Slow internet, sudden video freezes, and strange devices appearing in your connected devices list—all of these could signal that someone else is accessing your Wi-Fi. Most often, the culprit is neighbors who "forgot" to ask for the password or deliberately brute-forced it by exploiting vulnerabilities in the router. But how can you know for sure that your network is being used without permission? And most importantly, how can you stop it?
In this article you will find 7 key signs unauthorized connection, step-by-step instructions for checking the network on all types of routers (including TP-Link, ASUS, Keenetic And MikroTik), and also methods of protection, which will make your Wi-Fi inaccessible to unauthorized devices. We'll also debunk the myths about "hacking through walls" and explain why even a weak password isn't always the culprit behind traffic leaks.
If you've never changed your router settings since purchasing it, the risk of traffic hijacking increases significantly. Manufacturers often set default login/password combinations (for example, admin/admin), which are easy to find in the public domain. And some budget router models even have firmware vulnerabilities, allowing you to connect to the network without entering a password.
But don't be too quick to blame your neighbors: sometimes the problem lies in your own devices. For example, old smartphones or smart gadgets (like Amazon Echo or Xiaomi Mi Home) can automatically connect to the network and consume traffic in the background. Therefore, the first step is diagnostics, not blocking.
Never|Once a year|Every six months|Monthly|Only when the internet is slow-->
1. 7 Signs Your Wi-Fi Is Being Hijacked
Traffic hijacking isn't always immediately noticeable. Sometimes, neighbors only connect sporadically—for example, in the evenings when you're sleeping, or on weekends. But there are obvious symptoms, which should be a warning sign:
- 🐢 A sharp drop in internet speed Without objective reasons (the provider isn't doing any work, the tariff hasn't changed). For example, pages used to load in 1-2 seconds, but now they take 10-15.
- 📱 Unknown devices in the list of connected gadgets. Even if their names seem familiar (for example,
Android-1234), these are not always your devices. - 🔄 The router reboots spontaneously or "freezes." This may occur due to network congestion from a large number of connections.
- 💾 Traffic limit exceeded (Applicable to plans with limits). If you suddenly receive a notification from your provider about your data limit being exceeded, even though you haven't downloaded anything, this is a warning sign.
- 🕒 The Internet is slowing down at the same time (For example, every evening from 6:00 PM to 10:00 PM). Perhaps the neighbors watch 4K movies during these hours.
- 🔌 The lights on the router are blinking actively when all your devices are turned off.This may indicate hidden connections.
- 📡 The Wi-Fi signal has become weaker In some rooms, other devices can siphon off transmitter power.
Please note: one sign doesn't necessarily mean a hack. For example, a drop in speed could be due to problems with your provider or overload of its servers. But if you observe 2-3 symptoms at the same time, it is worth carrying out diagnostics.
Important: Some modern viruses (for example, Mirai or VPNFilter) can use your router to attack other networks without slowing down your internet. In this case, the only sign is unknown devices in the connection list.
2. How to check the list of devices connected to Wi-Fi
The most reliable way to identify "intruders" is to log into your router's control panel and view the list of active connections. The instructions vary by device model, but the general procedure is the same:
1. Find out your router's IP address. Usually it is 192.168.0.1 or 192.168.1.1If it doesn't fit, check the sticker on the back of the device.
2. Enter the address in your browser (For example, http://192.168.0.1) and log in. The default login and password are often admin/admin or admin/password (indicated on the same sticker).
3. Find the section with the list of devicesIt's called differently in different firmware versions:
- TP-Link: Wireless Mode → Wireless Mode Statistics
- ASUS: Network Map → Devices
- Keenetic: Monitoring → Connected Devices
- MikroTik: Wireless → Registration Table
Here's what a typical list of connected devices looks like (example for TP-Link):
| № | Device Name (Host Name) | MAC address | IP address | Connection type |
|---|---|---|---|---|
| 1 | iPhone-12-Pro | A4:83:E7:12:F5:89 | 192.168.0.101 | Wi-Fi (5 GHz) |
| 2 | DESKTOP-RT78X | 7C:BB:8A:45:D2:1E | 192.168.0.102 | Ethernet |
| 3 | Android-9a4f | 00:1A:79:9A:4F:3C | 192.168.0.105 | Wi-Fi (2.4 GHz) |
| 4 | Samsung-SmartTV | 3C:5A:B4:78:E1:22 | 192.168.0.103 | Wi-Fi (5 GHz) |
In this example, the device is suspect Android-9a4f If you don't have an Android smartphone with that name, it might be someone else's device. Please pay attention to MAC address: It's unique to each device. If you're unsure whether the device belongs to you, you can:
- Disconnect all your devices from Wi-Fi and see if the “suspicious” gadget remains on the list.
