Every site you visit sees your public IP address. It sounds alarming, and plenty of scam pop-ups play on that fear, but the truth is more mundane. Your IP reveals some things and hides many others. Here is the honest breakdown of what it does and does not expose.
What a site can see from your IP
- Approximate location. Usually your city or region, sometimes just the country. It is derived from databases that map IP ranges to areas, and it is often off by tens of kilometres.
- Your ISP or mobile carrier. The company that assigned the address, for example Comcast, BT, or a mobile network.
- Connection type and rough network. Whether you are on a residential, business, mobile, or data-centre connection (the last is how VPNs are often detected).
- Timezone, inferred from the location.
You can see exactly what your own connection exposes with our IP address lookup, which shows the location, ISP, and timezone tied to your current address.
What it does not reveal
Despite what a scary ad might claim, your IP address alone does not reveal your name, your home street address, your exact GPS position, your browsing history, or what is on your device. Only your ISP knows which subscriber an address was assigned to at a given moment, and they will only hand that over to law enforcement with a legal request. A random website cannot look you up by IP.
The geolocation is deliberately coarse. On mobile especially, your IP might place you in a city an hour away because it traces back to a carrier gateway, not your handset.
Static vs dynamic, IPv4 vs IPv6
Most home connections get a dynamic IP, an address that changes every so often when the ISP reassigns it. Businesses sometimes pay for a static IP, one that stays fixed. Separately, the internet is transitioning from IPv4 (the familiar 203.0.113.5 format) to IPv6 (longer, colon-separated), because the global free pool of IPv4 addresses has been depleted since 2011. Many connections now have both.
When you would want to hide it
A VPN replaces your visible IP with the VPN server's, so sites see that server's location and provider instead of yours. That is genuinely useful for privacy on public Wi-Fi, for avoiding coarse location tracking, and for accessing region-specific content. It is not a cloak of invisibility, though: you are simply trusting the VPN provider with the traffic your ISP would otherwise see, so choose a reputable one.
A quick way to confirm a VPN is actually working is to check your IP before and after connecting. Run the IP address lookup with the VPN off, then again with it on; if the location and ISP change to the VPN's, your real address is hidden.
There is one leak worth knowing about even with a VPN connected. WebRTC is the browser feature behind video calls and other real-time features, and it can query your network directly for connection candidates and hand your real IP to a page in the background, bypassing the VPN tunnel entirely. Chrome, Firefox, and Edge all ship WebRTC enabled by default. Most VPN apps now patch this, but it is worth checking with a dedicated WebRTC leak test after connecting, and disabling WebRTC in the browser or using its built-in leak protection if your VPN does not handle it.