Windows Wi-Fi privacy
Windows 11 Random Hardware Addresses and VPNs
Find the random hardware address settings in Windows 11 and understand what your Wi-Fi network and websites see when you connect a VPN.
Follow one connection from the laptop to a website
When your Windows laptop joins Wi-Fi, its wireless adapter uses a media access control address, usually called a MAC address. The nearby network can use that address to identify the adapter on its local link. Windows can use a random hardware address on supported equipment to reduce the opportunity to recognise the same adapter by its factory address. Microsoft describes how the setting affects scanning and joining networks in its Windows Wi-Fi connection guidance.
Now imagine opening a website after connecting a VPN. If that request travels through the tunnel, the site receives it from the VPN exit IP. The laptop still uses Wi-Fi to reach the network that carries the tunnel. Checking the IP shown by a website answers a question about that web request. To understand the network address a website sees and other signals it may use, read the guide to VPN IP location and device location.
Find the global and saved network settings
On Windows 11, open Settings and go to Network & internet, then Wi-Fi. Look for Random hardware addresses. Microsoft documents a global control that applies while the PC scans and connects, provided the wireless hardware supports it. If the control is absent, check the laptop model and ask the manufacturer or your IT team about the supported configuration.
To inspect a single saved connection, open Manage known networks on the Wi-Fi settings page and select the network you recognise. Look for its random hardware address control. Microsoft says a change for an individual network takes effect on the next connection to that network. Write down the original setting and allow active work to finish before reconnecting. Pick a network you own or have permission to use for the check.
Check how the network registers your laptop
At a hotel, you may have already registered the laptop at the venue’s sign-in page. If the venue associates that registration with the address used on Wi-Fi, a later address change could lead it to ask for registration again. Ask reception for the current device registration process. If the service has a device limit, use the venue’s process for adding or replacing a device. Before a call or a long upload, make time for these checks. Follow the public Wi-Fi travel checklist.
At work, the network team may expect an approved device configuration. Ask that team which setting to use if access depends on device registration or if Windows shows a managed control. At home, consider any device labels or rules you maintain on the router. If you adjust one setting on your own network, check whether the laptop still appears under the expected entry after reconnecting. This is easiest when you record what you changed and have access to the router through its usual approved controls.
Start with the first step that failed
If Windows cannot join the network, check the selected network name and the exact status or error. If it joins but internet access remains unavailable, confirm the venue sign-in or ask the network operator whether the connection is working. These observations help distinguish a failed Wi-Fi connection from a connected network with an internet access problem. Microsoft provides a sequence for narrowing down these symptoms in its Windows Wi-Fi troubleshooting guide.
Once the underlying connection works, check the VPN app’s connection status and repeat the intended task. A Windows public or private network profile is another setting you may encounter. It governs discovery and sharing behaviour on that connection. Review it separately using the guide to public and private Wi-Fi profiles in Windows.
Record the result before changing anything else
A short support note can capture the Windows version, the laptop model, the type of network and the time of the last connection attempt. Include whether the global or saved network setting was involved, whether Wi-Fi joined, whether the operator’s sign-in appeared and what the VPN app showed. This lets the recipient focus on the first failure. Share only the identifiers the responsible support team requests through its approved channel. Use the privacy checklist for VPN support reports before attaching a screenshot.
After the trip, review which temporary networks the laptop still remembers and remove any you no longer need. Keep the settings you depend on at home and work. Follow the guide to removing saved public Wi-Fi networks when you are ready to clean up the travel entries.