How to Identify and Block Wi-Fi Stealers: A Complete Guide (2026)

Have you noticed your internet has become slower and your data usage is depleting faster than usual? Someone may be using your Wi-Fi without permission. According to Juniper ResearchOne in five home network users has experienced an unauthorized connection. Wi-Fi theft not only reduces speed but also creates security risks: your network can be used to spread viruses or commit illegal activities, for which you will be held accountable.

In this article we will look at 7 proven methodsHow to determine who is connected to your router, even if it's hidden. You'll learn how to view a list of devices through the router's web interface, use mobile apps, and specialized utilities. And most importantly, you'll learn block strangers and configure protection to prevent repeated hacks. These instructions are suitable for routers. TP-Link, ASUS, Keenetic, MikroTik and other popular brands.

No IT expertise required: all methods are described in plain language with step-by-step screenshots and commands. Whether you're a landlord, a small office owner, or simply looking to secure your home network, this article will help you regain control of your Wi-Fi.

1. Signs that someone is stealing your Wi-Fi

Before looking for the culprit, make sure that the problem actually exists. Here 5 key symptoms, which should be a warning sign:

  • 📉 A sharp drop in internet speed at normal times (for example, in the evening), although the provider is not carrying out technical work.
  • 🔋 Traffic runs out faster, than the tariff, especially if you have a limited data package.
  • 🔄 The router reboots frequently or “freezes” for no apparent reason (this may be due to network overload).
  • 📡 The wireless network indicator is blinking activelywhen all your devices are turned off.
  • 🚨 Antivirus detects suspicious activity on the network (for example, port scanning attempts).

If you recognize at least two or three of the symptoms from this list, it's time to check your network. But first, rule out other causes:

  • 🔌 Problems on the provider's side (call support and check if there are any issues).
  • 📱 Updating software on your devices (background downloads sometimes take up bandwidth).
  • 🖥️ Viruses on your gadgets (scan them) Malwarebytes or Kaspersky Internet Security).
📊 How often do you check the devices connected to your Wi-Fi?
Never
Once every six months
Only if I notice problems
Regularly, once a month

Important! Some modern smart devices (eg. robotic vacuum cleaners or IP cameras) can connect to the network in the background. Make sure you've accounted for all your gadgets before accusing your neighbors of stealing your Wi-Fi.

2. How to view a list of connected devices via a router

The most reliable way to identify intruders is to access your router's control panel and review the list of active connections. The instructions are the same for most models, but the menu paths may vary slightly.

Step 1: Login to the router's web interface

1. Connect to your Wi-Fi network (or use a cable Ethernet).

2. Open your browser and enter your router's IP address in the address bar. This is usually:

  • 192.168.0.1 (For TP-Link, D-Link)
  • 192.168.1.1 (For ASUS, Zyxel)
  • 192.168.8.1 (for some models Tenda)
  • my.keenetic.net (For Keenetic)

3. Enter your username and password. If you haven't changed them, try the default ones:

  • Login: admin, password: admin
  • Login: admin, password: password
  • Login: user, password: user

Step 2: Search the list of devices

Depending on your router model, the path to the list of connected devices may vary. Here's where to look in popular firmware versions:

Router brand Path to the list of devices What does the menu look like?
TP-Link Basic → Network Map or DHCP → DHCP Clients List Tab with network map and client list
ASUS Network Map → Clients or LAN → DHCP Server Interactive diagram with connected devices
Keenetic Home Network → Devices List with device icons and their activity
MikroTik IP → DHCP Server → Leases or Wireless → Registration Table Table with MAC addresses and IP
Zyxel Network → Active Clients or Home Network → Device List List with blocking option

In the list you will see:

  • 🖧 Device name (if configured). For example, iPhone-12-Pro or Samsung-TV-Q70.
  • 🔢 MAC address (unique identifier, for example 00:1A:2B:3C:4D:5E).
  • 📡 IP address (local, for example 192.168.1.102).
  • ⏱️ Connection time and activity.
What should I do if my router doesn't show device names?

If only MAC addresses are displayed instead of names, use services like MAC Vendors Lookup (opens in a new tab) Enter the first 6 characters of the MAC address (e.g. 00:1A:2B), and the service will show the device manufacturer (Apple, Samsung, Xiaomi, etc.). This will help identify the intruder.

Step 3: How to distinguish your devices from others

Compare the list from the router with your gadgets:

  1. Take your smartphone, laptop, TV and other devices that are connected to Wi-Fi.
  2. On each device, find its MAC address:
    • 📱 Android: Settings → About phone → General information → Wi-Fi MAC address
    • 🍎 iPhone/iPad: Settings → Wi-Fi → ⓘ next to your network → MAC address
    • 💻 Windows: run the command in cmd:
      ipconfig /all | findstr "Physical Address"
    • 🖥️ MacOS: System Preferences → Network → Advanced → Ethernet/Wi-Fi → MAC Address
  • Compare the MAC addresses of your devices with those listed on the router. Any discrepancies indicate potential intruders.
  • ☑️ Checklist for checking devices

    Completed: 0 / 4

    If the router list contains devices with names like android_12345, Unknown or Guest-PC, and you don’t recognize them - they are almost certainly strangers.

