How to see who is connected to a Wi-Fi network on a computer

Users are often perplexed when their internet suddenly slows down, and page loading speeds drop to critical levels. While background system updates or large file downloads are often the cause, unauthorized access to your wireless channel by third parties cannot be ruled out. If neighbors or hackers have cracked your password, they can use your traffic for their own purposes, which not only reduces speed but also poses a security risk to personal data.

Modern operating systems such as Windows 10 And Windows 11While routers don't offer a built-in, user-friendly interface for displaying a graphical list of all active clients, the technical capability for monitoring exists. Network administrators need to know diagnostic methods to identify all devices on the local network using standard utilities or the router's web interface. In this article, we'll detail the steps you can take to gain complete control of your home network.

Understanding how it functions local area network and how devices exchange data is key to effective traffic management. Regardless of the model of your equipment, whether it's TP-Link, Asus or MikroTikThe principles of client detection remain similar, although the menu paths may differ. We'll cover both universal methods available on any computer and specific router settings that provide the most accurate picture of what's going on.

⚠️ Note: Router web control panel interfaces are constantly updated by manufacturers. The layout of menu items may differ from that described in the instructions, so look for sections with similar names related to the wireless network status or connected clients.

Using the Windows Command Prompt to Analyze the ARP Table

One of the fastest ways to get basic information about your network environment is to use the built-in command line utility. Protocol ARP (Address Resolution Protocol) is responsible for converting IP addresses into physical MAC addresses of devices on the local network. The command arp -a displays the contents of the ARP cache, which stores the addresses of all devices with which your computer has communicated recently.

To run diagnostics, you need to open the command prompt with administrator rights or in normal mode. Press the key combination Win + R, enter cmd and press Enter. In the window that opens, enter the command arp -a and press Enter. The system will display a list of IP addresses and their corresponding MAC addresses. However, there's an important caveat: the list may display not only current connections but also old entries that haven't yet been cleared from the system cache.

To obtain more up-to-date data, it is recommended to first flush the ARP cache and then force a ping of all active nodes. This can be done by running a ping scan of the address range of your subnet. If your IP address is, for example, 192.168.1.5, the range would be 192.168.1.1–192.168.1.254. After this procedure, ping again. arp -a will show a much more complete list of devices.

arp -d *
for /L %i in (1,1,254) do ping -n 1 -w 100 192.168.1.%i
arp -a

These steps will produce a list that allows you to identify unknown devices by their MAC addresses. The first six characters of the MAC address (OUI) identify the network equipment manufacturer, often helping you determine whether it's a smartphone, laptop, or smart speaker. If you see a device you can't identify, it's time for a more in-depth analysis.

Checking connected devices via the router's web interface

The most reliable source of information about who is connected to your Wi-Fi network is the router itself. It manages the distribution of IP addresses through the service. DHCP and keeps a log of all authorized connections. This information is accessed via a web browser, making the method universal for any operating system, whether Windows, macOS, or Linux.

To access the control panel, you need to enter the IP address of the default gateway in the browser's address bar. Most often, these addresses are 192.168.0.1 or 192.168.1.1, however, they can be changed during initial setup. After entering the address, the system will ask for a login and password. By default, many devices use combinations admin/admin or admin/password, if you haven't changed them before.

After successful authorization, you need to find the section responsible for your wireless network status. Depending on your router's firmware, this section may have different names. Look for tabs labeled "Wireless," "Wi-Fi," "Status," "Network Map," or "Client List." This is where you'll see a real-time picture of your connections.

In this section, you'll see a table containing device names (if any), their IP and MAC addresses, and the connection type (2.4 GHz or 5 GHz). Some advanced router models, such as those from Keenetic or Asus, even allow you to see the current connection speed for each client and the amount of data transferred. This helps instantly identify "heavy" users who download torrents or watch 4K videos.

Specialized software for network monitoring

If built-in Windows tools seem too complicated, and accessing your router settings every time is inconvenient, specialized network administration utilities can help. Programs like Wireless Network Watcher from NirSoft or Angry IP Scanner Automate the scanning process and present information in a convenient, structured format. These tools scan the entire address range and identify device types.

The advantage of using such software is the granularity of the data. The program can automatically extract the network card manufacturer's name, response time (ping), and even the computer's network name (NetBIOS name). This significantly simplifies the identification process: instead of dry numbers, you see names like "Ivan-iPhone" or "LivingRoom-TV."

Additionally, many utilities feature continuous monitoring. You can launch the scanner and leave it running in the background. If a new device appears on the network, the program will beep or highlight it in the list. This is especially useful for detecting when unknown users are connecting to your Wi-Fi while you're away.

⚠️ Caution: Download network scanners only from the developers' official websites. Antivirus programs may react to snails like "HackTool" or "RiskWare" because they actively scan ports, but they are safe when downloaded from a trusted source.