- Check the MAC addresses of your devices (read how to do this in the next section).
3. How to find the MAC addresses of your devices
To distinguish your gadgets from others, you need to know them MAC addresses — unique identifiers of network interfaces. Here's how to find them on different devices:
On Windows:
- Click
Win + R, entercmdand press Enter. - In the command line, run:
ipconfig /all - Find the block
Wi-Fi Wireless LAN Adapterand a linePhysical address- this is MAC.
On macOS:
- Open
System Preferences → Network. - Select your Wi-Fi connection and click
Additionally. - The MAC address will be listed in the tab
EquipmentHowEthernet address.
On Android:
- Open
Settings → About phone → General information(orPhone details). - Find the item
Wi-Fi MAC address.
On iOS (iPhone/iPad):
- Go to
Settings → General → About. - Scroll down to the block
Wi-Fi address.
Compare the received MAC addresses with the list in the router. If you find any discrepancies, it's 100% someone else's deviceBut be careful: some routers display MAC addresses in the format 00-1A-79-9A-4F-3C, and the devices are in the format 00:1A:79:9A:4F:3C>. It's the same address, just written differently.
Compare the MAC addresses of all your devices with the list in the router | Check device names for suspicious characters | Disconnect all your devices and see if connections remain | Try pinging unknown IP addresses (if they respond, the device is active) | Use mobile apps to scan the network (for example, Fing) -->
4. Programs for scanning the network for strangers
If you are too lazy to go into the router settings or they are too complicated, you can use special utilities to scan your network. They will show all connected devices, their IP, MAC address, and even manufacturer (by MAC prefix).
Here are the top 5 free programs and applications:
- 📱 Fing (Android/iOS/Windows/macOS) — the most popular network scanning app. Shows all devices, open ports, and even vulnerabilities.
- 💻 Advanced IP Scanner (Windows) — scans the local network and identifies device manufacturers by MAC.
- 🍎 LanScan (macOS) — a simple scanner for Mac users.
- 📱 Network Analyzer (Android/iOS) — in addition to scanning, it shows connection speed and delays.
- 🖥️ Angry IP Scanner (Windows/Linux/macOS) — a cross-platform, open-source utility.
Sample report from Fing:
Pay attention to the column Vendor (Manufacturer) If it is indicated there Xiaomi, and you don't have devices of this brand - this is a reason to be wary. Devices with unknown manufacturers or those that are connected via Wi-Fi, even though you are only using a wired connection.
⚠️ Attention: some applications (eg Fing) may show devices connected to the provider's network, not just your router. Don't block them—they're your internet provider's equipment!
5. How to block other people's devices: step-by-step instructions
If you find any foreign devices on the network, you need to disable and blockHere's a universal algorithm for most routers:
Method 1: Blocking by MAC address (the most reliable)
- Go to the router control panel (see section 2 for how to do this).
- Find the section
Wireless Mode → MAC Filter (or Wireless → MAC Filter).
- Add MAC addresses of other devices to the blacklist (or, conversely, allow connections only to your MAC addresses - "whitelist").
- Save the settings and reboot the router.
Method 2: Change your Wi-Fi password
- Go to
Wireless Mode → Security Settings.
- Select encryption type
WPA2-PSK (or WPA3-PSK, if supported).
- Create a complex password (at least 12 characters, with numbers and special characters).
- Save the changes - all devices will be disconnected and will need to reconnect.
Method 3: Disabling DHCP and manually binding IP (for advanced)
- Disable the DHCP server in the section
LAN → DHCP Settings.
