Everyday Privacy

iCloud Private Relay vs a VPN: What's the Difference?

Private Relay is built into iCloud+ and looks like a VPN, but it protects less and works differently. Knowing the gap tells you whether it is enough for you.

What Private Relay Does

Private Relay is part of the paid iCloud+ subscription. When it is on, your Safari traffic is sent through two separate relays. Apple says the first relay knows your IP address but not the sites you visit, and the second knows the site but not who you are. Apple also says it covers DNS lookups and unencrypted web traffic from apps.

The result is that the sites you visit see a general location instead of your exact IP address, and your internet provider has a harder time seeing which sites you open in Safari.

What It Does Not Do

It is not a device-wide VPN. It covers Safari and some app traffic, not everything your phone or Mac sends.
You cannot pick a country. You choose between keeping your general location or using a broader country and time zone. It will not make you appear in another region.
It does not hide you from the sites you log in to. Once you sign in, the site knows who you are.
It is Apple-only. There is nothing for Windows, Android, or smart TVs.

Side by Side

Coverage: Private Relay covers Safari and some app traffic. A VPN covers the whole device.
Location choice: Private Relay gives you a general area. A VPN lets you pick a server location.
Who you trust: Private Relay splits trust between Apple and a partner. With a VPN, the provider can see your traffic metadata, so choose carefully and read about no-logs claims.
Platforms: Private Relay needs Apple devices and iCloud+. A VPN runs almost anywhere.

Can You Use Them Together?

Generally no. Apple's own settings note that Private Relay is turned off while a VPN is active, and some networks and ISPs block or limit it. If a site, school, or workplace network is acting strangely, check whether Private Relay is switched on for that network.

Which One Do You Need?

If you mostly browse in Safari on Apple devices and want your IP address and lookups hidden at no extra cost beyond iCloud+, Private Relay is a sensible default. If you need coverage across every app, a chosen location, or non-Apple devices, you need a VPN. Neither one replaces a DNS ad blocker for blocking trackers. See is a VPN worth it and VPN basics if you are deciding.

Common Questions

Is iCloud Private Relay a VPN?

No. It uses two relays and covers Safari and some app traffic. A VPN routes all of a device's traffic through one provider.

Is Private Relay free?

It requires an iCloud+ subscription, which is paid.

Does Private Relay stop ads and trackers?

It hides your IP address. It does not block ads or trackers. For that, use a DNS blocker or a content blocker.

Can I use Private Relay on Windows or Android?

No. It works on Apple devices only.

Why does Private Relay turn off sometimes?

A VPN, a network setting, or a workplace or school network can disable it. Your device will usually tell you when it is off.

NEED ALL-APP COVERAGE?

A VPN protects every app on the device. Harbor VPN has its own limits, and we spell them out in why Harbor VPN has limits.