Private Relay is a privacy feature in iCloud+ that covers your Safari browsing. It sends your requests through two separate relays, one run by Apple and one by a third-party content provider, so no single party, Apple included, can see both who you are and which sites you're visiting. It isn't offered in every country or region.
If you've spotted the setting on your iPhone or Mac and wondered whether to leave it on, the short version is this: it splits up who you are from where you're going. It's part of iCloud+, so it comes with that plan rather than as a separate app. The longer version is below, along with the trade-offs Apple itself points out.
Who sees what along the way
Laid out party by party, the split looks like this:
| Party | Sees your IP address? | Sees the website address? |
|---|---|---|
| Your network provider | Yes | No, your DNS records are encrypted |
| Apple's relay (the first one) | Yes | No, your DNS records are encrypted |
| Third-party relay (the second one) | No | Yes |
| The website you visit | No, only a stand-in | It's the site you asked for |
That last row is where the friction comes from. A site that would normally see your IP address gets a temporary one instead, and some sites respond to that by asking for more.
The catch: not everywhere, and some sites push back
Private Relay isn't available in all countries or regions. If you can't find it in your settings, where you are may be the reason rather than anything you've done.
Then there's the friction. Some websites may ask for extra steps to sign you in or show you content, because they can't see your IP address. Speed tests may also read lower with Private Relay on, so a slower result there isn't always a sign that your connection has got worse.
If you want Apple's own wording on any of this, Apple's Private Relay support page covers what the feature does and its known side effects.
How the two relays split up what's known about you
The design rests on one idea: the details that identify you and the details of your destination are handled by different parties. Your requests are sent through two separate, secure internet relays, and each one only gets half the story.
The first relay
Your IP address is visible to your network provider and to the first relay, which Apple operates. Your DNS records are encrypted, though, so neither of them can read the address of the website you want. They know it's you; they don't know where you're heading.
The second relay
Run by a third-party content provider rather than Apple, the second hop creates a temporary IP address for you and makes the connection to the site. It handles the destination without ever working from your real IP.
Put the two halves together and you can see the design. One side knows who you are and not where you're going. The other side knows where you're going and not who you are. No one in the chain holds both, and that includes Apple.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Is it worth leaving on?
For anyone who mostly browses in Safari and wants their identity and their browsing kept apart, it's a sensible default. If you already have iCloud+, it's part of what you have.
It's a weaker fit if you live somewhere it isn't offered. People who often hit sites that are fussy about IP addresses may also find the extra sign-in steps more annoying than useful, and anyone who leans on speed tests should read those results with the setting in mind.
If you're trying to decide between this and a full VPN, our explainer on how virtual private networks work covers the wider tool. If you were thinking of Safari's Private Browsing mode, that's a separate setting: see how private browsing in Safari works.
Frequently asked questions
Does Apple see the websites I visit with Private Relay on?
No. Apple's relay sees your IP but not the site address.
Is Private Relay included with iCloud+ everywhere?
It's part of iCloud+, but it isn't offered in every country or region. If it's missing from your settings, check Apple's help page for where it's available.
Can my broadband or mobile provider still see who I am?
Yes, your IP stays visible to them. The encrypted DNS records are what keep the site address out of their view.
Does the second relay know my real IP address?
No. It generates a temporary IP address and connects you to the site with that, while your real one is visible only to your network provider and Apple's relay.
Does Private Relay cover apps and browsers other than Safari?
Apple describes it as helping protect your browsing in Safari. For anything beyond that, check Apple's help page.
Where do I find the switch to turn it on?
Apple's help page sets out the steps for turning it on, so check it for the current route on your device.
