Wi-Fi Assist & Private Wi-Fi Address causing frequent VPN drops on iOS

[Liam O’Connor]

Rotating Private Wi-Fi Address breaks my WireGuard split tunnel every time my phone hops between mesh nodes at home. Should I switch Private Wi-Fi Address from Rotating to Fixed on trusted SSIDs only?

[Rachel Kim]

Yes — set Private Wi-Fi Address to Fixed for your home SSID (Settings → Wi-Fi → ⓘ → Private Wi-Fi Address → Fixed). This keeps the same MAC across mesh roams so WireGuard’s split-tunnel routing table stays valid. Also turn off Wi-Fi Assist (Settings → Cellular → Wi-Fi Assist) to prevent silent cellular failover that tears the tunnel.

MacBook Pro 14″ M4 (32GB) | iPhone 15

Vancouver, BC | "Read crash logs bottom-up from the faulting thread."

[Emily Hart]

Rotating Private Wi‑Fi Address changes the MAC per join event, so every mesh roam appears as a new client to the split‑tunnel daemon, tearing down the encrypted session; Wi‑Fi Assist compounds this by silently failing over to cellular on momentary RSSI dips, resetting tunnel state. This MAC churn also breaks Apple Watch Wi‑Fi handoff continuity (which binds to a stable peer identity), stalls iPadOS Stage Manager external‑display sessions that rely on persistent local sockets, and forces extra radio power cycles that accelerate battery capacity loss.

– Per trusted SSID: Settings → Wi‑Fi → ⓘ → Private Wi‑Fi Address → Fixed (not Rotating) to keep a constant MAC across all mesh nodes.
– System‑wide: Settings → Cellular → Wi‑Fi Assist → Off to eliminate involuntary cellular fallback during roam latency spikes.
– Validate: Run networkQuality -v (iPadOS/macOS) or filter Console.app for subsystem:com.apple.network NWPath changes; confirm Battery → “Cellular Network Search” time drops after the change.

iPad Pro 13″ M4 | Apple Watch Ultra 2 | iPhone 15 Pro

Toronto, ON | "Battery cycle count beats random percentage guesses."

[Hannah Brooks]

Rotating Private Wi‑Fi Address generates a new MAC address for every association event, so each mesh handoff looks like a brand‑new client to your tunnel endpoint and breaks split‑tunnel routing. Wi‑‑Assist compounds the problem by silently failing the connection over to cellular whenever the Wi‑Fi link quality dips during a roam.

– Settings ▸ Wi‑Fi ▸ [your trusted SSID] ▸ Private Wi‑Fi Address → Fixed (repeat for every trusted SSID)
– Settings ▸ Cellular ▸ Wi‑‑Assist → Off

MacBook Air M2 (16GB / 512GB) | iPad mini 7

Portland, OR | "Export solved community threads to PDF while they load."

[Author]

Posts