\n<\/p>\n
Apple\u2019s Private Relay, an opt-in feature designed to hide a user\u2019s IP address when they browse the internet with Safari, can be circumvented to reveal the supposedly hidden IP address due to a series of flaws.<\/p>\n
Researchers revealed the issues in a blog post<\/a> on Tuesday. The researchers also set up a website<\/a> where anyone can check if their real IP address leaks, even if they use Private Relay<\/a>. In a test on Tuesday, TechCrunch verified that the site was able to reveal our real IP address.\u00a0<\/p>\n The issue was first reported<\/a> by 404 Media.<\/p>\n Talal Haj Bakry and Tommy Mysk, the researchers who found the issue, wrote in their blog post that the problem lies with three features in Apple\u2019s web browser engine WebKit, which is used by all browsers in iOS. Private Relay is only available to iCloud+ subscribers<\/a>, and is not like a Virtual Private Network, or VPN, which protects someone\u2019s IP address at the system level. Private Relay only works while using Safari.\u00a0<\/p>\n Mysk wrote in a post on X<\/a> that they chose not to report the issue to Apple because \u201cour past experience with Apple tells us that reporting this issue would involve months of delays, inconsistent communication, and in some cases, denying the issue\u2019s impact entirely.\u201d<\/p>\n Apple did not immediately respond to a request for comment.\u00a0<\/p>\n Mysk and his colleagues develop a private browser called Psylo, which they say now has mitigations that prevent users\u2019 IP addresses from leaking when using Psylo.<\/p>\n<\/div>\n When you purchase through links in our articles, we may earn a small commission<\/a>. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n