In most cases, these technologies are specifically designed to prevent the website from seeing your original public IP address.
But the answer is more complicated than simply saying “no.”
VPNs, proxies, and Apple’s iCloud Private Relay work differently. Browser features can sometimes create unexpected network connections, and vulnerabilities can occasionally bypass privacy protections that normally hide your IP address.
A recent 2026 WebKit security issue demonstrated exactly why this matters: researchers discovered ways certain WebKit features could bypass proxy configurations and potentially expose a user’s real IP address, including when iCloud Private Relay was enabled. Apple subsequently addressed the issue in public releases of iOS 26.6.1 and macOS 26.6.2.
So what can websites actually see?
What Is Your “Real” IP Address?
Your real IP address is the public IP address assigned to your internet connection by your ISP or mobile carrier.
For example, without any privacy service, you might connect to a website like this:
Your device → ISP → Internet → Website
The website can normally see your public IP address.
That IP address can provide information such as:
- Your approximate geographic location
- Your ISP or network provider
- Whether you are using a residential, mobile, business, or hosting network
- Whether the address belongs to a known VPN or proxy provider
- Whether the address has previously been associated with suspicious activity
An IP address normally does not directly reveal your name or exact street address. However, it can be combined with other information to identify or profile users.
When you introduce a VPN, proxy, or Private Relay, the connection path changes.
Can a Website See Your Real IP When Using a VPN?
Normally, no.
A properly functioning VPN routes your internet traffic through a VPN server before it reaches the destination website.
Instead of:
Your device → Website
the connection becomes:
Your device → VPN server → Website
The website sees the VPN server’s public IP address rather than the public IP address assigned to your home or mobile connection.
For example:
Real IP: 203.0.113.25
VPN server IP: 198.51.100.42
The website will normally see:
198.51.100.42
rather than:
203.0.113.25
This is one of the main reasons people use VPNs.
Does a VPN Completely Hide Your Identity?
Not necessarily.
Hiding your IP address does not make you anonymous.
A website can still identify or recognize you using other techniques, including:
- Cookies
- Login accounts
- Browser fingerprinting
- Device characteristics
- Tracking scripts
- Advertising identifiers
- Previously stored sessions
- Behavioral patterns
If you log into your Google account while connected to a VPN, for example, Google can still know which account is being used.
The VPN hides your network IP from the destination website, but it does not erase all other identifiers.
Can a VPN Leak Your Real IP Address?
A VPN can potentially leak your real IP address if something goes wrong.
Common causes include:
1. VPN connection failures
If the VPN disconnects and your device immediately returns to the normal internet connection, websites could see your regular IP address.
This is why many VPN applications include a kill switch.
A kill switch can block internet traffic when the VPN tunnel disappears, preventing applications from falling back to the normal connection.
2. DNS leaks
DNS converts domain names such as:
example.com
into IP addresses.
If DNS requests bypass the VPN and are sent through your normal network connection, your DNS activity may reveal information about your browsing even though the website itself sees the VPN’s IP.
3. WebRTC-related leaks
Some browser communication features can establish network connections outside the normal HTTP/HTTPS path.
Historically, WebRTC has been associated with IP address privacy concerns, particularly when browsers expose local or public network information.
Modern browsers have introduced protections, but privacy-conscious users should still test their configuration rather than assuming that a VPN automatically protects every browser networking feature.
4. Split tunneling
Some VPN applications allow selected applications or websites to bypass the VPN.
If your browser is excluded from the VPN tunnel, websites will see your normal IP address.
5. Misconfigured VPNs
Not every VPN configuration provides the same level of protection.
A VPN can only hide your IP if the traffic you care about actually travels through the VPN tunnel.
Can a Website See Your Real IP When Using a Proxy?
Usually, the website sees the proxy’s IP address instead of your original IP.
The basic architecture looks like:
Your device → Proxy → Website
The website receives the connection from the proxy.
However, proxies are not necessarily equivalent to VPNs.
A proxy may only handle traffic from a particular application or browser. Other applications can continue using your normal internet connection.
Some proxies can also transmit information about the original client through HTTP headers.
For example, certain proxy configurations can include headers such as:
X-Forwarded-For
or:
Forwarded
These headers are commonly used by legitimate reverse proxies and load balancers, but depending on how a proxy is configured, they can potentially reveal information about the original client.
Therefore, simply connecting to a proxy does not automatically mean that every aspect of your network identity is hidden.
VPN vs Proxy: Which Hides Your IP Better?
The answer depends on the implementation.
A traditional VPN generally operates at a lower networking level and can route traffic from multiple applications through the VPN tunnel.
A proxy is often application-specific.
| Feature | VPN | Proxy |
|---|---|---|
| Hides IP from websites | Usually | Usually |
| Encrypts traffic to provider | Usually | Depends |
| Covers multiple applications | Usually | Often no |
| Kill switch available | Often | Less common |
| DNS protection | Usually configurable | Depends |
| Performance overhead | Usually moderate | Often lower |
| Designed primarily for privacy | Yes | Not necessarily |
A properly configured VPN generally provides more comprehensive protection than a basic HTTP proxy.
