Researchers found flaws that can reveal your real IP address while Apple Private Relay is active. Here’s what happened, why it matters, and how you can better protect your privacy.
Table of Contents
What Happened?
Apple Private Relay is an optional iCloud+ feature designed to hide your IP address while you browse in Safari.
An IP address is a number tied to your internet connection. It can show your general location and internet provider.
The researchers published their findings on August 4, 2026. They also created a website where users can check for the problem.
TechCrunch tested the website and reported that it revealed the publication’s real IP address while Private Relay was active.
Apple had not responded to TechCrunch’s request for comment when the article was published on August 5, 2026.
An IP address leak is different from a data breach. It does not mean your passwords, payment details, or personal files were stolen.
However, the finding shows that privacy tools can have limits. Your information may also be leaked in unrelated incidents without your knowledge.
If you are unsure whether your information was leaked elsewhere, automatic monitoring can help you spot problems earlier.
Futureproof monitors your data for leaks 24/7 and provides simple steps to reduce scam risks. Futureproof supports broader data safety, while Apple would need to address this browser flaw.
Who Could Be Affected and What Could Be Revealed?
The issue may affect iCloud+ subscribers who use Private Relay while browsing with Safari.
The source did not say how many users may be affected. It also did not report confirmed victims or known criminal misuse.
The information at risk is your real IP address. This can help a website estimate your general location and identify your internet provider.
The report did not say that names, passwords, payment details, emails, or files were revealed through these flaws.
How the Apple Private Relay IP Leak Works
The researchers linked the problem to three features in WebKit.
WebKit is Apple’s browser engine, which loads and displays websites. All browsers on iPhones and iPads must use it.
Private Relay encrypts Safari traffic and sends it through two separate internet relays to hide your original IP address.
However, the researchers found that certain browser features could bypass that protection and reveal the original address.
Private Relay is also different from a VPN. A VPN usually protects internet traffic across your device, while Private Relay mainly protects Safari browsing.
The researchers said they did not report the issue to Apple because of problems during earlier security reports.
The source did not provide full technical steps for using the flaws. Apple also had not announced a fix when TechCrunch published its report.
Futureproof monitors your information for data leaks 24/7 and guides you with clear steps to keep it safer from scams.
Run a free check
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
