Privacy and what your IP reveals

The calm version. What your address actually exposes, what it does not, and which worries are worth your time.

Why this page exists

Search for almost any question about IP addresses and privacy and you will land on a page that wants to sell you a VPN. Those pages tend to overstate the danger, because an alarmed reader converts better than a reassured one. Being scared is not the same as being informed, and the two lead to different decisions.

So this page tries to be accurate in both directions. Some of what you may have read is overblown. Some of it is real and gets less attention than it should. We sell nothing, and there are no affiliate links anywhere on this site.

1. What your address actually reveals

Full article →

Your address is not meaningless, and it is not a home address. It sits somewhere in between, and knowing exactly where saves a lot of unnecessary worry.

What an IP address does and does not reveal An IP address generally reveals your internet provider, a rough area, and the type of connection. It does not reveal your name, your street address, which device you used, or what you were doing. What it generally does reveal Your internet provider, by name Your country, almost always correctly A region, often correctly A city, roughly half the time Home, mobile, business or data center What it does not reveal Your name Your street address Which device in your home What you were doing Anything you typed or opened The one record that connects an address to a person Your provider knows which customer held an address at a given moment. That record is not public, and getting it normally takes a subpoena or a court order.
The left column is public information anyone can look up in seconds. The right column is not derivable from the address at all, by anyone, no matter how technical they are.

The city estimate deserves particular skepticism. IP geolocation is inference rather than measurement, and city-level accuracy is roughly a coin flip in general and much worse on mobile, satellite and VPN connections. If a site showed someone your city and it happened to be right, that is partly luck.

2. Can someone find your home from your IP?

Full article →

No, not from the address by itself. That is the honest answer and it holds up under scrutiny.

The record connecting an address to a named subscriber sits with your internet provider. It is not published, not sold to the public, and not available through any lookup tool no matter what the tool claims. Getting it normally requires a subpoena or a court order, which means a legal process rather than a person with your address and bad intentions.

What a stranger can get is what the diagram above shows: your provider, a rough area, and the connection type. In a dense city that area may hold hundreds of thousands of people. In a rural area it may still be a whole county, and it is frequently the wrong county.

The part that is real

The genuine risks tied to your address are not someone appearing at your door. They are denial of service attacks aimed at your connection, which is a real nuisance for people who stream or play competitively, and being included in coarse targeting, where your address is used to guess a region for ads or pricing. Both are worth understanding. Neither is a physical safety issue.

3. What someone can genuinely do with it

Full article →

Sorted by how often it actually happens, rather than by how alarming it sounds.

ClaimReality
Guess your rough locationTrue. Country almost always, city about half the time
Identify your internet providerTrue. Public registry data, seconds to look up
See you are on a VPN or data centerTrue. Those ranges are well known and widely flagged
Flood your connection to knock you offlineTrue and the main real risk. Requires no access to your network
Try to reach services you have exposedTrue if you have opened ports. Automated scanning is constant and impersonal
Find your name and street addressFalse without legal process to your provider
Read your messages or see your screenFalse. An address is a destination, not access
Get into your computer just from the addressFalse. That needs an exposed and vulnerable service, which is a separate problem
Identify which person in the houseFalse. Everyone behind the router shares one address

4. Who sees your address in normal use

Full article →

Your address is not a secret, and it was never designed to be one. It is a return address, and everything you connect to needs it in order to answer.

None of that is a breach. It is how the protocol works, and it is the same reason we can show you your own address on our front page without asking you anything.

5. How it compares to cookies and fingerprinting

Full article →

This is the part most often left out, and it changes what a reasonable response looks like. Your address is only one identifier among several, and it is the weakest of them.

How long each identifier follows you An IP address changes on its own and is shared by a household. A cookie lasts until it is cleared. A browser fingerprint survives clearing cookies. A logged-in account identifies you outright. Changing your IP address addresses only the weakest of the four. Changing your IP address moves the least sticky of the four IP address days to months Changes on its own, and everyone in your home shares it. Cookies until cleared You can delete these, and a new address does not. Fingerprint survives clearing Built from your fonts, screen, timezone and hardware quirks. Logged in it is just you No inference needed. You told them who you are. Bars show rough persistence, not a measurement. The ordering is the point.
An address changes on its own and is shared with your whole household. A fingerprint survives clearing cookies. An account login skips inference entirely. Anyone selling an address change as anonymity is selling you the smallest of the four.

The practical consequence: if your concern is being tracked across sites, an address change barely moves the needle. Browser configuration, cookie policy and account hygiene do far more. If your concern is a specific person knowing roughly where you are, the address is relevant and the others are not. Different worries, different answers.

6. What actually helps, and what does not

Full article →

A VPN

Genuinely changes what websites see, since they observe the VPN server's address instead of yours. Worth knowing what it does not do: your VPN provider can now see the traffic your internet provider used to, so you have moved the trust rather than removed it. It also does nothing about cookies, fingerprints or being logged in.

Tor

Much stronger for concealing an address, and much slower. Appropriate when the threat is serious. Overkill for wanting fewer targeted ads.

A proxy

Changes your apparent address for whatever is configured to use it, which is often only one application. Frequently sold as equivalent to a VPN and frequently is not.

Mobile data instead of home Wi-Fi

Gives a different address that is shared with a great many other subscribers. Crude, free, and effective for the narrow case of not wanting a particular service to see your home connection.

Things that do not help, despite being suggested constantly

Restarting a laptop, changing its private address, or turning off Wi-Fi on one device. All of those are inside your network, and your public address belongs to the connection rather than to any device on it. Incognito mode also does nothing here: it affects local history and cookies, not what the network sees.

7. If you think your address is exposed

Full article →

Usually this follows someone in a game or a chat saying they have it. Here is a proportionate response.

  1. Decide whether it actually matters. Someone holding your address can attempt to disrupt your connection. They cannot find your house or get into your machine with it. The first hour of worry is usually about the wrong thing.
  2. Get a new address if you want one. Powering the router off for a few hours often does it. See why your IP changes for why it sometimes does not.
  3. Ask your provider about their protections. Most consumer providers filter volumetric attacks upstream, and many will reassign an address on request if you explain why.
  4. Close anything you opened. If you previously set up port forwarding for a game or a server and no longer need it, remove it. An exposed service is the one thing that turns an address into a real attack surface.
  5. Stop leaking it. Peer to peer voice chat is the usual source. Using a service that relays through its own servers removes the exposure entirely.

Read any section in full

Every section above has its own article, with more room and more examples.