What About iCloud Private Relay?
iCloud Private Relay is Apple’s privacy system for Safari and supported traffic on Apple devices.
It is not simply a traditional VPN.
Apple uses a two-relay architecture.
The basic idea is:
Your device → Apple relay → Third-party relay → Website
The first relay knows your original IP address but does not know the website you are visiting.
The second relay knows the destination website but receives a temporary IP address rather than your original IP.
Apple says this architecture prevents a single party, including Apple, from being able to associate both your identity and the websites you visit.
The website therefore normally sees a Private Relay IP address rather than your actual public IP.
Apple also uses an IP address corresponding to an approximate region so that websites can continue providing location-relevant content.
Is iCloud Private Relay a VPN?
No.
This distinction is important.
A VPN generally creates a secure tunnel between your device and a VPN provider and can be used to route traffic from many applications.
iCloud Private Relay is primarily designed to protect web browsing in Safari and related DNS activity.
Apple itself describes Private Relay as an internet privacy service rather than a conventional VPN. It uses two separate relays operated by different entities instead of sending your traffic through a single VPN provider.
This gives Private Relay a different privacy model.
The 2026 iCloud Private Relay IP Leak
In August 2026, security researchers Talal Haj Bakry and Tommy Mysk disclosed several WebKit behaviors that could bypass configured proxy paths.
The affected mechanisms included:
- DNS prefetching
- WebAuthn Related Origin Requests
- WebTransport
Under certain circumstances, these mechanisms could generate connections directly from the device instead of following the configured proxy.
That meant a website could potentially obtain the user’s real network information even though a proxy or iCloud Private Relay was configured.
The discovery was particularly significant because WebKit is the browser engine used by Safari and, in many circumstances, by third-party browsers on Apple’s platforms.
However, this does not mean that every iPhone user with Private Relay was constantly exposing their IP address.
The researchers described conditions under which specially constructed websites could trigger the relevant behavior.
Apple subsequently addressed the iCloud Private Relay issue in the public releases of iOS 26.6.1 and macOS 26.6.2.
This incident is an important reminder of a broader security principle:
A privacy technology can be well designed and still be undermined by vulnerabilities in the software implementing it.
Can Websites Detect That You Are Using a VPN?
Yes.
Hiding your real IP address does not necessarily hide the fact that you are using a VPN.
Many websites use IP reputation databases to identify addresses associated with:
- Commercial VPN services
- Proxy servers
- Tor exit nodes
- Cloud hosting providers
- Datacenters
- Known abusive networks
This is why you may occasionally encounter messages such as:
“VPN detected.”
or:
“Please disable your proxy to continue.”
The website may not know your original IP, but it can recognize that the IP connecting to it belongs to a VPN or hosting provider.
Can Websites See Your Real IP Through JavaScript?
JavaScript itself cannot simply ask the browser:
“What is the user’s public IP address?”
There is no ordinary JavaScript property that universally returns your public IP address.
However, JavaScript can interact with browser networking technologies.
Historically, technologies such as WebRTC have created privacy concerns because they can expose network information under certain circumstances.
Websites can also make network requests to their own servers and observe the source address associated with those requests.
The important distinction is that the browser’s network stack determines which IP address the server sees.
If the request goes through a VPN, the server generally sees the VPN address.
If it bypasses the VPN, the server may see the real address.
Can Websites See Your IP If You Use Incognito Mode?
Yes.
Incognito mode does not hide your IP address.
Private browsing primarily prevents certain browsing information from being retained locally after the session.
It does not turn your computer into an anonymous device.
Without a VPN, proxy, or similar network privacy service:
Incognito → Website
The website can still see your public IP address.
Therefore:
Incognito ≠ VPN
and:
Incognito ≠ Anonymous
Can Websites See Your IP If You Use Tor?
Tor is designed to route traffic through multiple relays so that the destination website does not normally see your real IP address.
Instead, the website sees the IP address of a Tor exit relay.
The architecture is roughly:
You → Tor entry relay → Tor middle relay → Tor exit relay → Website
The destination therefore normally sees the exit relay rather than your home IP.
However, Tor is not a magic anonymity button.
Your behavior, browser configuration, account logins, downloaded files, and other identifying information can still compromise anonymity.
And the 2026 WebKit research demonstrated why browser implementation details matter: researchers reported that certain WebKit mechanisms could bypass browser-level proxy configurations, including Tor-based configurations on affected Apple platforms.
What Information Can a Website Get From Your IP?
An IP address can provide useful but limited information.
A website can potentially determine:
Approximate location
Usually this means a city or broader geographic area rather than your exact physical address.
ISP or network provider
The address can often be associated with an ISP, mobile carrier, business, hosting provider, or datacenter.
