Saturday, 31 Oct 2026 · Hong Kong Hong Kong and China labour news in English
CLB.org.hk China Labour Bulletin Board
Hong Kong news · dedicated AI coverage 中國勞工資訊板 · Labour, employment, jobs and AI.
Artificial Intelligence

What your public IP reveals—and what it does not—when you work remotely

A public IP lookup reveals your internet service provider and approximate location, but not your exact address or identity. This article explains what workers should—and should not—infer from tools like WhatIsMyIP.now, and how VPNs, IPv6, and privacy laws affect remote work.

What your public IP reveals—and what it does not—when you work remotely

When you connect to a coffee shop Wi-Fi in Central or a co-working space in Cyberjaya, your device is assigned a public IP address. A quick visit to a site like WhatIsMyIP.now will display that address, along with your internet service provider and a rough geographic location. For many remote workers, this feels like a privacy intrusion—or a useful diagnostic tool. But what does that string of numbers actually reveal? And, just as importantly, what does it not?

What a public IP lookup shows

A public IP address is the identifier your internet service provider (ISP) assigns to your home or office router. When you use a site such as WhatIsMyIP.now, the service reads the IP address of the device that made the request and returns it on screen. From that address, the site can typically show:

  • Your ISP – for example, Hong Kong Broadband, StarHub, or Telstra.
  • A general location – usually the city or district where the ISP’s registered block of addresses lives, not your actual desk.
  • Your IP version – IPv4 or IPv6.

This information is the same that any website you visit can see. It is not hidden. But it is also not a precise GPS coordinate.

What it does not reveal

Despite what some workers fear, a public IP lookup alone cannot tell anyone:

  • Your exact street address – IP geolocation databases are often accurate only to the suburb or district level. In Hong Kong, that might mean “Wan Chai” rather than “12th floor, 34 Queen’s Road East.”
  • Your name or identity – An IP address is not a person. As the APNIC blog notes, an IP address can be part of identifying an individual when combined with other data (such as ISP logs or account records), but the address alone is not a name.
  • Your device’s local activity – The lookup shows the address of your router, not what you are doing on your laptop.
  • Your exact physical location if you use a VPN or mobile hotspot – These services route traffic through other IP addresses, masking your actual connection point.

IPv4 vs. IPv6: what workers should know

Most public IP lookups will show either an IPv4 address (e.g., 203.0.113.1) or an IPv6 address (e.g., 2001:db8::1). The Internet Protocol version 6 specification (RFC 8200) describes IPv6 as the successor to IPv4, designed to solve address exhaustion. For a remote worker, the practical difference is small: both versions reveal similar information to a lookup site. However, IPv6 addresses are often assigned per device rather than per router, which could in theory make it easier to track a specific laptop across different networks. In practice, most consumer routers still use IPv4 or a dual-stack configuration, so the privacy implications remain similar.

VPNs and the limits of a lookup

If you connect through a corporate VPN, WhatIsMyIP.now will show the VPN server’s IP address, not your local one. This is a key privacy feature. The NIST Guide to Enterprise Telework, Remote Access, and BYOD Security (SP 800-46 Rev. 2) recommends that organisations use encrypted tunnels to protect data in transit. A VPN does not make you anonymous—your employer can still see your activity—but it does prevent a coffee shop owner or a website from seeing your home IP.

However, a VPN is not a silver bullet. If the VPN disconnects unexpectedly (a “VPN drop”), your traffic may fall back to your real IP address. Workers should check for a kill switch or use a firewall rule that blocks traffic when the VPN is down.

Is an IP address personal data? The regulatory view

Under many privacy frameworks, an IP address is considered personally identifiable information (PII). The APNIC blog explains that while an IP address alone may not identify an individual, it can be combined with other data—such as ISP connection logs or timestamps—to do so. In Hong Kong, the Personal Data (Privacy) Ordinance does not explicitly list IP addresses, but the Privacy Commissioner has indicated that data capable of identifying an individual may be protected. For workers in jurisdictions with stronger protections (such as the EU’s GDPR or Singapore’s PDPA), an IP address is clearly personal data.

This means that if your employer logs your IP address alongside your name and login time, that combination is subject to data protection obligations. As a worker, you have a right to know what data is collected and how it is used.

A protocol for checking your own public IP

If you want to see what information your public IP reveals, you can run a simple check. Note that this article does not perform the test; it provides a protocol you can follow yourself.

  1. Disconnect any VPN or proxy.
  2. Open a browser and go to WhatIsMyIP.now (or any similar lookup site).
  3. Write down the IP address, ISP name, and location shown.
  4. Compare the location with your actual physical location. Is it the same district? The same building?
  5. Now connect to your corporate VPN and repeat steps 2–3. The IP address and location should change to those of the VPN server.
  6. If you have access to an IPv6 test site, check whether your connection uses IPv6 and whether the location accuracy differs.

This test will help you understand exactly what a website can learn about your connection—and what it cannot.

Limitations and security considerations

No public IP lookup tool can tell you whether your connection is secure. A site like WhatIsMyIP.now does not scan for malware, test your firewall, or check for DNS leaks. It simply reads the IP address of the device that contacted it. For a fuller security picture, workers should also:

  • Use a VPN with a kill switch when on untrusted networks.
  • Ensure HTTPS is enforced (look for the padlock in your browser).
  • Keep your operating system and software updated.
  • Review your employer’s remote work policy for data handling rules.

Practical checklist for remote workers

  • Check your public IP – Use a lookup site to see what is visible.
  • Use a VPN – Especially on public Wi-Fi in cafes, hotels, or co-working spaces.
  • Know your IP version – IPv6 may be more trackable; consider disabling it if your VPN does not support it.
  • Understand what is not revealed – Your exact address and name are not exposed by an IP lookup alone.
  • Read your company’s privacy policy – Find out if your IP address is logged and for how long.
  • Test with and without VPN – See the difference for yourself using the protocol above.

Your public IP address is a useful piece of network information, but it is not a surveillance tool. Knowing what it reveals—and what it does not—helps you work remotely with a clearer understanding of your digital footprint.

Sources and further reading

Product features and terms can change; check the provider's current information before using a service for workplace material.

Adam
Editor in Chief

Editor in Chief overseeing CLB.org.hk coverage and editorial standards.