address Modes in macOS Sequoia

In macOS Sequoia, Wi-Fi privacy settings provide three distinct operating states:

• Rotating: The most secure privacy setting. macOS generates a new randomised MAC address periodically (approximately every 24 hours) and upon reconnecting to the network, preventing network operators from correlating connection history.
• Static: Generates a single randomised private MAC address unique to that specific Wi-Fi SSID. While it conceals your factory hardware MAC, the address remains constant on that network, allowing home routers with DHCP reservations or parental filters to recognise your machine.
• Off: Broadcasts your Mac’s genuine factory hardware MAC address. Only recommended for secured enterprise networks enforcing strict IEEE 802.1X hardware port authentication.

Configuring Private Wi-Fi Addresses for Active Networks

To inspect or modify the MAC address randomisation policy for an active Wi-Fi connection:

1. Click the Apple menu () in the top-left menu bar and open System Settings…
2. Select Wi-Fi in the left sidebar.
3. Locate the Wi-Fi network you are currently connected to at the top of the pane, then click the Details… button beside its name.
4. In the network configuration sheet, locate the dropdown menu labelled Private Wi-Fi address.
5. Select your preferred setting:
   • Choose Rotating for public Wi-Fi, hospitality portals, and unencrypted networks.
   • Choose Static if your home router utilises MAC address filtering or assigns fixed local IP addresses based on MAC pairings.
6. Click OK to commit the change. macOS momentarily disconnects and re-establishes the connection using the newly generated MAC address.

Verifying Active MAC Address and Resolving Captive Portal Conflicts

You can verify which virtual MAC address macOS actively presents to the local gateway:

1. Hold down the Option key on your keyboard and click the Wi-Fi icon in the top macOS menu bar.
2. The extended diagnostic menu displays your active Wi-Fi connection details, including your current IP Address, Router IP, and active Wi-Fi Address.

Troubleshooting Captive Portals: Some hotel or airline Wi-Fi networks bind paid login sessions to the specific MAC address presented during billing authentication. If rotating addresses causes premature session disconnects, temporarily switch the network setting to Static for the duration of your stay.