Here's something that surprises a lot of people: your laptop has two IP addresses right now, and they're completely different numbers. One is the address the internet sees. The other only exists inside your home. Understanding the split between public and private IP addresses clears up a huge amount of confusion about home networking, port forwarding, and why your VPN does what it does.
The two-address system
When you set up internet at home, your provider gives your router a single public IP address. That's the address the rest of the internet uses to reach you. Every website, game server, and app you connect to sees that one number.
But you have more than one device. A phone, a laptop, a games console, a couple of smart speakers, maybe a TV. They can't all share one address directly — so your router hands each of them a private IP address that's only meaningful inside your own network.
Private addresses come from ranges that are reserved specifically for this purpose and are never used on the public internet:
10.0.0.0 – 10.255.255.255
172.16.0.0 – 172.31.255.255
192.168.0.0 – 192.168.255.255
That's why so many home devices end up with addresses like 192.168.1.4 or 192.168.0.12. It's not a coincidence — it's a global convention.
NAT: the translator in the middle
So how do ten devices with private addresses all share one public address? Through a mechanism called Network Address Translation (NAT), which runs on your router.
When your laptop (192.168.1.4) requests a web page, the router rewrites the request so it appears to come from your public IP. When the reply comes back, the router remembers which internal device asked and forwards it to the right place. To the website, all the traffic looks like it came from one address. Inside your home, NAT quietly keeps everyone's connections straight.
This has a useful side effect: your private devices aren't directly reachable from the internet by default. NAT acts as a basic barrier, because there's no public address pointing straight at your laptop.
How to tell which is which
It's easy to check both:
- Your public IP is shown instantly by a tool like the Check My Setup homepage. It's the address the world sees.
- Your private IP is shown in your device's network settings. On most systems it starts with
192.168or10..
If the two numbers are different — and they almost always are — that's NAT doing its job. If they happen to be the same, you have a public address assigned directly to your device, which is more common on some mobile and business connections.
Why this matters in practice
The public/private distinction explains several everyday situations:
Port forwarding. If you want to run a game server or access a home device from outside, you have to tell your router to forward incoming traffic on a specific port to a specific private IP. Without that rule, NAT has no idea which internal device the request is for.
"My IP keeps changing." Your public IP can change when your provider reassigns it. Your private IPs can change too, when your router's DHCP lease expires and hands out a new one. Assigning a fixed private IP to a device (a "static lease") solves problems with port forwarding and printers that keep disappearing.
VPNs. When you connect to a VPN, your traffic is tunnelled out through the VPN server, so the public IP the world sees becomes the server's address, not yours. Your private network keeps working exactly as before. If you want the full mechanism, see how VPNs actually work.
Privacy. Websites only ever see your public IP. They cannot see your private addresses, your device names, or how many devices are on your network. So when you read about what someone can learn from your IP, it's always the public one — and even that is limited. We cover the realistic risks in what someone can do with your IP address.
A quick mental model
If it helps, think of an office building. The building has one street address (your public IP) that mail is delivered to. Inside, the mailroom (your router, running NAT) sorts everything to individual desks, each with an internal extension number (private IPs). The postal service never needs to know the desk numbers — it just delivers to the building, and the mailroom handles the rest.
The takeaway
You don't have one IP address — you have a public one for the outside world and private ones for your local network, with NAT translating between them. Knowing which is which makes home networking far less mysterious and explains everything from port forwarding to why your VPN changes the address websites see but not the address your printer uses.
Curious what your public IP and location look like to the rest of the internet right now? Check your setup.