Network type
IP intelligence databases can sometimes classify an address as:
- Residential
- Mobile
- Business
- Hosting
- VPN
- Proxy
- Tor
Reputation
An IP may have a history associated with:
- Spam
- Malware
- Bot activity
- Brute-force attacks
- Fraud
- VPN usage
- Datacenter traffic
This is one reason websites use IP reputation systems for fraud detection and abuse prevention.
Your IP Address Is Not Your Identity
It is important not to overestimate what an IP address tells a website.
An IP address alone generally does not tell a website:
- Your name
- Your exact home address
- Your phone number
- Your email address
- Your passwords
But websites can combine IP information with other signals.
For example:
IP address + account + cookies + browser fingerprint + behavior
can create a much more detailed profile.
This is why protecting your IP address is only one part of online privacy.
How Can You Check What IP a Website Sees?
One of the easiest ways to understand how these technologies work is to check your public IP address.
You can use an IP lookup tool to see the IP address that your browser is presenting to the internet.
Try checking your IP:
- Without a VPN
- With your VPN enabled
- With your VPN connected to another country
- With iCloud Private Relay enabled
- With Private Relay disabled
Your results can demonstrate exactly how your apparent public IP changes.
You can also compare the detected ISP, approximate location, and network information.
How to Prevent Your Real IP From Being Exposed
If hiding your public IP is important to you, consider the following:
Use a reputable VPN
Choose a VPN that supports modern protocols, DNS protection, and a kill switch.
Keep your operating system and browser updated
Privacy vulnerabilities can be fixed through browser and operating-system updates.
The 2026 WebKit/Private Relay issue is a good example of why updates matter.
Check for DNS leaks
Your DNS traffic should follow the privacy configuration you intended to use.
Be careful with split tunneling
Make sure applications that need IP protection are actually routed through your VPN.
Don’t assume private browsing hides your IP
Incognito and private browsing modes do not replace a VPN or proxy.
Remember that IP protection isn’t complete anonymity
A hidden IP address does not prevent websites from identifying you through accounts, cookies, fingerprints, or other techniques.
VPN vs Proxy vs iCloud Private Relay vs Tor
Here’s a simplified comparison:
| Technology | Website normally sees | Main purpose |
|---|---|---|
| Direct connection | Your real IP | Normal internet access |
| VPN | VPN server IP | Privacy and secure tunneling |
| Proxy | Proxy IP | Traffic forwarding |
| iCloud Private Relay | Relay IP | Safari privacy |
| Tor | Tor exit IP | Anonymity and privacy |
| Incognito | Your real IP | Local browsing privacy |
The important word is normally.
Software bugs, configuration errors, leaks, and unusual browser behavior can change what happens in practice.
Frequently Asked Questions
Can a website see my real IP when I’m using a VPN?
Normally, no. A properly configured VPN causes the website to see the VPN server’s IP address instead of your normal public IP.
Can a website detect that I’m using a VPN?
Yes. Websites can compare the connecting IP against databases containing known VPN, proxy, datacenter, and Tor addresses.
Does Incognito hide my IP?
No. Incognito mode primarily limits locally stored browsing information. Your website connection can still expose your normal IP address.
Does iCloud Private Relay hide my IP?
Yes, under normal operation. Private Relay replaces your original IP with a relay IP when supported traffic is routed through the service. Apple designed it so websites do not see your original IP address.
Was iCloud Private Relay vulnerable to IP leaks in 2026?
Researchers discovered WebKit behaviors in August 2026 that could bypass certain proxy paths and potentially expose real IP addresses. Apple subsequently addressed the issue in public releases of iOS 26.6.1 and macOS 26.6.2.
Does a proxy hide my IP?
Usually, the destination website sees the proxy’s IP instead of your original IP. However, the protection depends heavily on the type and configuration of the proxy.
Does a VPN make me anonymous?
No. A VPN hides your network IP from the destination, but websites can still use accounts, cookies, browser fingerprints, and other information to identify or track you.
How can I check my public IP?
Use an IP address checker to see the public IP address currently visible to internet services. Testing before and after connecting to a VPN can show whether your apparent IP changes.
The Bottom Line
Can websites see your real IP when you use a VPN, proxy, or iCloud Private Relay?
Usually, no.
A properly functioning VPN normally presents the VPN server’s IP address to the website. A proxy normally presents the proxy’s address, while iCloud Private Relay uses a two-relay architecture to replace your original IP with a temporary relay address.
But none of these technologies should be treated as an absolute guarantee of anonymity.
Configuration mistakes, DNS leaks, browser features, software vulnerabilities, and implementation bugs can create unexpected paths around privacy protections.
The 2026 WebKit vulnerability is a particularly useful example. It showed that even a sophisticated privacy system such as iCloud Private Relay can be affected by bugs in the underlying browser technology. Apple has since addressed the issue in public software releases.
The best approach is therefore not to rely on a single privacy feature.
Keep your operating system and browser updated, use a properly configured VPN when appropriate, check for leaks, and remember that hiding your IP address is only one part of protecting your online privacy.
Your IP address matters—but it is only one piece of the puzzle.