When the internet suddenly slows down and pages load slowly, it's often frustrating for router owners. In most cases, the culprit is a weak signal or bandwidth congestion, but there's also a more serious possibility: unauthorized access by unauthorized individuals. Neighbours or simply attackers could hack your password and use the traffic for their own needs, which directly affects the connection speed.
Fortunately, modern technologies make it possible to audit connected devices directly from a mobile phone, without the need for a computer. Android and iOS operating systems offer ample tools for network analysis, and router manufacturers are implementing user-friendly management interfaces. You don't need to be an expert in the field. IT securityto perform basic diagnostics.
In this article, we'll cover all available verification methods in detail: from logging into your router's web interface to using specialized scanning apps. You'll learn how to distinguish your devices from others, understand what data to analyze, and discover how to instantly block an intruder. The main sign of a hack is the appearance of devices you don't recognize in your device list, or a sharp drop in speed when there are no active downloads.
Analysis of indicators and indirect signs of invasion
Before moving on to technical testing, it's worth paying attention to your network's behavior. There are indirect signs that may indicate someone else is accessing your WiFi. For example, if the wireless data indicator on your router is blinking frantically when all your devices are asleep or turned off, this is cause for concern.
Another warning sign is the inability to connect to your own network due to authentication or IP address errors. This may indicate that the router's connection limit has been reached by unauthorized devices. You should also pay attention to unusual activity in your browser history or pop-ups if you haven't installed any new extensions.
- 📉 A sharp drop in internet speed during hours when you are alone at home.
- 💡 The WLAN indicator on the router is constantly on or blinking, even without user activity.
- 🔒 Unable to connect to the network with the correct password due to the client list being full.
However, relying solely on indirect signs is not an option. The lights may flicker due to background system updates on your smartphone or smart TV. Therefore, for an accurate diagnosis, it's necessary to use software-based traffic analysis and a list of connected clients.
⚠️ Attention: Don't rush to change your password at the first sign of lag. First, make sure it's not a problem with your ISP or an overheating router. Frequently changing your password without fixing the security vulnerability (for example, using WEP instead of WPA2) will not help.
Checking the router's web interface from your phone
The most reliable and accurate way to find out who is connected to your WiFi is to log into your router's admin panel. This method works regardless of the device model, whether it's TP-Link, Asus, Keenetic or MikroTikAll you need is a browser on your smartphone and access to the network you want to check.
To get started, open any browser (Chrome, Safari, Yandex) and enter your router's IP address in the address bar. Most often, this is 192.168.0.1 or 192.168.1.1The exact address is usually written on a sticker on the bottom of the device. After entering the address, the system will ask for a username and password to access the settings.
If you have never changed this data, try the standard pair: login admin and password admin (or an empty string). This information can also be found on the factory sticker. After successful authorization, the control panel will open, where you should find the section related to the wireless network or client status.
Interfaces vary by manufacturer, but the search logic is the same. Look for tabs with names like "Wireless," "WLAN," "Status," "Network Map," or "Client List." This is where a table of all active connections is displayed in real time.
Using mobile network scanner apps
If logging into your router settings seems too complicated or you've forgotten your administrator password, specialized apps can help. They automatically scan your network and display a list of all devices, their IP and MAC addresses, and the manufacturer of the equipment.
One of the most popular tools is the application FingIt's available for both Android and iOS. After installation and launch, the program will ask for permission to access your local network. After scanning, you'll receive a complete list of all devices sharing the same WiFi zone.
Other worthy alternatives include Network Analyzer And WiFi AnalyzerThese snails not only allow you to see connected devices but also analyze channel load, which helps you select the least congested frequency for stable operation.
It's important to understand that these apps operate on your phone's level. They see the same things as your router, but present the information in a more convenient, visualized form. Some features, such as user blocking, may be paid or require root access, but the basic list view function is available for free.
Decoding MAC addresses and device names
When you see the list of connected devices, you'll be confronted with a series of strange symbols and numbers. Each device on the network is identified by a unique MAC address (Media Access Control Address). This is the physical address of the network card, assigned by the manufacturer and appears as a sequence of 12 hexadecimal characters, for example: 00:1A:2B:3C:4D:5E.
