MAC Address
Also known as: Media Access Control address, Hardware address, Physical address
A 48-bit unique hardware identifier burned into every network interface card, used for local Ethernet and Wi-Fi delivery within a single network segment.
Last updated:
What is a MAC address?
A MAC address (Media Access Control address) is a 48-bit hardware identifier assigned to a network interface — every Ethernet port, every Wi-Fi chip, every Bluetooth adapter has one. Unlike an IP address, which is logical and can change at any time, a MAC address is traditionally burned into the hardware at the factory and meant to uniquely identify that interface forever.
MAC addresses are used to deliver frames within a single Layer-2 network segment (a switch, an Ethernet LAN, a Wi-Fi network). IP addresses are used to route packets between such segments. Think of the MAC address as the physical apartment number and the IP address as the city-level postal address — you need both to deliver a letter end to end.
How MAC addresses look
A MAC address is written as six pairs of hexadecimal digits separated by colons or dashes:
00:1A:2B:3C:4D:5E
00-1A-2B-3C-4D-5E
The first three bytes (00:1A:2B) are the OUI (Organizationally Unique Identifier), assigned by IEEE to the NIC manufacturer (Intel, Broadcom, Apple, etc.). The last three bytes are assigned by that manufacturer. You can look up the OUI of any MAC in IEEE's public OUI database to find the vendor.
MAC address randomization
Because the OUI identifies the vendor and the full address stays stable across connections, MAC addresses are a very strong tracking signal — a shop's Wi-Fi, a coffee chain, or a city's public Wi-Fi can correlate your appearances across all their locations just by watching the MAC addresses probing for networks.
To defeat this, modern OSes now randomize the MAC address per network:
- iOS has had per-SSID random MAC since iOS 14 (2020)
- Android has had it since Android 10 (2019)
- Windows 10/11 supports it per-SSID as a user setting
- macOS got it for Wi-Fi scanning in Sonoma (2023)
The locally-administered bit (bit 1 of the first byte) indicates whether an address is locally assigned vs. burned-in — random MAC addresses set this bit so they cannot collide with any vendor's real OUI.
MAC addresses only traverse a single LAN segment. They never cross a router, so they don't appear in the logs of any remote server — only IP addresses do. That's why MAC addresses can't be used to geolocate or identify a remote visitor.