Summary of changes in iOS/iPadOS 18 and macOS 15 regarding MAC address handling #
This is a detailed summary and explanation of the changes made by Apple, as well as what users need to do to maintain long-term access to the network:
iOS/iPadOS: #
In previous versions of iOS/iPadOS, there were two options for Private Wi-Fi Address:
- Off: The physical hardware MAC address is used.
- On: A randomly generated MAC address that remains the same for the specific SSID network.
The default setting was On.
Starting from iOS/iPadOS 18/macOS 15, the options have been expanded to three:
- Off: The physical hardware address is used.
- Fixed: A random MAC address that does not change for the SSID (same as before). (This option is the default for encrypted networks.)
- Rotating: A randomly generated MAC address that changes periodically, approximately every two weeks. (This option is the default for open networks.)
The default setting is Fixed for encrypted networks, meaning the behavior remains the same as in previous versions. For unencrypted networks, the default setting is Rotating.
Note:
- When upgrading to iOS/iPadOS 18 from a previous version, the same MAC address will be used as before, provided the default settings for Private Wi-Fi Address remain unchanged.
macOS: #
In previous versions of macOS, there was no support for Private Wi-Fi Address. The only option was:
- The physical hardware address, which was used for all networks.
Starting from macOS 15 (Sequoia), the Private Wi-Fi Address feature has been introduced with the same three options as in iOS/iPadOS:
- Off: The physical hardware address is used.
- Fixed: A random MAC address that does not change for the SSID. (This option is the default for encrypted networks.)
- Rotating: A randomly generated MAC address that changes periodically, approximately every two weeks. (This option is the default for open networks.)
The default setting is Fixed for encrypted networks, meaning the behavior remains the same as in previous versions. For unencrypted networks, the default setting is Rotating.
Note:
- When upgrading to macOS 15, devices will automatically start using a new Fixed (randomized) MAC address for each encrypted network and a Rotating one for unencrypted networks.
What does this mean for users of Sign In & EntryPoint who upgrade to iOS/iPadOS 18 and macOS 15? #
-
iPhones & iPads #
With the default settings for Private Wi-Fi Address, users do not need to take any action since the same MAC address will be used when connecting to open networks, as long as the access time is under two weeks.
If the solution offers access longer than two weeks (e.g., BYOD), users need to select Fixed (or alternatively Off) to avoid having to log in again after approximately two weeks.
-
MacBooks #
By default, MacBooks will be assigned a new MAC address for each SSID, which leads to two alternatives:
a) For users who upgrade to macOS 15, a new login to the network will be required since macOS now applies the same MAC address functionality as iOS and iPadOS, introducing the three modes.
b) Users who want to avoid re-registering their device can set Private Wi-Fi Address to Off:
Settings -> Wi-Fi -> {YOUR_SSID} -> Network Details -> Private Wi-Fi Address -> Off.