Most websites do not need a dedicated IP address just to use HTTPS, appear in search results, or load quickly. It becomes useful when another system must allowlist a predictable endpoint, your server sends enough email to justify managing its own IP reputation, or you want to avoid sharing address-level problems with unrelated tenants.
Two checks matter before you pay for one. First, "dedicated" means that the provider assigns the address only to your account or server. "Static" means that the address is expected to stay the same. Providers often bundle those properties, but they are not identical. Second, a website's dedicated IP may not be the IP that its mail server uses for outbound messages.
| Requirement | Does a dedicated IP help? | What to confirm |
|---|---|---|
| Standard HTTPS certificate | Usually no | The host supports SNI |
| Outbound email reputation | Sometimes | Mail actually leaves through the dedicated IP, and you can configure PTR, SPF, DKIM, and DMARC |
| Firewall, VPN, or partner allowlisting | Yes | The address is also static and is used in the required traffic direction |
| PCI DSS or another compliance framework | Not by itself | The assessor accepts the complete segmentation and control design |
| Isolation from another tenant's IP reputation | Yes | No other customer sends or serves traffic from the address |
| Better site speed or application security | No | Those depend on the server, application, and network controls |
What a dedicated IP address is
A dedicated IP address is a public IPv4 or IPv6 address assigned exclusively to one account, server, or customer while that allocation remains active. You can still host several domains of your own on it. The word "dedicated" describes who may use the address, not how many sites you run or whether you own a physical server.
Shared hosting commonly works differently. Many customer accounts can use one public IP, while the web server selects the right site from the hostname in each request. This is efficient and does not stop those sites from using separate domains or certificates.
An account can therefore have a dedicated IP while still sharing the operating system, CPU, RAM, storage, and uplink with other accounts. If you are comparing those wider resource and management differences, read our shared hosting vs VPS hosting guide.
Where a dedicated IP helps
Stable allowlisting, when the address is also static
Partner APIs, corporate firewalls, VPNs, license servers, and remote management rules often allow traffic only from or to approved IP addresses. A predictable address makes those rules much easier to maintain.
The traffic direction matters. A dedicated address assigned to a server is an obvious destination for inbound SSH, RDP, or HTTPS. For a partner that allowlists your source IP, confirm that outbound traffic is translated to the same address. A provider can route inbound traffic to one IP while sending outbound traffic through another gateway.
Ask whether the address will survive reboots, host maintenance, and normal migrations. A dedicated address can still be renumbered under a provider's terms, so use DNS names where the integration supports them.
Email reputation can belong to one sender
A dedicated sending IP separates your IP reputation from other senders. Google's email sender guidelines explain that activity from every sender on a shared IP affects that IP's reputation. With a dedicated sending address, your own complaints, bounces, sending pattern, and list hygiene determine the address history.
This only applies to the sending IP. A dedicated website IP does nothing for deliverability if cPanel, your hosting provider, or a third-party email service sends mail through a different shared relay. Check the Received headers of a delivered message or ask the provider which public IP its SMTP service uses.
The IP is only one part of delivery. As of July 24, 2026, Gmail also requires sender authentication, valid forward and reverse DNS, TLS, and controlled spam rates. A dedicated IP without PTR records, SPF, DKIM, DMARC where required, and sensible sending practices is simply a private way to build a bad reputation.
Address-level incidents have a smaller blast radius
If several unrelated sites or senders share one address, an address-specific blocklist entry, firewall rule, rate limit, or provider mitigation can affect all of them. Exclusive use removes that particular dependency.
This isolation has limits. A large attack can still congest shared infrastructure or trigger controls at a wider prefix or network level. A dedicated IP reduces exposure to events tied to one shared address; it does not turn shared infrastructure into a private network.
Legacy software and IP-based licensing still exist
Some vendor licenses, older applications, partner integrations, and monitoring systems identify a server by IP instead of by hostname or account identity. A dedicated static IP may be the simplest compatible endpoint.
Verify that requirement before choosing a plan. Connecting to a website by raw IP can select the wrong virtual host, and a normal TLS certificate for example.com will not validate when a client connects to https://203.0.113.10/.
Where it does not help
HTTPS no longer requires one
Server Name Indication in RFC 6066 lets a TLS client include the hostname it wants during the handshake. The server can then choose the matching certificate even when several domains use the same underlying IP address.
Modern browsers and web servers support SNI, so ordinary HTTPS is not a reason to buy a dedicated address. Exceptions are limited to legacy clients and unusual configurations that cannot send or process SNI.
A fresh sending IP starts without a reputation
A new dedicated IP has no sending history. Sending a large campaign immediately can cause throttling or junk-folder placement while mailbox providers decide how to treat it. Amazon SES documents the same tradeoff in its shared and dedicated IP comparison: shared pools are ready immediately and suit low-volume senders, while standard dedicated IPs need warm-up and consistent volume.
