What Is an IP Address and Does It Identify You?
Short answer
An IP address is the routing address for your internet connection, so replies know where to come back to. It identifies a household or network, not a person. A website sees roughly your city and your provider, and only that provider holds the records linking it to your name and account.
On this page
An IP address is a routing address. When your device asks for a web page, it includes an address for the reply to come back to, in the same way a letter carries a return address. Without it, nothing could find its way back.
It belongs to your connection, not to you. The address a website sees is almost always your router’s, shared by every device in the house, and often shared by other households as well.
The two addresses you have
People conflate these constantly and the distinction explains most confusion.
| Public IP | Private IP | |
|---|---|---|
| Assigned by | Your internet provider | Your router |
| Looks like | 86.142.9.74 or an IPv6 string |
192.168.1.x, 10.0.0.x |
| Visible to | Every site you visit | Only devices in your home |
| Shared by | Everyone on your connection | Nobody, unique locally |
Your router performs network address translation: every device inside the house uses a private address, and the router rewrites outgoing traffic to use the single public address, keeping a table so replies get back to the right device.
To see yours: the public one is reported by any “what is my IP” page. The
private one is under network details, via ipconfig on Windows, Settings →
Network on macOS, or the Wi-Fi details on a phone, where it sits a line or two
from the device’s MAC address.
IPv4 and IPv6, briefly
IPv4 addresses are four numbers separated by dots, and there are about 4.3 billion of them. That ran out. IPv6 uses eight groups of hexadecimal digits and provides a quantity large enough that exhaustion is not a concern.
Most connections now run both. The practical consequence for you is that some sites see an IPv4 address and some see an IPv6 one, and they will not match. That is normal, not a misconfiguration.
IPv6 has one privacy wrinkle. Early implementations derived part of the address from the device’s hardware identifier, which made individual devices trackable across networks. Privacy extensions, now standard and enabled by default, generate temporary addresses that rotate instead.
What a website actually learns
This is where popular belief diverges most from reality.
It learns, reasonably reliably:
- Your internet provider, from the address block registry.
- Your approximate region: country almost always, city often, and with an accuracy that varies from “correct” to “a different county”.
- Whether the address belongs to a data centre, a VPN, or residential broadband.
It does not learn:
- Your name, address or identity.
- Which device in your house is connecting.
- Anything about you specifically, as opposed to your connection.
Those lookup sites that pin you to a street map are doing something cruder than they appear. When a provider’s registry does not specify a location, databases fall back to the provider’s regional centre or, at worst, the country’s geographic midpoint. There is a well-documented history of specific rural addresses receiving years of misdirected visitors because they happened to sit at a default coordinate.
Mobile connections are worse still. Carrier-grade NAT puts hundreds or thousands of subscribers behind one public address, so the geolocation may point at a gateway in a different city from everyone using it.
Who can link it to you
Exactly one party holds the record: your internet provider. It knows which account held which address at which time, because it has to for billing and support.
Obtaining that record normally requires a court order or an equivalent legal process, and the specifics vary by country. Rights-holders pursuing copyright claims, and law enforcement, are the usual requesters.
Everyone else is working from inference. A website can correlate an IP address with a logged-in account, a cookie, or a browser fingerprint, and once you log in anywhere, the address stops mattering, because you have identified yourself directly. That is the part worth noticing: for the sites you actually use, your IP address is among the least informative things they hold about you.
When hiding it is worth the trouble
A VPN replaces the address sites see with the VPN server’s. That is a real change, and it genuinely helps in a few situations:
- Untrusted networks, though less than it once did now that nearly everything is encrypted anyway and HTTPS covers the connection itself.
- Region-locked content, within whatever the service’s terms allow.
- Avoiding provider-level logging of which sites you connect to.
- Masking your address from other users in games and peer-to-peer apps, which is the clearest case of all.
What it does not do is make you anonymous. You have moved your trust from the provider to the VPN operator, who can see the same traffic and who has a business reason to tell you they do not log it. Your logged-in accounts, your cookies and your browser fingerprint all still identify you precisely, and the CAPTCHA systems will notice the change immediately, since a VPN address is the single most common reason for being handed endless image grids.
Tor goes further by routing through three relays so no single one knows both ends, at a substantial cost in speed and in sites that refuse Tor traffic outright.
Realistic expectations
For almost everyone, an IP address is plumbing. It is not a secret, it is not sensitive on its own, and the effort spent hiding it would be better spent on a password manager and two-factor authentication, which protect against things that actually happen.
Take it more seriously in two cases. If you stream or play competitively, your address is worth hiding because denial-of-service attacks against individuals are real and cheap. And if you are in a situation where the sites you visit could be used against you, the threat model is different enough that general advice does not apply — the relevant tools are Tor and operational discipline, not a consumer VPN subscription.