Static vs Dynamic IP Address: What's the Difference?

Static or dynamic depends on which of your addresses you mean

The static-versus-dynamic question has a separate answer for each address your connection carries. Your laptop's private address comes from your router, the router's outside address comes from your internet provider, and on IPv6 every device also makes up short-lived addresses of its own. Most confusion, including the very common "is 192.168 a static IP?", comes from checking one layer and reading the answer as if it applied to another.

A static address is one that has been fixed on purpose: typed into the device, reserved on the router, or sold to you by the provider. A dynamic address is handed out automatically by DHCP (Dynamic Host Configuration Protocol, the system that lends addresses to devices as they join a network). The private range your router uses, 10.x, 172.16-31.x or 192.168.x under RFC 1918, is never seen by websites, so whether it is static only matters inside your home. The address websites see is the public one, and your provider decides whether that one moves.

A dynamic address is renewed, not redrawn, so it can stay the same for months

Dynamic does not mean random. Under DHCP, defined in RFC 2131, a device borrows an address for a set period called a lease and asks to extend it halfway through. The standard tells the DHCP server to try to return the same address each time the device asks, so a dynamic public IP often looks static for long stretches, then changes after an outage, a long power-off or maintenance on the provider's side.

The timers explain the everyday behaviour. With a 24-hour lease the device asks its own DHCP server to renew after 12 hours and, if that server does not answer, asks any server after 21 hours. Only if the lease runs out, typically because the router was switched off for longer than the lease, does the device start from scratch and possibly receive a different address. That is why restarting a router for a minute usually gives you back the same public IP, while leaving it off overnight sometimes does not.

Your router's WAN page, not your laptop's settings, shows what your provider gives you

Checking your computer tells you only how the router treats that computer. To learn whether your public address is static or dynamic you need the router's internet (WAN) status page and a public IP lookup, and comparing the two also reveals carrier-grade NAT, the setup that matters most for gaming and remote access. The whole check takes about two minutes.

1. 1Device (private) address, Windows 11: Start > Settings > Network & internet > Wi-Fi > Manage known networks > your network (for a cable: Ethernet > your connection). Next to IP assignment, "Automatic (DHCP)" means dynamic and "Manual" means static (Microsoft Support).
2. 2Device (private) address, Mac: Apple menu > System Settings > Network > your connection > Details > TCP/IP. Configure IPv4 shows "Using DHCP", "Using DHCP with manual address" or "Manually"; the Renew DHCP Lease button appears only when DHCP is in use (Apple Support).
3. 3Router's internet address: sign in to the router's admin page or app and open the Internet, WAN or Status page. Note the connection type (DHCP or Dynamic IP; PPPoE, a login-based connection some providers use; or Static IP) and the WAN IP address shown there.
4. 4Public address: open our What Is My IP tool with any VPN switched off. It shows the IPv4 or IPv6 address websites see.
5. 5Compare: if the router's WAN IP matches the public IP, the router holds a real public address. If the WAN IP starts with 100.64 to 100.127, you are behind carrier-grade NAT (the RFC 6598 shared range). If it starts with 10., 172.16-31. or 192.168., there is a second router in front of yours.

A second quick test works when you cannot reach the router: write down the public IP, leave the router unplugged overnight, and check again. A change proves the address is dynamic. No change proves nothing, because a DHCP server tries to hand back the same address.

Static and dynamic IPs differ in reachability and cost, not in speed or safety

The practical difference between a static and a dynamic public IP is whether other people and services can find you at the same address tomorrow. That matters for hosting a server, reaching a home camera or a NAS from outside, or being put on an employer's allowlist. For browsing, streaming and gaming the assignment method changes nothing about speed; speed depends on the line, the route and the server at the other end.

Practical rule:Pay for a static IP only when something outside your home has to find you at a fixed address. If you only browse, stream or game, a dynamic IP does the same job, and a static one just makes your household easier to recognise.

For gaming and port forwarding, carrier-grade NAT matters more than static vs dynamic

Carrier-grade NAT (CGNAT) is the reason many people who ask for a static IP are really fighting something else. With CGNAT the provider gives your router an address from the 100.64.0.0/10 shared range, set aside in RFC 6598 in April 2012, and many customers leave the provider's network through the same public IPv4 address. Nobody outside can open a connection to your router, so port forwarding in the router's menu does nothing.

That is what games report as a strict or moderate NAT type (the console's warning that others cannot connect to it), and what stops hosting a game server, reaching a security camera or seeding torrents to all peers. RFC 7021, the IETF's 2013 assessment of CGNAT, recorded peer-to-peer Xbox gaming and seeding failing behind it in its test network; later console updates improved some games, which the same document notes. The fixes, in order of cost: ask the provider for a public IPv4 address, use IPv6 where the game supports it, or buy a static IP. A VPN dedicated IP does not do the same job, because incoming connections reach the VPN server, not your console or PC.

A dynamic public address, by contrast, is rarely the problem for gaming. Consoles and PCs work out the current address themselves, and the address changing once in a while at most drops a session. See do you need a VPN for gaming for what a VPN changes on ping and on NAT, and our gaming VPN ranking.