The first six characters of a MAC address (OUI — Organizationally Unique Identifier) identify the device's manufacturer. Knowing this code, you can easily determine what kind of gadget it is: a phone Samsung, laptop Apple or a smart light bulb XiaomiThe rest of the address is a unique identifier for a specific instance.
The device's hostname is often also displayed in the list. Modern gadgets usually have descriptive names, such as "Ivan-iPhone" or "LivingRoom-TV." However, if you see a device named "Unknown" or "Android-xyz," it doesn't always mean it's jailbroken. It could be your old tablet, which is simply rarely used and hasn't been renamed.
What is MAC address randomization?
Modern versions of iOS and Android (starting with version 10) use MAC address randomization to enhance privacy. When connecting to a new network, a device may generate a temporary, random address instead of its real one. This can be confusing when trying to identify the device from old records, but within your home network (if it's already familiar), the device often uses a permanent address.
To accurately identify the device, check the number of connected devices. If you have five devices in your home and the list shows seven, two of them are redundant. Disconnect your devices one by one and observe which one disappears from the list.
Table of manufacturer identification by MAC address
To simplify the device identification process, you can use MAC address prefixes. Below is a table of codes for popular device manufacturers that you're most likely to see in your client list.
| MAC prefix (first 6 characters) | Manufacturer | Typical devices |
|---|---|---|
| 00:1A:79 | Apple | iPhone, iPad, MacBook |
| 00:1E:58 | Samsung Electronics | Smartphones, TVs, tablets |
| 3C:5A:B4 | Android smartphones, Chromecast | |
| 04:CF:8C | Xiaomi | Phones, routers, smart home |
| 00:50:56 | VMware | Virtual machines (PC) |
Using this table, you can quickly eliminate your devices. For example, if you don't have any Apple devices, but a device with the prefix 00:1A:79 appears in the list, this is a clear cause for concern. However, keep in mind that prefix lists are vast, and to accurately determine an unknown code, it's best to use online MAC address calculators.
Actions when a foreign device is detected
If you've determined that an intruder is connected to your network, you need to act quickly and decisively. Simply disabling the device with a scanner app is often a temporary solution, as the attacker may reconnect automatically.
The first and most effective step is to completely change your WiFi network password. Go to your router settings (as described above), find the Wireless Security section, and create a new, complex password. Use a combination of letters, numbers, and special characters, at least 10 characters long. After this, all devices will be disconnected, and you'll need to re-enter the password on your devices.
The second step is to enable MAC filtering. This feature allows you to create a "whitelist" of devices that are allowed to connect. Even with your password, a device with an unknown MAC address will not be able to connect to the network. You can find this option in the "Wireless MAC Filtering" section.
- 🔐 Change the router administrator password if it remains the default (admin/admin).
- 📡 Disable the WPS function, as it is often a vulnerability for hacking.
- 🔒 Make sure you are using an encryption protocol WPA2-PSK or WPA3.
⚠️ Attention: After enabling MAC address filtering, be careful when purchasing new devices. You'll have to manually enter their MAC addresses into the router settings, otherwise they won't be able to connect to the internet.
Frequently Asked Questions (FAQ)
Can my neighbor see what websites I visit if he's connected to my WiFi?
Theoretically, yes, if an unencrypted connection (HTTP) is used or if the attacker infiltrates your network (a Man-in-the-Middle attack). However, with modern HTTPS (like the padlock in the browser), they'll only see the website domain, not specific pages or passwords. Nevertheless, the very fact of someone accessing your network poses a risk of data leakage.
Why does the app show the device as "Unknown" or "N/A"?
This means the app's database doesn't contain information about the manufacturer of this MAC address, or the device is hiding its hostname. This is often the case for IoT devices (smart plugs, sensors) or devices with randomized MAC addresses. Check your device list.
Will changing the WiFi password reset the router settings?
No, changing your wireless network password won't affect other provider settings or router configuration. You'll only need to re-enter the new WiFi password on all your phones, laptops, and TVs.
How to permanently lock a device without changing the password?
This is possible using the "Blacklist" feature in the router interface. You add the intruder's MAC address to the blacklist, and the router blocks their access. However, if the hacker knows how to change their MAC address (clone it), they can bypass this block, so changing the password is more secure.
Does the number of connected devices affect internet speed?
Yes, the bandwidth is shared among all active users. If someone is downloading large files or watching 4K videos, the speed on other devices may drop significantly, even if the internet connection is billed as "unlimited."