DHCP table analysis and device identification

The central element in connection management is the table DHCP (Dynamic Host Configuration Protocol). This is what contains a list of all devices to which the router has assigned IP addresses. Understanding the difference between an ARP list and a DHCP list is critical: ARP shows who is currently active, while DHCP can store connection history or reserve addresses for offline devices.

In the router's web interface, you'll often find a "DHCP Server" or "DHCP Client List" section. This displays information about the lease time of the address. If you see a device with an expired lease but it's still listed, it may simply be sleeping and not formally powered off. However, if the lease time is up-to-date, the device is definitely within range.

For easy identification, many modern routers allow you to assign permanent IP addresses (Static DHCP) to devices and give them user-friendly names. This eliminates confusion in the future. You can pre-set rules for all your devices, and then any misplaced address will be immediately noticeable.

Below is an example table of what client information might look like in the router interface:

What does the "Static" status mean in the DHCP table?

A static IP address means that the router will always assign the same number to a specific device, which is convenient for port forwarding or accessing network folders.

Methods of protection and blocking uninvited guests

Detecting a rogue device is only half the battle. The main goal is to secure your network from further unauthorized access. The most effective and radical method is to completely change your Wi-Fi password. After changing the security key, all connected devices will be disconnected, and you'll have to re-enter the new password on all your devices. This is guaranteed to kick any "freeloaders" off the network.

A more flexible approach is to use the "Blacklist" or "MAC Address Filter" feature in your router settings. You can manually add the intruder's MAC address to the blacklist, and the router will deny them access, even if the Wi-Fi password is known. However, this method is vulnerable: an experienced user can clone their device's MAC address to that of an authorized device.

• 🔒 Change your password to a complex one containing mixed-case letters, numbers, and special characters, and at least 12 characters long.
• 🛑 Disable the WPS function, as it is one of the most vulnerable entry points for hacking.
• 📡 Reduce the power of your Wi-Fi transmitter if your router is located near a window to prevent the signal from extending far beyond your apartment.

It's also worth paying attention to encryption protocols. Make sure the standard is selected in your wireless network settings. WPA2-PSK or, ideally, WPA3Older WEP and WPA/TKIP protocols are considered obsolete and are easily cracked using automated tools, even by novices. The transition to modern encryption standards significantly raises the barrier to entry for potential attackers.

Common problems and diagnostic nuances

When conducting a network audit, users often encounter a situation where the number of connected devices on the router's list exceeds the number of gadgets in the home. This isn't always a sign of a hack. Modern smart home systems can have multiple components: light bulbs, outlets, sensors, each of which is a separate network client. Furthermore, a single smartphone can create virtual interfaces for various functions.

Another common problem is the presence of a guest network. Many routers create a guest SSID by default, allowing devices to connect to it without access to the main local network. Check whether you have this feature enabled or are distributing the password to guests who then forget to disconnect.

• 📱 Check out the list of IoT (Internet of Things) devices: vacuum cleaners, air conditioners, and lamps often go unnoticed.
• 🔄 Restarting your router can clear the ARP cache and display the current connection status.
• 🏠 A guest network is a great way to secure your essential data by providing an isolated internet connection.

If you find a device you absolutely can't identify, try turning off your devices one by one and watching for the lines in the connection table to disappear. This elimination method allows you to accurately match the MAC address in the router's list to a specific physical device in your apartment.

⚠️ Note: Some antivirus and security systems (such as Kaspersky Secure Connection or the built-in Windows firewall) may hide your computer from detection on the local network if the network profile is set to "Public." For a complete diagnosis, temporarily set the network profile to "Private."

FAQ: Frequently Asked Questions

Can my neighbor see my files if he is connected to Wi-Fi?

Simply being connected to Wi-Fi doesn't automatically grant access to your files. However, if network discovery and folder sharing are enabled on your computer, an attacker could theoretically attempt to gain access. It's recommended to always select the "Public Network" Wi-Fi profile to hide your computer from other devices.

Why are there more devices in the list of connected devices than I have?

This often happens due to "Internet of Things" devices (smart lamps, sockets, TV set-top boxes) that the user forgets to account for. Also, a single physical device (for example, a router in repeater mode or a phone with a hotspot enabled) can appear multiple times or create virtual adapters.

How to permanently lock a device without changing the password?

Use the MAC Filter feature in your router settings. Add the address of the unwanted device to the Blacklist. However, remember that MAC addresses can be spoofed, so for complete security, it's best to change the password.

Does my ISP see who is connected to my Wi-Fi?

Your ISP sees all traffic passing through your router, but typically doesn't monitor the number of your internal devices unless required by law to store metadata. For your ISP, you're considered a single subscriber, regardless of the number of devices connected.