A DHCP reservation makes a device static at home; only your provider can fix the public IP

Making an address static takes two different routes depending on the layer. Inside your home you can fix any device's private address yourself, for free, and the router's DHCP reservation is the safer way to do it than typing an address into the device. The public address is the provider's to assign: you can ask for a static one, usually at a price or on a business plan, but no router or device setting creates it.

1. 1Reserve on the router (recommended). On TP-Link routers the menu is Advanced > Network > DHCP Server > Address Reservation (Network > DHCP Server on some models): add the device's MAC address and the IP you want. TP-Link's own wording is that the device "will always receive the same IP address each time it connects".
2. 2Or set it on the device. Windows: IP assignment > Edit > Manual. Mac: Configure IPv4 > Manually. Choose an address outside the router's DHCP pool, or two devices can end up with the same address.
3. 3Turn off address rotation for that network. A reservation is keyed to the Wi-Fi (MAC) address. Apple's private Wi-Fi address can be Off, Fixed or Rotating, and Rotating changes it every two weeks (iPhone: Settings > Wi-Fi > the info button > Private Wi-Fi Address), after which the reservation no longer matches.
4. 4Ask the provider for a public static IP. Providers sell these per address or in blocks; AT&T's support page, for example, lists blocks of 8, 16, 32 and 64 addresses, of which 5, 13, 29 and 61 are usable because three addresses per block are reserved.

If you only need to reach home from outside and the router holds a real public address, dynamic DNS is the free alternative: a small service on the router updates a hostname whenever the address changes. It does not help behind carrier-grade NAT, because the address it would publish is shared.

On IPv6 the provider's prefix can be fixed while your device's address still changes daily

IPv6 splits the question in two. The provider hands your router a prefix, the first half of the address, which may be stable or may change like a dynamic IPv4 address. Each device then builds its own second half, and phones and computers add temporary addresses for outgoing connections. RFC 8981, the current standard for them, sets a default preferred lifetime of one day and a valid lifetime of two days, so the IPv6 address websites see normally changes every day by design.

IPv6 matters here because it is where the address shortage ends. Google's statistics put users reaching Google over IPv6 at 47.6% on average for 1-27 September 2026, up from 4.0% in September 2014. IPv4 addresses are the scarce ones, which is why a fixed public IPv4 address costs extra and why providers share them through carrier-grade NAT. If your IP lookup shows an IPv6 address, sites that support IPv6 see that one rather than your IPv4 address.

A VPN replaces your public IP with a shared, fixed or dedicated one

A VPN is the other way to change the public address sites see, and VPN addresses come in the same two flavours. By default, VPN servers give you a shared address that many customers use at once and that changes when you reconnect; that is what makes it hard to link to you. A dedicated IP is a static VPN address sold as an add-on that only you use, useful for allowlists and fewer CAPTCHA checks, at the cost of standing out again.

Two limits apply to every dedicated IP. First, it does not open ports to your home: CyberGhost's help centre points out that a remote desktop connection to a dedicated IP reaches the VPN server, not your device. Second, it makes you recognisable again, which is the opposite of what a shared VPN address is for. Use one for a specific job, such as a work allowlist, and keep a shared server for everything else. Our dedicated IP glossary entry and the guide to changing your IP address cover the everyday case.

When an address won't behave: the symptom tells you which layer to fix

Most address problems at home come from a mismatch between layers: a device fixed to an address the router also lends out, a reservation that no longer matches a rotating Wi-Fi address, or a port forward on a router that has no public address to forward. Start from the symptom and fix the layer it points to.

1. 1"IP address conflict" after setting a static address: the address is inside the router's DHCP pool. Move it outside the pool or use a reservation instead.
2. 2A reserved device keeps getting a new local IP: the phone is using a rotating private Wi-Fi address. Set that network to Fixed or Off, then update the reservation with the MAC address now shown.
3. 3Port forwarding set up but nothing connects from outside: compare the router's WAN IP with your public IP. A 100.64-100.127 WAN address means CGNAT; ask the provider for a public IPv4 address.
4. 4The public IP changed and a remote camera or server disappeared: the address is dynamic. Set up dynamic DNS on the router, or ask for a static IP.
5. 5A site or employer allowlist rejects you on the VPN: shared VPN addresses change. Use a dedicated IP, or turn the VPN off for that site with split tunnelling.
6. 6Your IP lookup shows an unfamiliar address: it may be your IPv6 address, which rotates by design, or a VPN or iCloud Private Relay that is switched on.

A static public IP is as safe as a dynamic one, but it ties your household to one address

A static public IP is not less secure in itself: the same ports are open or closed, and the same router firewall protects you. What changes is time. A fixed address lets websites, ad networks and anyone scanning the internet associate everything from your household with one number for as long as you keep it, and a service exposed at home stays at a known address. A dynamic address blurs that only slightly, because most providers hand back the same one for long periods.

For privacy, the address is a small part of the picture: cookies, logins and browser fingerprints identify you whether your IP is static or dynamic. Our guide on what the Wi-Fi owner can see and the post on how to hide your IP address go through what a VPN does and does not hide.