About this tool
This page reports the public IP address your traffic appears to come from. On load, your browser calls the ipify API, which returns the source address it observed on that request. That is the address servers, firewalls and log files on the internet record for you — not the private address on your network adapter. Because a request is made to an external service, this is a server-side lookup rather than an in-browser one. No account is needed and nothing is stored on our side.
The everyday use is allow-listing. A vendor asks which address to permit through their firewall, a database only accepts connections from known egress IPs, or you need to confirm a VPN is actually carrying your traffic rather than leaking around it.
How to use it
There is nothing to configure — the address is detected on load. To get the most out of it:
- Load the page with the VPN off to see your normal egress address.
- Connect the VPN, reload, and confirm the address changed to the expected exit point.
- Check a second device on the same network — the result should be identical, because they share one NAT address.
- Send the value to whoever maintains the allow-list, with the prefix if your provider gave you a block. The subnet & CIDR calculator will work out the range.
Common questions
Where does the address come from?
Your browser makes a request to the public ipify API, which reports the source address it sees on that connection. This is not a client-side lookup: a request leaves your machine, and the answer is your public address as observed from the internet.
Why does this not match the address shown by ipconfig or ip addr?
Those commands show the private address on your network adapter, such as 192.168.1.20. Your router or firewall performs NAT, so every device behind it shares the single public address shown here.
Why does my public IP keep changing?
Most residential and many business broadband connections use a dynamic address that can change on reconnection or lease renewal. Mobile networks, VPNs and corporate proxies change it too. If a vendor needs to allow-list you, ask your provider for a static address rather than allow-listing a value that will move.