- Manually enter the IP addresses for your devices in the section
LAN → ARP Binding.
- Other devices will not be able to obtain an IP address and connect to the network.
⚠️ Attention: if you use guest network, check if anyone else is connected to it. Many routers allow you to create a separate network for guests with limited access to local resources. But if the guest network's password is weak, it can also be hacked.
After blocking it is recommended reboot the router and check if the other devices have disappeared from the list. If not, they may be connecting via hidden channels (For example, through a firmware vulnerability). In this case, the only solution is resetting the router to factory settings or updating the firmware.
6. Why can neighbors connect to your Wi-Fi without a password?
Many people believe that if there is a password, the network is securely protected. But in practice, there are several ways to bypass protection, which are actively used by "freeloaders":
- 🔑 WPS (Wi-Fi Protected Setup) vulnerabilityMany routers support WPS technology, which allows you to connect to the network by pressing a button on the device. However, if WPS is enabled, it can be hacked in a few hours using programs like Reaver or Bully.
- 📋 Manufacturer's default passwordsIf you haven't changed your administration panel password (
admin/admin), an attacker can access the router settings and view the Wi-Fi password.
- 🕳️ Firmware vulnerabilitiesOlder router firmware versions (especially budget models) contain vulnerabilities that allow unauthorized network connections. For example, the vulnerability KRACK in the WPA2 protocol.
- 📡 Traffic interceptionIf your router uses weak encryption (for example,
WEP), the password can be guessed in a few minutes using Aircrack-ng.
- 🤝 Hospitality of neighborsSometimes neighbors share passwords with each other, unaware that it's your network. This is especially true for apartment buildings with identical SSIDs (network names).
⚠️ Attention: if your router supports the protocol WPS, turn it off immediately! Even if the button isn't physically on the device, the function may be enabled in the settings. Look for it in the section Wireless Mode → WPS or Wi-Fi Protected Setup.
Another common problem is - open ports on the routerSome models (for example, D-Link DIR-300 or Tenda) open ports for remote management by default. This allows hackers to connect to your network from outside. To close the ports:
- Go to
Security → Firewall.
- Turn it off
Remote control And DMZ.
- Close all unnecessary ports (eg.
80, 443, 7547).
What is the KRACK vulnerability?
KRACK (Key Reinstallation Attack) is an attack on the WPA2 protocol that allows decryption of traffic between a device and a router. An attacker can intercept data packets, reuse encryption keys, and gain access to transmitted information (passwords, cookies, and messages). The vulnerability was discovered in 2017 but still affects routers without firmware updates.
7. How to protect your Wi-Fi from your neighbors: 10 effective methods
To prevent your Wi-Fi from becoming "public," follow these tips. They'll not only help you block your neighbors but also strengthen your overall network security:
- 🔒 Use WPA3 instead of WPA2The new encryption standard is harder to crack. If your router doesn't support WPA3, update your firmware.
- 🔄 Change your password every 3-6 monthsEven if it's complicated, it's better to be safe than sorry.
- 🚫 Disable WPSThis feature is convenient, but extremely unsafe.
- 📛 Change the network name (SSID). Don't use standard names like
TP-Link_1234 — they reveal the router model, and therefore its vulnerabilities.
- 🔍 Enable MAC address filteringAllow only your devices to connect.
- 🛡️ Update your router firmwareManufacturers regularly patch security holes.
- 🌐 Disable remote controlThis will prevent access to the router settings from the Internet.
- 📡 Reduce signal strengthIf the router is located against a wall, it will be more difficult for neighbors to get a network connection.
- 🔗 Create a guest network For friends. It's isolated from the main network and doesn't provide access to your devices.
- 📊 Monitor trafficUse apps like GlassWire or NetWorxto monitor suspicious activity.
⚠️ Attention: If you live in an apartment building, avoid using Wi-Fi channels 1, 6 and 11 On the 2.4 GHz frequency. These channels are the busiest, and neighbors may accidentally connect to your network due to signal interference. Instead, choose channels 2–5 or 7–10.
