How To Turn Off Mac Address Filtering On Iphone

Apple'due south newest beta version of iOS 14 has a setting that will change the way people connect and stay connected to Wi-Fi networks. While other operating systems, including Android ten, already had this feature, information technology has much broader implications for Apple devices because the adoption rate of new iOS versions is so much higher than on Android. As well, Apple has gone a step further with iOS xiv and added automatic randomization of the MAC address every 24 hours, whereas on Android, it stays consequent for each network after joining. The mode the industry has been trending, this really isn't that surprising.

mac-randomization-timeline

What is a MAC accost?

Let'due south back up a little fleck. A media admission control (MAC) accost is a unique cord of letters and numbers that is used to place a device on a network and permit information technology to communicate with other devices. MAC addresses are usually assigned when the device is manufactured and, unlike IP addresses, they generally exercise not change when moving from 1 network to another. In other words, MAC addresses have historically been static and unique to each device.

How are MAC addresses used for Wi-Fi networks today?

The assumption and exercise of having a static MAC address resulted in many networks leveraging information technology for a variety of purposes. At that place are well-known hospitality brands that have implemented automated hallmark programs for loyalty customers based on storing and recognizing a device's static MAC address. In the hospitality and multifamily markets, the employ of a static MAC address is far reaching in current network architectures. The notion of a dynamic MAC address changing through time past virtue of a device'due south operating organisation will significantly alter the connectivity experience, unless they adopt solutions that plan for and address this, such as ElevenOS.

What is MAC accost randomization and why is it used?

MAC accost randomization is the increasing trend of device operating systems using a random, anonymous device identifier instead of the real address when connecting to wireless networks. The goal of doing this is to increase user privacy by preventing network operators from being able track devices using the real accost as a consistent device identifier.

For many years now, most operating systems (iOS viii+, Android eight+, Windows ten, etc.) have implemented some form of MAC randomization. However, most of these operating systems only employ a randomized MAC address when scanning for access points and SSIDs (known equally probe requests), but still have used a consequent, genuine MAC accost when really connecting to networks. This has successfully mitigated some forms of tracking (footfall tracking in retail stores for example), just more avant-garde tracking methods have surfaced since these changes were introduced. In late 2019, Google released Android 10 which made MAC randomization the default beliefs when both scanning for wireless networks and connecting to them. This was a major change that was intended to preclude tracking beyond networks.

Historically, MAC addresses take been a reliable identifier. Still, equally we learn more about privacy and security, we now know that spoofing other people'south MAC addresses has been a serious network vulnerability on visitor-based Wi-Fi for some time. These changes past handset manufacturers are going to force everyone to fix this, which is ultimately a really practiced affair for everyone.

What is changing with iOS xiv on Apple tree devices?

In the latest beta version of iOS 14, Apple implemented their own improved version of MAC randomization for devices running iOS. Like to Android ten, iOS 14 devices volition utilize a randomized MAC address by default when both scanning and connecting to most wireless networks. Additionally, iOS has added an actress layer of privacy protection: devices with the randomization characteristic turned on volition rotate their MAC address every 24 hours after connecting to a wireless network. This ways that, by default, when an Apple device running iOS14 connects to a new network, the network will never be aware of the real, genuine MAC accost of the device, only only an anonymous, temporary identifier that changes every mean solar day. At that place are variations to this behavior that we have been testing in lab environments. For instance, migrating an existing device from iOS 13 to iOS 14 results in previously remembered WPA2 networks NOT being set to randomized. The new arrangement default applies primarily to new networks going frontwards.

This "Private MAC Address" feature is network-specific and will be enabled past default on nigh new wireless networks that users join after they update to iOS 14. When enabled, this feature will randomize the MAC address that is used when connecting to a wireless network for the outset time, randomize it every 24 hours after the user has connected, and randomize it immediately if the user forgets the network and rejoins. iOS 14 will non randomize the MAC address if the user is mid-session and actively passing traffic, even if it has been 24 hours since joining the network.

Many networks currently rely on the MAC address as a consistent identifier for the duration of the visitor's stay at the venue. Some networks rely on the MAC address to be consistent across Wi-Fi venues equally well, which previously allowed their visitors to roam between multiple venues and exist automatically authenticated. This experience will non be possible for users of iOS fourteen with the Individual MAC Address feature enabled.

Information technology's important to note that just because the Private MAC Address feature is enabled by default in Beta ane of iOS14, that doesn't necessarily mean information technology will be this style in the full general release. It is likewise worth noting that by adoption of Apple tree's latest iOS has been relatively high. For instance over 77% of Apple devices introduced in the last 4 years (estimated at one billion) are running some version of iOS 13, which was first released in Q4 of 2019. If iOS 14 sees similar adoption rates, there could be hundreds of millions of users impacted by this alter within months of its release.

Toggling "Use Private Accost" is the switch that effectively turns on and off MAC Address Randomization (here called "Wi-Fi Address"). Toggled "On" the MAC Address is inverse past the device's OS every 20 four hours. This setting is network specific. In other words, more sophisticated users can and likely will turn it on for some networks and off for others. The default setting in the Beta Version of iOS 14 has information technology enabled for almost ALL newly added networks. That is significant. The issue would be far smaller if this setting was present, but not enabled past default. Information technology is the default nature of this new capability that makes it broadly impactful to all iOS fourteen users.

Instructing users to disable the "Employ Private Accost" setting has the additional claiming in that it could be perceived equally compromising the user's privacy. The iOS fourteen screen says, "Private Wi-Fi address prevents network operators from tracking your iPhone." Instructing users to disable this feature could be misconstrued as the operator's intent to track users, even when the intent might just be to allow users to stay automatically connected to the network rather than having to manually connect via the captive portal folio each day.

What does this all hateful for Wi-Fi experience?

Users with these devices (Apple iPhones running iOS 14 and Apple iPads running iPadOS 14) who accept the setting enabled volition be forced to reconnect their device via a captive portal every 24 hours. Some users may fifty-fifty be forced to reconnect more oft than that if they are leaving and coming dorsum to the Wi-Fi venue. Having to reconnect devices tin can exist a minor inconvenience or a huge pain depending on the use case.

The increasingly dynamic nature of the MAC Address is ane of the reasons we adult our Hotspot 2.0 solution and have been strong proponents of it for years. Hotspot two.0 does not rely on a MAC address for authentication, rather it is a certificate based arroyo to identifying and automatically authenticating a device onto a network. Hotspot 2.0 authentication is a not bad choice for brands that value loyalty, like hospitality and retail, check out our blog mail, How Hotspot ii.0 Streamlines Guest Wi-Fi Access, to acquire more than. In industries like multifamily, nosotros believe the future is our Personal Pass Primal solution, which does not rely on a portal or MAC address for authentication.

Subscribe to our web log to get the next installment of this mail where we hash out best practices for how best to manage the upcoming proliferation of MAC address randomization.