Slow internet speeds, sudden connection drops, and unexplained channel load often indicate that someone has connected to your wireless network. In the age of smart homes, where not only smartphones and laptops but also refrigerators, lamps, and vacuum cleaners are connected to the router, it's easy to get lost in the list of clients. However, this issue cannot be ignored: access to the local network opens the door for attackers to steal personal data or use your channel for illegal activities.
There are several reliable ways to find out who's using your Wi-Fi right now. You can use your router's built-in interface, specialized smartphone apps, or even Windows system utilities. The method you choose depends on your technical expertise and the router model you have. In this article, we'll cover each option in detail so you can quickly identify and block the intruder.
Connection control — this is a basic digital hygiene skill. Regardless of whether you use equipment from TP-Link, Asus Whether it's a private network or a provider's box, the principles of traffic monitoring remain similar. The key is to act quickly and not give the hacker time to gather information about your infrastructure.
Indirect signs of unauthorized access
Before resorting to technical diagnostics, it's worth paying attention to your network's behavior. The system itself often signals overload or external interference. If your data plan offers high speeds, but pages load slowly, or videos buffer even at night, this is cause for concern. It's especially alarming if the activity indicators on your router are flashing wildly while all your devices are asleep.
Another sign may be an inability to connect to a printer or network storage. When a foreign device with a conflicting IP address appears on the network, local services are disrupted. It's also worth checking the browsing history on devices you haven't used recently, or service notifications about new devices.
⚠️ Attention: Don't confuse high load with hackers. Modern TVs with 4K content, game consoles downloading updates, and cloud-based photo backups can completely consume your bandwidth. Always analyze what your own devices are doing first.
For a preliminary assessment of the situation, you can use a simple table of symptoms and probable causes:
| Symptom | Probable cause | Risk level |
|---|---|---|
| Slow speed during the day | Channel congestion by neighbors | Low |
| Wi-Fi indicator blinking at night | Background downloads or other people's traffic | Average |
| Blocking access to the admin panel | Password brute force attempt | High |
| Unknown names appear in the DHCP list | Connected device (your own or someone else's) | Critical |
Checking via the router's web interface
The most accurate and reliable way to find out who's connected to your network is to delve into the router's "brains." The web interface displays a list of all active clients, their assigned IP addresses, and MAC addresses. To log in, you'll need the gateway address (usually 192.168.0.1 or 192.168.1.1) and the administrator password. This information is often found on a sticker on the bottom of the device.
After authorization, you need to find the section related to wireless networking. Depending on the firmware, it may be called Wireless, Wi-Fi, Status or DHCP Client ListThe DHCP client table displays the full picture: it shows which devices have received an address automatically. The names can be descriptive (for example, iPhone-Alex) or cryptic character sets, which is typical for IoT devices.
If you see a device you can't identify, don't panic. Sometimes older set-top boxes or smart plugs give strange names. However, if there are 15 devices listed and you only have two phones in your apartment, the situation requires immediate attention. In modern routers, such as Keenetic or MikroTik, you can even view a graph of each client's activity in real time.
☑️ Actions when someone else's device is detected
Using mobile scanner apps
When you don't have a computer at hand or don't feel like typing IP addresses into a browser, specialized smartphone apps come to the rescue. They scan the network and display a list of connected devices in a convenient format, often with manufacturer logos. Popular tools include Fing, WiFi Analyzer and utilities from the router manufacturers themselves, for example, Tethering from TP-Link or Asus Router.
These programs work simply: they send requests to all possible addresses on the subnet and analyze the responses. You receive a report showing the device name, IP address, MAC address, and network card manufacturer. This allows you to quickly identify the "Smart TV" that appeared on the list or confirm that your neighbor's laptop is actually using your internet connection.
However, it's worth keeping in mind the nuances of how these scanners work. Due to system limitations, iOS apps may display less detailed information than Android apps. Furthermore, to function correctly, the scanner often requires local network access permissions, which must be confirmed in the smartphone settings upon first launch.
Why might the app not see all devices?
Some routers hide the client list for wireless devices for security reasons, or the devices are in power-saving mode and do not respond to scanner requests.