Another useful trick is - hiding SSIDYou can disable network name broadcasting in your router settings (Hide SSID or Hide SSID). Then your Wi-Fi won't appear in the list of available networks, and only those who know its exact name will be able to connect to it. However, this isn't a panacea: experienced users can find hidden networks using scanners.
If you suspect your neighbor is intentionally hacking your Wi-Fi (for example, after a conflict), you can take extreme measures:
- Change frequency From 2.4 GHz to 5 GHz (if your router supports it). At this frequency, the signal penetrates walls less effectively.
- Use a VPN on a routerThis won't protect you from being connected, but it will encrypt all your traffic.
- Install alternative firmware (For example, DD-WRT or OpenWRT). It provides more options for security settings.
8. What to do if a neighbor refuses to disconnect
You blocked someone else's device, but it reappeared online a day later? It's possible your neighbor is deliberately trying to bypass your security. Here's what you can do:
Step 1: Talk to your neighbor
Sometimes the problem can be resolved peacefully. Explain that your internet has become slow and ask them to stop connecting. Many people don't even realize they're using someone else's network (for example, if the network names are the same).
Step 2: Strengthen your defenses
If talking doesn't help, apply comprehensive protection:
- Change your password to a complex one (for example, k7#pL9!vN2@qR4$).
- Enable MAC filtering.
- Disable WPS and remote control.
- Update your router firmware.
Step 3: Contact your provider
If your neighbor persists, you can complain to your internet provider's support team. They can:
- Block the MAC address of other people's devices at the level of your equipment.
- Offer to change the external IP address (this will complicate the connection).
- Provide traffic statistics that will confirm the hijacking.
Step 4: Legal Measures
As a last resort, you can file a police report under the article Article 272 of the Criminal Code of the Russian Federation (“Unauthorized access to computer information”)However, this only makes sense if your neighbor has caused actual damage (for example, by downloading illegal content through your IP address). To do this, you need to:
- Take screenshots of the list of connected devices with MAC addresses.
- Save router logs (if any).
- Obtain traffic data from your provider.
⚠️ Attention: If you live in a rented apartment, before taking extreme measures, make sure that the previous tenants haven't left their Wi-Fi access with their new neighbors. Sometimes the problem lies in unscrupulous landlords, who share the password with everyone.
And remember: The most reliable method of protection is a set of measuresA complex password alone won't save you if WPS is enabled or your firmware isn't up to date. Use all available methods, and your Wi-Fi will be inaccessible to strangers.
FAQ: Frequently Asked Questions about Wi-Fi Security
Is it possible to find out which device is connected to my Wi-Fi?
Yes, but not always accurately. The MAC address can be used to determine the device manufacturer (the first six characters are the vendor identifier). For example, MAC B8:27:EB:... belongs Raspberry Pi, A 78:31:C1:... — AppleA full list of vendors can be found on the website. IEEE.
If you need to find out the model of the device, you can try pinging its IP and scanning open ports with the utility NmapBut this requires technical skills.
My neighbor still connects to me even after I changed my password. How is this possible?
Possible reasons:
- You have it turned on WPS - it can be hacked without a password.
- The neighbor connects via hidden network (if you have configured it previously).
- Your router is infected. malware, which opens the "back door".
- The neighbor has physical access to the router (for example, if he lives in the same apartment and can press the WPS button).
Solution: Disable WPS, update the firmware, reset the router to factory settings, and configure it again.
Can my neighbor connect to me via electrical wiring (PLT adapters)?
Theoretically yes, but unlikely. Powerline adapters (Devices that transmit internet over electrical wiring) typically encrypt traffic. However, if you're using older, unencrypted models, your neighbor could connect to your network through the power outlet.
To protect yourself:
- Buy adapters with support 128-bit AES.
- Set up a password for HomePlug AV (usually this is done through the manufacturer's utility).
- Do not connect adapters to sockets accessible to neighbors (for example, in the entrance hall).
How do I secure my Wi-Fi if I have an older router without WPA3?
If your router does not support modern encryption standards, do the following:
- Update your firmware to the latest version (sometimes manufacturers add WPA3 support).
- Use WPA2-PSK With AES encryption (not TKIP!).
- Turn it off WPS, UPnP And remote control.
- Install VPN on a router (