Does iCloud Private Relay fully mask your IP?

Quick answer

Apple’s iCloud Private Relay sounds like a built-in VPN, and it does hide your IP from the sites you visit — but it’s narrower than a full VPN in important ways. Here’s what it actually masks, and what it doesn’t.

What does iCloud Private Relay do?

Private Relay (part of iCloud+) routes your Safari traffic through two separate relays so that no single party knows both who you are and what you’re visiting. Apple sees your IP but not your destination; the second relay sees the destination but not your IP. Sites see a relay IP in your general region, not your real address — so your IP is genuinely masked from them.

The key limitation: Safari only

This is what trips people up. Private Relay covers Safari browsing and some background traffic — not your whole device. Traffic from other browsers (Chrome, Firefox) and most apps does not go through it. So if you check your IP in Chrome, you’ll see your real address even with Private Relay on. A full VPN, by contrast, covers all traffic.

It keeps you in your region

Unlike a VPN, Private Relay deliberately keeps your apparent location in your broad geographic region (you can choose “maintain general location” or broaden to country). It’s designed for privacy, not for appearing in another country — you can’t use it to bypass geo-restrictions the way you would a VPN.

On public Wi-Fi

On an untrusted hotspot, Private Relay does encrypt and relay your Safari traffic, which protects that browsing from local snooping — a real benefit. But again, only Safari. Apps and other browsers on the same network aren’t covered, so it’s not a complete public-Wi-Fi shield the way a device-wide VPN is.

How to check what it’s doing

Load our homepage in Safari with Private Relay on — you’ll see a relay IP in your region, not your real one. Then load it in another browser: your real IP appears, confirming the Safari-only scope. That side-by-side makes the limitation concrete.