
Your router says a new device joined the network, but nothing new entered the house. The unfamiliar entry may be the same iPhone using a private Wi-Fi address rather than its permanent hardware address.
The key is to compare the router entry with the Private Wi-Fi Address shown on the phone before blocking anything. On secure home networks, current Apple software normally uses a stable Fixed private address. Resetting network settings, forgetting the network or changing the private-address mode can create a new entry.
What the router is actually identifying
A router does not recognize a phone by its owner’s name. It primarily sees a network identifier called a MAC address, along with a hostname and other limited information. Router labels such as “Joe’s iPhone” are conveniences layered over that identifier.
Private addresses reduce passive tracking across different networks. The same phone can use one identity at home and another at a hotel or coffee shop. That is useful for privacy, but it can confuse router rules that assume a device always presents the factory MAC address.
Fixed, Rotating and Off
| Apple setting | What it does | Best fit |
|---|---|---|
| Fixed | Uses a private address that stays stable for that network. | Secure home and work networks where router rules should remain attached. |
| Rotating | Changes the private address periodically. | Open or weakly secured public networks where tracking resistance matters more than persistent router rules. |
| Off | Uses the device’s hardware MAC address. | Exceptional troubleshooting cases or networks that cannot operate correctly with private addressing. |
Apple says Fixed is the default when joining a network protected by WPA2 or stronger, while Rotating is the default for weak or open networks. That means a secure home network should not normally produce a brand-new identity every day.
Why the device may still appear new
- The Wi-Fi network was forgotten and joined again.
- Network settings or the entire phone were reset.
- The network’s name or security configuration changed enough to be treated as a different network.
- The Private Wi-Fi Address setting was switched between Fixed, Rotating and Off.
- The router removed an old inactive record and later recreated it under a different label.
How to keep parental controls and device groups stable
- On the iPhone, open Settings → Wi-Fi and tap the information button beside the home network.
- Open Private Wi-Fi Address and use Fixed for a trusted WPA2/WPA3 home network.
- Reconnect, then find the current iPhone entry in the router.
- Rename that entry clearly and reapply its schedule, device group or VPN rule.
- Remove obsolete duplicate records only after confirming which entry is currently active.
Before you block the “unknown” device
Open the device details in the router and note its current address, connection time and band. Then compare that address with the iPhone’s Wi-Fi details. If they match, rename the active record and remove the obsolete duplicate only after the phone has stayed connected.
This check matters on any router that applies rules by device identity. A schedule, VPN route or parental-control rule attached to yesterday’s address cannot automatically follow a newly presented address.
Should you turn Private Wi-Fi Address off?
Usually not. Turning it off may make the device easier for an older router or access-control system to recognize, but it removes the privacy benefit on that network. Try Fixed first. Use Off only when a trusted network has a documented compatibility requirement or when you are isolating a specific problem.
Router-level management is most useful when device identities remain understandable. Privacy Hero 2 supports device groups, VPN routing and network controls from one cloud-managed interface, but any platform will depend on the current address presented by the phone.
Need clearer device-level control?
Privacy Hero 2 organizes household devices into groups for VPN and security policies. Keeping the iPhone on a Fixed private address helps those rules remain attached to the correct entry.
What this setting does—and does not do
A private Wi-Fi address changes the identifier presented to that local network. It does not create a VPN, hide browsing from the router or make an unknown device automatically safe. Think of it as a privacy-preserving name tag: useful, but still something the router uses to attach rules and history.
Related guides
Source: Apple Support: Use private Wi-Fi addresses on Apple devices.
About the author
Joe S.
Co-Founder · FlashRouters
Joe co-founded FlashRouters in 2011 to bring open-source router firmware and VPN protection to everyday households, and leads the company's sales and marketing. He has spent more than 15 years working with the VPN provider ecosystem, from DD-WRT and Tomato through today's WireGuard and NordLynx.
He writes about online privacy, VPNs and what the industry gets wrong about protecting a whole home.
Why Does My iPhone Keep Showing Up as a New Device on My Router?