    3. How to block other people's devices in a router

    Once you've identified suspicious devices, they need to be disabled and blocked. The methods vary depending on the router model, but the general logic is the same.

    Method 1: Blocking by MAC address (the most reliable method)

    MAC filtering allows you to manually specify which devices can connect to your network. Here's how:

    1. In the router control panel, find the section Wireless → MAC Filter (or Wireless Network → MAC Filter).
    2. Turn on filtering and select the mode Deny (deny) for the specified MAC addresses.
    3. Add MAC addresses of other devices to the list (copy them from the list of connected clients).
    4. Save the settings and reboot the router.

    Example for TP-Link:

    Wireless → Wireless MAC Filtering → Add New...
    

    MAC Address: 00:1A:2B:3C:4D:5E

    Description: Neighbor_3_floor

    Status: Enabled

    Filtering Rule: Deny the stations specified by any enabled entries in the list

    Method 2: Disconnecting the device directly

    Some routers (eg. ASUS or Keenetic) allow you to disable the device directly from the client list:

    1. Go to Network Map or Devices.
    2. Find someone else's device and press the button Block or Kick.
    3. Confirm the action. The device will be immediately disabled.

    Method 3: Change the network name (SSID) and password

    If you don't want to mess around with MAC filtering, just:

    1. Change the network name (SSID) in the router settings (Wireless → Basic Settings).
    2. Set a new password (Wireless → Wireless Security). Use WPA3-PSK (or WPA2-PSK, if WPA3 is not supported).
    3. Save the settings. All devices (including yours) will be disconnected and will need to reconnect.
    4. Important! After changing your password, be sure to update it on all your devices. Otherwise, you risk losing your internet connection.

      Method 4: Disabling the WPS function

      Function WPS (Wi-Fi Protected Setup) simplifies connecting devices, but it also makes the network vulnerable to hacking. Disable it:

      • In the router panel, find Wireless → WPS.
      • Move the switch to the position Disabled.
      • Save the settings.

      4. Mobile apps to find Wi-Fi thieves

      If accessing your router settings is difficult, use specialized apps. They scan your network and display all connected devices.

      Top 3 Apps for Android and iOS

      Application Platform Functions Link
      Fing Android, iOS Network scanning, device detection, port checking, speed test App Store / Google Play
      NetScan Android Device search, MAC addresses, ping test, scan history Google Play
      WiFi Guard Android Real-time network monitoring, notifications about new devices Google Play

      How to use Fing (step-by-step instructions)

      1. Install Fing from App Store or Google Play.

      2. Connect to your Wi-Fi network and launch the application.

      3. Click ScanIn 10-20 seconds, you will see a list of all devices.

      4. Click on any device to see:

      • 🔤 Name (if any).
      • 🔢 MAC address.
      • 📱 Manufacturer (by MAC address).
      • ⏱️ Last activity time.

      5. If you find an unknown device, copy its MAC address and block it through the router (as described in the previous section).

      Mobile app limitations

      The apps are convenient, but they have their downsides:

      • ❌ Cannot block the device directly (only show its presence).
      • ❌ Devices connected via cable may not be visible (Ethernet).
      • ❌ Some routers block network scanning (especially corporate models).

    Therefore, it is better to use applications as additional tool, and not the main one.

    5. Advanced Methods: Traffic Analyzers and Sniffing

    If intruders are masquerading as your devices or using complex connection methods, you'll need more powerful tools. These require technical skills but provide complete control over your network.

    Method 1: Wireshark (PC)

    Wireshark — is a professional network traffic analyzer. It shows all data packages, passing through your network, including connections from other devices.

    How to use:

    1. Download Wireshark from the official website and install.
    2. Launch the program and select the network interface (Wi-Fi adapter).
    3. Click Start to start capturing packets.
    4. Enter in the filter wlan.addr == 00:1A:2B:3C:4D:5E (replace with the MAC address of the suspicious device).
    5. Analyze your traffic: If your device is active, you will see data packets.

    Warning: Wireshark shows all traffic, including passwords and personal data. Do not use it on public networks and do not share captured files with third parties.

    Method 2: Airodump-ng (for Linux)

    If you use Linux, can be used Airodump-ng from the package aircrack-ngThis tool scans all nearby Wi-Fi networks and displays connected devices.

    Commands to run:

    sudo airmon-ng start wlan0 # Enable monitoring mode
    

    sudo airodump-ng wlan0mon # Start scanning

    sudo airodump-ng --bssid [BSSID of your network] -c [channel] --write capture wlan0mon

    The results will be saved to a file. capture.cap, which can be analyzed in Wireshark.

    What is BSSID and how to find it?

