An IP address is the numerical identifier of a device on a network. The public IP address assigned to your home internet connection is the address every server you connect to sees, and is the primary linking key between your online activity and your physical location, your subscriber identity at the ISP, and (often) your real name on the ISP’s billing record. IPv4 addresses are 32-bit (around 4 billion possible); IPv6 addresses are 128-bit (a number larger than the count of atoms in the visible universe).
What it means in practice
Your IP address is the link in the chain that nearly every adversary uses first. Advertising networks tie IP to identity via cookie-IP correlation across visits. ISPs maintain logs that map IP-at-time to subscriber-at-time, producible on subpoena (the 2024 Section 702 reauthorization debate centered partly on this point). Civil-litigation discovery uses IP records to identify anonymous commenters and pseudonymous account holders (the John Doe subpoena workflow). Cyberforensic investigations chain IP records across providers to attribute an attack to a person. The structural defense is IP minimization: VPNs and Tor break the IP-to-identity link by interposing an intermediary whose logs (in the case of audited no-log VPNs) do not exist or (in the case of Tor) cannot reconstruct the path.
Where it shows up
Visible to: every website you load, every API your apps call, every email server that receives your messages (the originating IP is in the email headers unless your provider strips it), every video service for content licensing geo-checks, every advertising network for targeting and frequency capping, every cloud service for billing and abuse detection. Not normally visible to: the recipient of an end-to-end encrypted message (the message body has no IP, the metadata to the platform does), peer-to-peer software unless explicitly configured. The Apple iCloud Private Relay and similar privacy-preserving proxies obfuscate IP for some traffic; the protection is partial and varies by service.
What you can change today
Three layers depending on threat model. Layer 1 (everyone): subscribe to Mullvad, Proton VPN, or IVPN and run it always-on, so your daily-life IP is the VPN IP rather than your home IP. Layer 2 (privacy-conscious): on iPhone, enable iCloud Private Relay (Settings, Apple ID, iCloud, Private Relay) to obscure IP from Safari traffic and DNS lookups. Layer 3 (high-target): use Tor Browser for anything that must not link to your real IP at all, accept the speed cost, and never log into a real-name account from Tor. The leak you do not notice is the one that matters: regularly check ipleak.net and dnsleaktest.com from inside your VPN to verify the IP and DNS the world actually sees.