Diagnostics using the Windows operating system
For users who prefer system tools, Windows offers powerful diagnostic tools without installing any extra software. The command line allows you to get a list of all devices with which your computer has recently communicated. These aren't always current connections, but they often also highlight active network neighbors.
To launch the utility, click Win + R, enter cmd and press Enter. In the window that opens, enter the command arp -aYou'll see a table with your IP address in the "Interface" column, and a list of IP addresses and their corresponding MAC addresses next to them. By matching the MAC addresses with known devices, you can identify any that don't belong.
C:\Users\User> arp -a
Interface: 192.168.1.55 --- 0xb
Internet Address Physical Address Type
192.168.1.1 00-11-22-33-44-55 dynamic
192.168.1.105 aa-bb-cc-dd-ee-ff dynamic
A more advanced method is to use PowerShell. The command Get-NetNeighbor will produce a similar result, but in a more structured format. This method is advantageous because it doesn't require internet access to install programs and works even on corporate computers with limited access.
Analyzing the list of connected devices on Android and iOS
Smartphone owners can check the network directly from their phone, without even installing third-party apps, if the router supports modern protocols. In the Wi-Fi settings on Android (especially in Xiaomi and Samsung devices), there's often a "Device Management" or "Scan Network" option. This displays everything currently connected to the access point.
On iPhone, the situation is more complicated due to the closed nature of the system. You can't view the list of other clients using standard iOS tools. The only option is to use the router's web interface via Safari or Chrome, or download an app from your router manufacturer, if one exists. Universal scanners on iOS will only show the technical details of your current connection, not your neighbors.
It's important to distinguish between devices connected via cable and Wi-Fi. In mobile apps and router interfaces, they are often marked with different icons. Unless you're using a desktop PC connected via cable, any device with a "cable" icon in the client list is cause for serious concern and a security check of your apartment.
⚠️ Attention: Menu interfaces and item names may vary depending on your router's firmware version. If you can't find the section you need, consult the instructions on the manufacturer's official website or your provider's support section.
How to protect your network after testing
If you've discovered someone else's device, the first thing you should do is change your Wi-Fi password. The old password is now considered compromised, and using it is pointless. Create a complex combination of mixed-case letters, numbers, and special characters. After changing the password, all devices will be disabled, and you'll have to re-enter the new key on each device.
The second step is to turn off the technology WPS (Wi-Fi Protected Setup). This feature allows you to connect using a PIN or push-button, but it's extremely vulnerable to brute-force attacks. In the router's menu, find the Wireless or Wi-Fi section and make sure "Enable WPS" is unchecked. This will close one of the most common loopholes for hackers.
The third level of protection is MAC address filtering. You can configure your router to allow only a strictly defined list of devices (whitelist) onto the network. Even with the password, an intruder with an unknown MAC address will not be able to access the internet. This is the most reliable, albeit labor-intensive, method: when you buy a new device, you will have to manually add its address to the router settings.
Frequently Asked Questions (FAQ)
Can my neighbor see my files if he is connected to Wi-Fi?
If you don't have a shared folder configured and network discovery enabled, direct access to files is difficult. However, if you're on the same network, an attacker could try to exploit vulnerabilities in the operating system or intercept unencrypted traffic (for example, data from websites without HTTPS). Therefore, unauthorized access should be blocked immediately.
Why do "Unknown devices" appear in the device list?
Smart home devices (light bulbs, sensors, sockets) that don't broadcast their names via DHCP are often displayed this way. It could also be an old phone in sleep mode or a device with a locked screen. If the number of such devices doesn't change after you turn off your devices, it's worth checking the MAC address list.
Does the number of connected devices affect internet speed?
Yes, it does. The bandwidth is divided among all active users. If one of your "neighbors" starts downloading torrents or watching 4K videos, your page loading speed may drop to a crawl. The router also uses CPU resources to process requests from each device, which can lead to overheating and freezing.
What should I do if the device appears online again after changing the password?
This means your password was stolen by a virus from one of your trusted devices or transmitted through an app. You should scan all computers and phones with an antivirus. In rare cases, this may indicate that the attacker has already gained access to the router's admin panel and granted themselves static access rights. In this case, a full reset of the router to factory settings will help.