Security

Wi-Fi connections and hidden networks

Connections

Apple generates randomized MAC addresses for the Peer-to-Peer Wi-Fi connections that are used for AirDrop and AirPlay. Randomized addresses are also used for Personal Hotspot on iOS and iPadOS (with a SIM card) and Internet Sharing on macOS.

New random addresses are generated whenever these network interfaces are started, and unique addresses are independently generated for each interface as needed.

Hidden networks

Wi-Fi networks are identified by their network name, known as a Service Set Identifier (SSID). Some Wi-Fi networks are configured to hide their SSID, which results in the wireless access point not broadcasting the network’s name. These are known as hidden networks. iPhone 6s or later automatically detects when a network is hidden. If a network is hidden, the iOS or iPadOS device sends a probe with the SSID included in the request—not otherwise. This prevents the device from broadcasting the name of previously hidden networks a user was connected to, thereby further ensuring privacy.

To mitigate the privacy problems posed by hidden networks, iPhone 6s or later automatically detects when a network is hidden. If the network is not hidden, the iOS or iPadOS device won’t send a probe with the SSID included in the request. This prevents the device from broadcasting the name of non-hidden known networks, and hence ensures that it doesn’t reveal that it’s looking for those networks.

Helpful?

Apple Platform Security

Wi-Fi connections and hidden networks

Connections

Hidden networks