Yes — and you can see it right now
The tool at the top of this page shows your public IP address. The number displayed there is what every website, server, and online service sees when you connect to them. It's public in the most literal sense: visible to the outside world.
But the word "public" has a specific technical meaning here, and understanding it clarifies a lot of confusion — including why you might sometimes see an IP address that looks "private" when you check your own device settings.
This guide explains the difference between public and private IP addresses, how to tell which type you have, and when your public IP address is actually something worth thinking about.
What is a public IP address?
A public IP address is one that is reachable from the global internet. It's assigned by your Internet Service Provider (ISP) and is unique across the entire internet at any given moment — no two devices on the internet should have the same public IP simultaneously.
When you visit a website, the website's server receives a connection from your public IP. When you send an email, the recipient's mail server logs your public IP. Every service you connect to sees this address.
Public IPs can be: - Dynamic — changes periodically (most common for home broadband). Your ISP reassigns you a new address from their pool each time your router reconnects, or on a fixed schedule. Most residential ISPs use this model. - Static — stays the same indefinitely. Usually requires a business plan or a fee. Necessary if you're running a home server, self-hosting a website, or need a consistent address for remote access.
Your public IP reveals your approximate location (city-level, not street address), your ISP, and your connection type. For a full breakdown of what it exposes, see what someone can do with your IP address.
Public vs. private IP: what is the difference?
A private IP address is one used inside a local network — your home Wi-Fi, your office network, a data center's internal network. Private IPs are not reachable from the public internet; they're only meaningful within the local network they belong to.
The ranges reserved for private use are: - `10.0.0.0 – 10.255.255.255` - `172.16.0.0 – 172.31.255.255` - `192.168.0.0 – 192.168.255.255`
When you check your IP address on your device (via Settings, or running `ipconfig`/`ifconfig` in a terminal), you'll typically see a private address in one of these ranges — something like `192.168.1.45`. That's your device's address on your local network, assigned by your router.
Your router sits between this local network and the internet. It has two IP addresses: a private one facing inward (often `192.168.1.1`) and a public IP facing the internet, assigned by your ISP. When your devices send traffic out, the router translates the source address from your private IP to the shared public IP — a process called Network Address Translation (NAT).
This is why checking your IP address in your device settings gives you a different number than checking it at myipco.com. The device setting shows your local/private address. The tool shows what the internet actually sees: your public IP.
How to tell if your IP is public or private
Method 1: Use an external lookup tool The simplest approach. Visit myipco.com — the address shown there is always your public IP. By definition, any address displayed by an external tool is reachable from the internet and is therefore public.
Method 2: Check the address yourself If the IP you're looking at falls in one of the private ranges (`10.x.x.x`, `172.16–31.x.x`, `192.168.x.x`), it's private. If it's outside those ranges, it's public.
What if myipco.com shows a private address? This is unusual but can happen if you're inside a corporate network that uses proxies, if your VPN is misconfigured, or — in the case of some mobile networks — if your carrier is using CGNAT (covered in the next section). In these cases, the address the tool shows may technically be a shared address that isn't fully public in the traditional sense.
IPv6 addresses If you have IPv6 connectivity, your device may also have a public IPv6 address directly — without NAT. IPv6 was designed with enough address space that NAT isn't necessary, so your device might have a globally routable address like `2001:db8::1`. This is still "public" in the sense that it's internet-reachable. See IPv4 vs. IPv6 explained for the full picture.
Can two devices share the same public IP? (NAT and CGNAT explained)
Yes — and this affects far more people than most IP explainers acknowledge.
In a typical home, all your devices (phone, laptop, smart TV, etc.) share one public IP. Your router assigns them private addresses and handles NAT on their behalf. From the internet's perspective, all traffic from your home comes from one IP.
CGNAT — Carrier-Grade NAT takes this a step further. Some ISPs, and most mobile carriers, deploy NAT at the network level: your router itself gets a private address rather than a true public IP. Dozens or hundreds of customers share a single public IP, with the carrier doing NAT between you and the internet.
Signs you may be behind CGNAT: - The IP shown by your ISP's customer portal differs from what myipco.com shows - Your router's WAN IP is in the `100.64.0.0/10` range (the CGNAT-specific block) - You can't access your home network from outside even after setting up port forwarding
CGNAT has real implications: - You cannot host servers or accept incoming connections without a workaround (some ISPs offer a static public IP as an add-on) - If someone uses your apparent public IP to do something that gets flagged or banned, other users sharing that IP may be affected - VPNs that rely on incoming connections (self-hosted WireGuard, for example) won't work by default
Mobile networks use CGNAT almost universally — this is why your phone's "IP address" when checked externally looks nothing like the address in your phone's network settings.
When your public IP address is a security risk
For most home users, your public IP poses limited direct risk. But there are specific scenarios where it matters:
Port scanning and exposed services If you're running software that listens on a port (a home server, a game server, a NAS), that service is potentially reachable from your public IP. Automated scanners constantly probe all public IPs for open ports. Services with weak authentication or known vulnerabilities can be exploited. Keeping your router's firewall on and not forwarding ports you don't need is the basic defense.
DDoS targeting In gaming and streaming communities, your public IP can be used to flood your connection with traffic (a DDoS attack), knocking you offline. This is the most common scenario where individuals are targeted by IP. If this is a concern, a VPN masks your real IP from other users — see how to hide your IP address.
Correlation attacks If you log into accounts across different services without any IP masking, those services can correlate your activity by IP. A consistent public IP is one signal that links your "different" accounts together.
Geo-blocking and IP reputation Some IPs get flagged in spam databases or IP reputation systems — if your dynamic IP was previously used for malicious activity by a prior user, you may hit access restrictions. You can check your IP's reputation using external blacklist lookups.
What doesn't change with a VPN or proxy (reminder) Changing your IP doesn't change your browser fingerprint — canvas hash, WebGL renderer, screen size, and installed fonts remain the same. You can see your full fingerprint at myipco.com/browser-fingerprint.
How to change or hide your public IP
If you want to change what the internet sees as your IP address, there are four main options — each suited to different situations:
VPN — routes all your traffic through a server in a location you choose. The VPN server's IP becomes your apparent public IP. Best for privacy and geo-access. See the complete VPN guide for how it works.
Router reset — power cycling your router may cause your ISP to assign you a new dynamic IP. Takes 5–10 minutes and works more reliably with longer wait times. Won't work if your ISP uses CGNAT.
Mobile data — switching to LTE/5G gives you a different IP (from your carrier's pool) immediately. Useful for a quick change, not a permanent solution.
Contact your ISP — ask for a new IP assignment. Most ISPs will do this once without charge if you explain a technical reason (spam blacklist, etc.).
For a full comparison of all four methods with guidance on which fits your situation, see how to change your IP address.