Overview
IPv4 provides about 4.3 billion addresses — far too few for today's internet. IPv6 is the successor designed to solve address exhaustion and modernize addressing. This lesson gives a practical overview of IPv6 and how it differs from IPv4.
Learning objectives
- Explain why IPv6 was created.
- Describe IPv6 address format.
- Understand key differences from IPv4.
Core concept
An IPv6 address is 128 bits (versus IPv4's 32), giving an astronomically large address space — enough for essentially unlimited devices. It is written as eight groups of four hexadecimal digits separated by colons, e.g. 2001:0db8:85a3:0000:0000:8a2e:0370:7334. To shorten them, leading zeros in a group can be dropped and one run of all-zero groups can be replaced with ::, so that example compresses to 2001:db8:85a3::8a2e:370:7334.
How it works
IPv6 keeps the same core idea — logical addresses that route across networks — but changes details. Notable differences from IPv4:
- Vastly larger space removes the need for widespread address sharing (NAT is far less necessary).
- No broadcast; IPv6 uses multicast and a Neighbor Discovery Protocol that replaces ARP.
- Autoconfiguration lets devices self-assign addresses more easily.
IPv4 and IPv6 run side by side today ("dual stack") during the long transition.
Practical example
A modern phone may hold both an IPv4 address (like 192.168.1.10) for older services and an IPv6 address (like 2001:db8::1) for services that support it. When connecting to a site, the device picks whichever protocol both ends support. Much of the internet still relies on IPv4, so both coexist rather than one having fully replaced the other.
Cybersecurity relevance
IPv6 has real security implications: it is often enabled by default but overlooked by administrators, creating blind spots where firewall rules and monitoring cover IPv4 but not IPv6. Attackers can exploit an unmonitored IPv6 path. Security teams must ensure controls and logging apply to both protocols.
Common mistakes
- Ignoring IPv6 in firewall rules and monitoring, leaving an unguarded path.
- Assuming IPv6's huge space makes scanning impossible — targeted techniques still find hosts.
- Confusing hex IPv6 notation with IPv4's decimal octets.
Key takeaways
- IPv6 uses 128-bit addresses (hexadecimal, colon-separated) to solve IPv4 exhaustion.
- It drops broadcast (using multicast/Neighbor Discovery instead of ARP) and eases autoconfiguration.
- IPv6 is often enabled by default; security controls and monitoring must cover it, not just IPv4.
Check your understanding
- How many bits is an IPv6 address, and how is it written?
- Why is an unmonitored IPv6 stack a security risk on a network you thought was locked down?