How to Get a New Temporary IPv6 Address (And Why It Matters)
If you've noticed your device cycling through different IPv6 addresses or you want to manually refresh yours, you're dealing with one of the more quietly clever features of the IPv6 protocol. Understanding how temporary IPv6 addresses work — and how to control them — depends on your operating system, network configuration, and why you need to change it in the first place.
What Is a Temporary IPv6 Address?
IPv6 introduced a privacy feature called Privacy Extensions (defined in RFC 4941) that automatically generates temporary, randomly-derived IPv6 addresses for outbound connections. Unlike your permanent IPv6 address (which is often derived from your device's MAC address using a method called EUI-64), temporary addresses rotate on a schedule to prevent long-term tracking across websites and services.
Most modern operating systems — Windows, macOS, Linux, Android, and iOS — enable Privacy Extensions by default. At any given time, your device may actually have multiple IPv6 addresses simultaneously: a stable link-local address, a permanent global address, and one or more temporary global addresses.
The temporary address is what most external servers see when you browse the web.
Why You Might Want a New Temporary IPv6 Address
There are a few legitimate reasons to refresh or regenerate your temporary IPv6 address:
- Privacy reset — You want to disassociate your current browsing session from your previous one at the network level
- Troubleshooting connectivity — A stale or conflicting address is causing connection issues
- Testing network behavior — You're a developer or sysadmin verifying how your application handles changing client addresses
- ISP or firewall rules — A specific address has been rate-limited or blocked
How Temporary IPv6 Addresses Are Generated
Privacy Extensions work by combining a random value with the network prefix assigned by your router (via SLAAC — Stateless Address Autoconfiguration). The result is an address that looks legitimate but isn't tied to your hardware identity.
These addresses have two configurable lifetimes:
- Preferred lifetime — How long the address is actively used for new connections (typically 24 hours)
- Valid lifetime — How long the address remains recognized before being fully retired (typically 7 days)
Once the preferred lifetime expires, your OS generates a new temporary address automatically. You can force this to happen sooner.
How to Get a New Temporary IPv6 Address 🔄
On Windows
Windows manages IPv6 Privacy Extensions through the netsh command-line tool.
To disable and re-enable temporary address generation:
netsh interface ipv6 set privacy state=disabled netsh interface ipv6 set privacy state=enabled Then disable and re-enable your network adapter (via Settings → Network & Internet → your adapter → Disable → Enable), or run:
ipconfig /release6 ipconfig /renew6 This forces Windows to request a new address assignment and generate a fresh temporary address.
On Linux (NetworkManager or systemd-networkd)
On systemd-based systems, you can toggle the interface down and up:
sudo ip link set eth0 down sudo ip link set eth0 up Or flush the existing IPv6 addresses on an interface:
sudo ip -6 addr flush dev eth0 NetworkManager users can disconnect and reconnect the network profile, which triggers a full SLAAC renegotiation and new temporary address generation.
You can also verify Privacy Extensions are active with:
sysctl net.ipv6.conf.all.use_tempaddr A value of 2 means temporary addresses are preferred for outgoing connections.
On macOS
macOS uses Privacy Extensions by default. To cycle your address, the most reliable method is to turn Wi-Fi off and back on, or go to System Settings → Network → [your interface] → Turn Off / Turn On.
For more control, you can use the Terminal:
sudo ifconfig en0 down sudo ifconfig en0 up On iOS and Android
Mobile operating systems handle IPv6 address rotation automatically and offer limited manual controls. On both platforms, toggling Airplane Mode on then off is the most reliable way to force a full network re-registration and fresh temporary address assignment.
Key Variables That Affect How This Works
Not every setup behaves the same way. Several factors shape what actually happens when you try to get a new temporary IPv6 address:
| Variable | How It Affects the Outcome |
|---|---|
| OS version | Older systems may not support Privacy Extensions or may require manual enabling |
| Router / DHCPv6 configuration | Some routers use DHCPv6 instead of SLAAC, which may assign addresses differently |
| ISP prefix delegation | If your ISP rotates the /64 prefix it delegates to your router, all downstream addresses change anyway |
| Enterprise or managed networks | IT policy may override Privacy Extensions entirely |
| VPN or tunnel active | VPN clients often assign their own IPv6 addresses, bypassing local SLAAC behavior |
The Difference Between Temporary and Stable-Privacy Addresses 🔍
It's worth noting that some operating systems now use a stable-privacy address (RFC 7217) as a middle ground — it's not derived from your MAC address, but it also doesn't rotate on a schedule. This is different from a temporary address. Stable-privacy addresses persist across reboots on the same network but look random to outsiders.
If your OS is generating a stable-privacy address rather than a rotating temporary one, the commands above still work to regenerate it — but it won't cycle automatically the way a true temporary address does.
What Actually Changes — and What Doesn't
Refreshing your temporary IPv6 address changes what remote servers see as your source address. It does not:
- Change your IPv4 address (those follow separate DHCP rules)
- Affect your link-local address (fe80::...), which stays within your local network
- Prevent tracking through cookies, browser fingerprinting, or logged-in accounts
Your network prefix (the first 64 bits of the address) typically stays the same after a local refresh, since it's assigned by your router from the block your ISP delegated. A full prefix change usually requires your router to renegotiate with the ISP — something some routers do on reconnect, and others don't.
Whether a temporary address refresh actually achieves what you're after depends on the specific problem you're trying to solve and exactly how your network — from device to router to ISP — is configured.