Apple's Private Relay Leaks Your Real IP Address in Safari

General News
1

App developer/security researchers at Mysk discovered several leaks in Apple's Private Relay and all other browser proxies that allow websites to see your real IP address.

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/05/apples-private-relay-leaks-your-real-ip-address-in-safari/
3 Likes
2

*on iOS

3

Interestingly it seems using custom DNS provides protection from the DNS leak. I’m using NextDNS with Private Relay and while the other two leaks were valid when I checked the test website, my DNS server was showing the Private Relay IP.

Good on Mysk for bringing these to light. My move back to iCloud w/ADP might be short lived. PR was one of the big draws to me….but these trivial ways to break it are very disappointing.

Edit: removed spurious speculation

4

I use AdGuard DNS profile and Private Relay, but it still leaks my IP address.

5

Another reason to stay on iOS 18: the more severe leaks seem tied to iOS 26.

The article does mention that iOS 18 is vulnerable as well (through WebAuthn), but at least in my own setup the PoC isn’t showing any IP leaks.

6

Has the issue been resolved with the release of iOS 26.6.1? I no longer see any leaks during testing.

7

It seems it doesn’t:

1 Like
8

I tested using their leak test webpage; it seems there is no leak.

1 Like
9

Did a quick test with Safari 26.6.2 and Private Relay:

image
image1920×570 58.2 KB

None of these are my real IP and WebAuthn apparently is relayed via Cloudflare, too. :person_shrugging:
I tested both on macOS and iOS, same result.

1 Like