    The BSSID is the MAC address of your Wi-Fi network. Find it in your router settings (Wireless → Basic Settings) or via the command in the terminal:

    iwconfig

    Look for a line like Access Point: 00:1A:2B:3C:4D:5E

    Method 3: RouterOS (for MikroTik)

    If you have a router MikroTik, use built-in tools RouterOS:

    1. Connect to the router via Winbox.
    2. Go to IP → DHCP Server → Leases.
    3. View the list of leased IP addresses.
    4. To block, add a rule in IP → Firewall → Filter Rules:
      /ip firewall filter add chain=forward src-mac-address=00:1A:2B:3C:4D:5E action=drop comment="Block neighbor" disabled=no

    Attention! ⚠️ Incorrect settings Firewall V MikroTik They can completely disable the internet. If you're unsure, use simpler methods.

    6. How to protect your Wi-Fi from future hacking

    Even if you've blocked strangers, without reliable protection they can reconnect. Follow these recommendations to minimize the risks:

    Step 1: Use a modern encryption standard

    In the router settings, select:

    • 🔒 WPA3-PSK (the safest for 2026).
    • 🔓 If WPA3 is not supported, use WPA2-PSK (but not WPA or WEP!).

    Path to settings:

    • TP-Link: Wireless → Wireless Security
    • ASUS: Wireless → Authentication Method
    • Keenetic: Home Network → Wi-Fi → Security

    Step 2: A strong password is key to security

    The password must be:

    • 🔢 Length at least 12 characters.
    • 🔤 Contain uppercase and lowercase letters, numbers, special characters (!@#$%).
    • 🚫 Not be a dictionary word or a simple combination (12345678, qwerty).

    Examples of strong passwords:

    • Tr0ub4dour&3-Fox
    • P@ssw0rd-C0mpl3x!
    • WiF1-Secur1ty-2026#

    Step 3: Disable remote router management

    Many routers allow you to manage them over the internet. This is convenient, but dangerous:

    1. In the control panel, find Administration → Remote Management.
    2. Disable the option Enable Web Access from WAN.
    3. If you need remote access, use VPN or SSH with strong passwords.

    Step 4: Update your router firmware regularly

    Manufacturers regularly release updates to patch vulnerabilities. Check your firmware every 3-6 months:

    • TP-Link: System Tools → Firmware Upgrade
    • ASUS: Administration → Firmware Upgrade
    • Keenetic: System → Firmware

    Attention! ⚠️ Do not interrupt the firmware update process! This may result in router breakdownIf the LEDs are flashing orange, do not turn off the power.

    Step 5: Create a guest network for visitors

    If you frequently have guests over, don't give them your main network password. Instead:

    1. Find it in your router settings Guest Network.
    2. Enable the guest network and set a separate password.
    3. Limit speed and access to local devices (optional) AP Isolation).

    Example for ASUS:

    Guest Network → Enable Guest Network
    

    Network Name (SSID): MyGuestWiFi

    Security: WPA2-Personal

    Password: SimplePass123!

    Access Intranet: Disable

    Step 6: Monitor your network with notifications

    Set up your router or app (eg. Fing) to send notifications when new devices are connected:

    • 📧 By email.
    • 📱 In the mobile app.
    • 🔔 Through Telegram-bot (if the router supports it).

    Example of setting in Keenetic:

    System → Notifications → Enable "New device connected"
    

    Email: your@email.com

    SMTP Server: smtp.gmail.com (configure according to the instructions)

    7. What to do if your neighbors hack your Wi-Fi and refuse to disconnect

    If you have identified an intruder, but he continues to connect, follow the algorithm:

    Step 1: Talk to your neighbors

    Sometimes people connect unknowingly (for example, if the networks have the same name). Politely explain the situation and ask them to disconnect. Example text:

    "Hello! I noticed your device [insert name or MAC address] is connected to my Wi-Fi network. This may have happened accidentally. Could you please disconnect? Thank you for your understanding!"

    Step 2: Strengthen your protection (if the request didn't help)

    If neighbors ignore the request:

    1. Change network name (SSID) And password.
    2. Turn on MAC filtering (allow only your devices).
    3. Install time limit (for example, turn off Wi-Fi at night).

    Step 3: Legal action (last resort)

    If a neighbor is intentionally hacking your network, it could qualify as unauthorized access to computer information (Article 272 of the Criminal Code of the Russian Federation). You can:

    • 📝 File a police report (include screenshots of your MAC addresses and router logs).
    • 📋 Contact your ISP and ask them to block the intruder's MAC address at the hardware level.

    Attention! ⚠️ You will need the following for the trial proof:

    • Screenshots from the router with date and time.
    • Traffic logs (can be obtained via Wireshark).
    • A statement to the police describing the incident.

    Step 4: Alternative Solutions

    If the problem persists:

    • 🔄 Buy a new router with support WPA3 And OFDMA (For example, ASUS RT-AX88U or TP-Link Archer AX6000).
    • 📡 Install access point with a separate network for critical devices.
    • 🛡️ Connect Router-level VPN (For example, NordVPN or ExpressVPN).

    FAQ: Frequently Asked Questions About Wi-Fi Theft

    Is it possible to find out who exactly connected to my Wi-Fi (name, address)?

    No, you can't identify a person using a MAC address or IP address. The most you can learn is the device model (e.g., iPhone 13 or Samsung Galaxy S22). To identify a specific person, you will need