For a small website that sends password resets, contact-form replies, and a few invoices, a well-managed shared mail service may produce better results with much less work. Dedicated email infrastructure is most useful when the sending volume and operational requirements justify maintaining it.
IPv4 may cost extra
The RIPE NCC exhausted its remaining IPv4 pool in November 2019. Networks now recover addresses, use transfer markets, or share IPv4 space while IPv6 deployment continues. That scarcity is why many providers limit extra IPv4 addresses or charge a monthly fee for them.
Check whether the advertised price includes the first dedicated IPv4 address, whether additional addresses are available, and what justification the provider requires. IPv6 space is far more plentiful, but an IPv6-only service will not replace IPv4 reachability for every visitor or integration.
It does not allocate more server resources
An IP address does not add CPU time, RAM, storage I/O, throughput, or DDoS filtering. It also does not repair an outdated plugin, close an exposed admin panel, or configure a firewall. Those are separate properties of the hosting platform and application.
Compliance requires more than an address assignment. As of July 24, 2026, the PCI Security Standards Council describes effective segmentation in terms of controls such as properly configured firewalls, routers with access-control lists, VLANs, and other technologies that restrict access. Its segmentation guidance does not make a dedicated IP a substitute for validated isolation. If an audit matters, ask the assessor about the complete architecture rather than buying an IP and treating the box as checked.
How to check what your hosting already includes
Start with the provider's control panel, order confirmation, and product documentation. Those sources can tell you whether the address is contractually assigned only to your account. A command on the server can show which addresses it sees, but it cannot prove that the provider does not reuse an upstream proxy, NAT address, or mail relay.
For a domain, inspect the public DNS records:
dig +short A example.com
dig +short AAAA example.comIf the site uses a CDN or reverse proxy, these results show the proxy's public addresses rather than the origin server. Seeing unrelated domains on the same address is evidence that the address is shared, but finding no other domains is not proof that it is dedicated. Reverse-IP databases are incomplete, and one customer can legitimately host many domains.
On a Linux VPS, list the addresses on active interfaces:
ip -brief address show upCompare the result with the VPS control panel. Private addresses, link-local addresses, and a single configured address from a larger routed IPv6 subnet may all appear, so the provider's allocation details still matter.
If the server sends mail directly, check whether you control reverse DNS for its sending address:
dig -x 203.0.113.10 +shortReplace the documentation address with the real sending IP. A matching PTR record helps with mail setup, but it does not prove exclusivity either.
When the product page is unclear, ask the provider four precise questions:
- Is this public IPv4 address assigned only to my account or server?
- Is it expected to remain unchanged during routine maintenance and migrations?
- Does outbound web and SMTP traffic use this address?
- Can I set its PTR or reverse DNS record?
Those answers are more useful than a generic "dedicated IP included" badge.
Do you need one?
Choose a dedicated IP when a stable allowlist, a verified IP-based integration, direct high-volume mail, or address-level tenant isolation has operational value. Skip it when the only reasons are standard HTTPS, better rankings, faster pages, or a vague promise of improved security.
QDE sells both shared hosting and VPS plans, so our product interest is direct. Every QDE KVM VPS includes one dedicated IPv4 address and a /64 IPv6 subnet. Every QDE shared hosting account includes one dedicated IPv4 address, with one IPv6 address available on request. The shared hosting account still shares server resources; only its public IPv4 assignment is exclusive to that account.
Need help choosing between them? Contact the QDE team with the software you run and any IP, mail, or allowlisting requirements.
Frequently asked questions about dedicated IP addresses
What is the main benefit of a dedicated IP address?
It gives one account or server exclusive use of an address. That can provide a predictable endpoint and separate address-level reputation or blocking from unrelated tenants. The benefit only applies at the IP layer.
Is a dedicated IP the same as a static IP?
No. Dedicated means exclusive to one customer while assigned. Static means expected to remain unchanged. Many hosting products provide both, but you should confirm the provider's migration and renumbering policy when a firewall or partner integration depends on the address.
Does every QDE VPS include a dedicated IP?
Yes. Every QDE VPS plan includes one dedicated IPv4 address and a /64 IPv6 subnet as standard plan features.
Do I need a dedicated IP for an SSL certificate?
No for normal modern hosting. SNI lets one IP serve the correct certificate for many domain names. A dedicated IP is only relevant for legacy clients or a specific configuration that cannot use SNI.
Will a dedicated IP automatically improve email deliverability?
No. It isolates the sending IP's reputation only when outbound mail actually uses that address. New IPs also need a careful warm-up, valid forward and reverse DNS, email authentication, and clean sending practices. Low-volume senders often do better on a reputable shared mail service.
Can shared hosting include a dedicated IP?
Yes. Dedicated describes the address assignment, not the server resources. QDE shared hosting assigns one dedicated IPv4 address to each account even though the account still runs on a shared hosting platform.