You open Safari, the Wi-Fi icon is full bars, and nothing loads. Then you poke into Settings > Wi-Fi and see the network name with "Privacy Warning" underneath it in red. That warning isn't decorative. It means your iPhone is randomizing its MAC address for that network, and something upstream — usually the router — doesn't like it.
I've hit this on iOS 14, 15, 16, and 17, on everything from a Ubiquiti UDM Pro to a crusty old Linksys EA6400. The behavior is the same. Here's how to actually fix it.
Cause 1: Private Wi-Fi Address rotation (the culprit 90% of the time)
Starting with iOS 14, Apple assigns a per-network random MAC address instead of your hardware MAC. The idea is to stop stores from tracking you. In practice, routers that use MAC filtering, sticky DHCP reservations, or MAC-based parental controls treat your phone as a brand new device every time the address rotates. Some routers hand out a lease, then refuse renewal. Others drop you into a guest VLAN with no internet. Either way: connected, no internet.
You'll usually see this kick in after a router firmware update, a change of router, or an iOS major version upgrade. It also shows up on mesh systems with band steering, because your phone hops between bands and the router sees a new MAC on the second radio.
The fix
- Open Settings > Wi-Fi.
- Tap the blue (i) next to your network.
- Toggle Private Wi-Fi Address to Off.
- Tap Rejoin or forget and rejoin the network.
If the toggle is greyed out (managed device via MDM, or a supervised iPhone), you can't change it locally. Talk to whoever runs your MDM profile — there's a per-SSID payload the admin needs to flip.
Once you turn it off, reconnect and check. If the Privacy Warning disappears and pages load, you're done. If you want to keep randomization on but still fix it, the proper move is on the router side: remove any MAC filter entries and set a fresh DHCP reservation using the current randomized MAC. That address will stick until you erase the phone or forget the network, so it's a workable middle ground.
Cause 2: Stale DHCP lease or a full DHCP pool
Sometimes the warning is a red herring and the real problem is that your router handed your iPhone an address it can't actually route. Classic triggers: you lowered the DHCP pool size, you've got an IP conflict because a static device is squatting on the same address, or your router's lease time is short and something's gone sideways in the leasing table.
I've seen a Netgear R7000 with a pool of 192.168.1.2–192.168.1.50 hold forty devices, all online, and the iPhone was device forty-one. It got an APIPA address (169.254.x.x), showed full Wi-Fi bars, and had zero internet. That's the tell.
The fix
First, check what IP you got. Go to Settings > Wi-Fi > (i) > IP Address. If it starts with 169.254., DHCP failed.
- Forget the network on the iPhone.
- Reboot the router (yes, actually power-cycle it — don't just click "reboot" in the UI).
- Rejoin the Wi-Fi.
If that doesn't take, log into the router and check the DHCP table. Bump your pool range if it's small, and look for duplicate leases. On consumer gear, "Reserve IP" per device is the least painful long-term fix.
Cause 3: Captive portal didn't complete
Hotels, airports, coffee shops, and corporate guest networks intercept your first HTTP request and shove you to a login page. If that page never loads — because iOS is trying HTTPS first, or because the portal's cert expired — you get stuck in a half-connected state. The Privacy Warning often shows here too, because the portal can't fingerprint you.
Trigger to watch for: you connected at a hotel last week and the SSID is the same name as the one at your office. iOS keeps the old portal state cached and skips the login page.
The fix
- Open Safari and manually type
http://neverssl.com— the plain HTTP forces the portal to intercept. - If nothing loads, go to Settings > Wi-Fi and tap Sign In under the network if it appears.
- Toggle Auto-Join off, forget the network, rejoin, and complete the portal from scratch.
- Still dead? Toggle Limit IP Address Tracking off. Some portals choke on it.
Skip the "Reset Network Settings" nuclear option unless you've already tried the above. It wipes every saved Wi-Fi password and every paired Bluetooth device, and it fixes this maybe one time in twenty. Not worth the hassle first.
Quick reference
| Symptom | Likely cause | Fastest fix |
|---|---|---|
| "Privacy Warning" under SSID, full bars, nothing loads | Private Wi-Fi Address rotation vs. router MAC filter | Settings > Wi-Fi > (i) > Private Wi-Fi Address: Off, then Rejoin |
| IP shows 169.254.x.x | DHCP failure / pool exhausted | Forget network, power-cycle router, rejoin |
| Connected at a hotel/airport, no login page | Captive portal not triggered | Safari to http://neverssl.com, or Sign In under the SSID |
| Works on 5GHz, dead on 2.4GHz (or vice versa) | Mesh band steering + MAC change | Disable Private Wi-Fi Address on the affected SSID |
| Only this one iPhone affected | Per-device randomized MAC stuck | Forget network, wait 30 seconds, rejoin |
One last thing: if the Privacy Warning shows but the internet works fine, ignore it. It's informational. The warning alone isn't the problem — the problem is what the router does with the rotating MAC. Fix the router side if you can, fix the iPhone side if you can't, and move on.