Whenever your Mac connects to a Wi-Fi network, it broadcasts a unique Media Access Control (MAC) address assigned to its network hardware interface. Over time, commercial public networks, cafes, airports, and ISP routers can correlate this hardware identifier to track your physical movement and browsing habits across multiple locations. In macOS Sequoia, Apple expanded its mobile privacy protections to the Mac desktop, introducing configurable Private Wi-Fi Addresses that mask your physical MAC address using randomised or rotating software identifiers.
How Private Wi-Fi Addresses Protect Your Privacy
In earlier macOS releases, your hardware MAC address remained identical across every Wi-Fi network you joined. With Private Wi-Fi Addresses enabled in macOS Sequoia, your Mac generates distinct software-assigned MAC addresses per network SSID. To combat advanced network tracking, Apple provides three distinct privacy tiers:
| Mode | MAC Address Behaviour | Recommended Scenario |
|---|---|---|
| Rotating | Generates a new random MAC address periodically (every 24 hours) or when rejoining. | Public Wi-Fi hotspots, hotels, coffee shops, and public transit. |
| Fixed | Generates a single randomised MAC address that stays constant for this specific network. | Trusted home or office networks that use DHCP static reservations. |
| Off | Transmits the factory hardware MAC address directly to the router. | Enterprise networks enforcing 802.1X device access control lists (ACLs). |
How to Configure Private Wi-Fi Addresses in System Settings
Private Wi-Fi Address settings are configured on a per-network basis. You can customise the privacy level for your current connection or previously remembered networks:
- Open the Apple menu () in the top left corner of your screen and select System Settings.
- Click Wi-Fi in the sidebar.
- Locate your currently connected network at the top and click the Details… button next to its name.
- In the configuration sheet, locate the Private Wi-Fi address dropdown menu.
- Select your preferred mode:
- Rotating: Maximum tracking resistance for public venues.
- Fixed: Standard privacy for consistent local IP leasing.
- Off: Disables MAC randomisation completely.
- Click OK to save your changes. Your Mac will momentarily disconnect and reconnect to the network using the new virtual MAC address.
Verifying Your Virtual MAC Address via Terminal
To inspect your current active MAC address and verify that your physical hardware address is concealed, use the macOS ifconfig utility:
# Identify your Wi-Fi interface (typically en0)
networksetup -listallhardwareports | grep -A 2 Wi-Fi
# Query the active MAC address on en0
ifconfig en0 | grep etherCompare the returned ether value against your Mac’s permanent hardware address displayed under System Settings > General > About > System Report > Network > Wi-Fi. If private addressing is active, the two strings will differ.
Managing Known Networks and Corporate Wi-Fi
If you connect to an office network or university campus that requires registered hardware MAC addresses for access, follow these steps to turn off randomisation for that network only:
- Navigate to
System Settings > Wi-Fi. - Scroll down to the Known Networks list.
- Click the More Actions (…) icon next to the corporate network name and choose Network Settings….
- Set Private Wi-Fi address to Off.
- Click OK. Your other home and public connections remain protected with private addresses.
Troubleshooting Private Wi-Fi Address Issues
- Repeated captive portal login prompts: In Rotating mode, public Wi-Fi splash pages may prompt you to sign in again after your address rotates. Switch that connection to Fixed to maintain session cookies while keeping your true hardware ID private.
- Loss of static IP assignment: If your home router assigns static IP addresses based on MAC filtering, switching from Off to Fixed or Rotating will alter your leased IP. Update the router’s DHCP reservation table with your Mac’s new virtual address.
- Network connection drops when changing modes: This is expected behaviour. When you change the MAC address setting, the network interface resets its link to complete a fresh DHCP handshake.