Network Fundamentals

Public vs Private IP Addresses: A Practical Network Map

Private IPs identify devices inside a local network; public IPs route internet responses. See how NAT connects the two.

Muhammad Azhar August 14, 2026 Reviewed August 14, 2026 3 min read

A private IP identifies a device inside a home or organization. A public IP is reachable through internet routing and is normally assigned to the router or provider-facing connection.

Common IPv4 private ranges

  • 10.0.0.0/8
  • 172.16.0.0/12
  • 192.168.0.0/16

How NAT connects them

The router translates many internal connections through one public address and keeps a table so replies return to the correct device. A website normally sees the public address, not a laptop's private address.

Do not confuse privacy with secrecy

A private address is not globally routed, but devices on the same local network may still reach one another. Firewalls, guest networks and device permissions remain important.

IPv6

IPv6 changes address structure and can provide globally routable addresses, while firewalls and temporary privacy addresses manage exposure. The public/private IPv4 model should not be copied blindly to IPv6.

Find each address without confusion

The operating system's network details show the local address and gateway. A public-IP service shows the internet-facing address. They may match on some IPv6 setups but usually differ on home IPv4 networks.

Do not publish router screenshots carelessly

Private addresses are not internet secrets, yet screenshots can expose Wi-Fi names, device labels, public addresses and administration details together. Redact the whole context before asking for help publicly.

Use the address in the correct scope

A private IPv4 address identifies a device only within its local network and is translated at the router in common home setups. The public address identifies the internet-facing connection and may be shared by a household or many carrier customers. It is not reliable proof of one person.

IPv6 changes familiar assumptions

Devices can have globally routable IPv6 addresses while a firewall still blocks unsolicited inbound traffic. Privacy extensions may rotate interface identifiers, and multiple addresses can exist simultaneously. Do not disable the firewall because an address looks “public,” and do not assume NAT is the security boundary.

For troubleshooting, record the local address, gateway, public address, protocol and time. That context explains far more than posting an isolated screenshot.

Sources and further reading

Use the right privacy tool for the task

A browser proxy changes the network path for one session. Review the Privacy Policy and use a trusted direct connection for sensitive accounts.