Slow internet speeds and intermittent connection drops are often the first warning signs that your home network is no longer private. Many users notice that 4K video starts buffering, and online games suffer from high ping, even with a high-bandwidth plan. These are classic signs that someone else is using your network to download files or stream content.
The situation is aggravated by the fact that modern technologies make it possible to hack Wi-Fi networks Even inexperienced hackers can use automated scripts. If your router has a weak password or uses an outdated encryption protocol, anyone within range can access your network. It's important not to ignore these signs, as attackers can not only siphon traffic but also intercept transmitted data.
In this article, we'll cover all the available methods for checking who's connected to your Wi-Fi network, using built-in router features, specialized PC utilities, and mobile apps. You'll learn how to analyze the list of active devices, distinguish system devices from rogue ones, and, most importantly, effectively block uninvited guests, regaining full control of your home internet.
Primary signs of unauthorized access
Before resorting to technical diagnostics, it's worth analyzing indirect signs that often point to a problem long before you even open the hardware settings. The most obvious indicator is a sharp drop in internet speed that can't be explained by the load from your personal devices. If you're not downloading large files, but your download speed has dropped to a crawl, this is cause for concern.
Another warning sign is the strange behavior of the indicators on the router body. WLAN Or the wireless network icon may flash frequently and erratically, even when all your devices are turned off or in sleep mode. This indicates an active exchange of data packets between the router and an unknown client.
⚠️ Attention: Some modern routers have a "smart" feature that flashes LEDs during background system updates. Make sure the flashing isn't related to a scheduled firmware update for the router itself.
You should also pay attention to the inability to access the router's management interface. If the default login and password no longer work, and resetting the settings doesn't help, or the settings change on their own, this is a sure sign that control of the device has already been seized. In this situation, you need to act immediately to prevent more serious consequences.
Checking via the router's web interface
The most reliable and accurate way to find out who's using your Wi-Fi is to look into the "brain" of your network—your router's administrative panel. To do this, enter the device's IP address (usually 192.168.0.1 or 192.168.1.1) in your browser's address bar. After authorization, you'll have access to all information about your current connections.
Depending on the model and manufacturer of your equipment, the section you're looking for may have different names. Look for tabs called "Status," "Condition," "DHCP Server," or "Wireless Statistics." This is where you'll find a table of all active clients, their MAC addresses, and connection status. official source truth that can be trusted 100%.
The table below provides example paths to the required sections for popular router manufacturers. Interfaces are subject to update, so the names of the sections may differ slightly between firmware versions.
| Router brand | Path to the menu | Section title |
|---|---|---|
| TP-Link | DHCP -> DHCP Clients List | DHCP Client List |
| ASUS | Network Map -> Clients | Client list |
| Keenetic | Client list (on the main page) | Active devices |
| D-Link | Advanced Settings -> Status | Clients |
By analyzing the list, you will see the device names (Host Name) and their physical addresses (MAC). The names often contain manufacturer markings, for example, Samsung, Apple or XiaomiIf you see a device named Unknown or a brand name that's not present in your home is a reason for a more thorough investigation. Don't panic if the name is unfamiliar—it could be a smart plug or TV connected via cable.
Using network scanners for PCs and smartphones
If you find accessing your router settings difficult or want to perform a scan from a mobile device, specialized scanner programs can help. These utilities scan your local network and provide a detailed report on all detected nodes. One of the most popular tools is the app Fing for Android and iOS, as well as a utility Advanced IP Scanner for Windows.
These programs work simply: they send requests to all possible addresses in a subnet and wait for a response. The result is a list with each device assigned an IP address, MAC address, and often a specific model. This allows you to quickly identify anomalies without requiring router administrator rights. However, keep in mind that these programs view the network from the outside, so the data may be less complete than what's stored within the router itself.
⚠️ Attention: Free versions of scanners may display ads or have limits on the number of scans per day. For a one-time scan, the free version's functionality is sufficient.
Pay special attention to MAC addresses. The first six characters of this code (OUI) indicate the network card manufacturer. If you see a device from a manufacturer you don't own (for example, you didn't purchase the equipment) Huawei(and the device is listed), it's almost guaranteed to be someone else's device. Programs often automatically detect the vendor, making the task easier.
Analyzing the list of connected devices
Once you've obtained a list of devices by any means, it's essential to conduct a thorough review. The key is to filter out the "noise" and identify the real threats. Modern homes are home to dozens of gadgets: smartphones, tablets, laptops, smart speakers, TVs, game consoles, and security sensors. It's easy to get confused and mistake your forgotten gadget for someone else's.
For an effective analysis, it's recommended to make a complete inventory of all the equipment in your home. Write down the MAC addresses and names of each device. This will take time, but it will save you a lot of trouble in the future. Compare this list with what's displayed on your router. Anything left off your list is a potential threat.
☑️ Device check
Often in the list you can see devices with names like android-dh8291 or DESKTOP-5432If you don't have a device with this name, try to remember if you renamed it when you first set it up. If the name hasn't changed for years and looks like the standard factory label, and the device doesn't belong to you, it's direct evidence unauthorized access.
It's also worth paying attention to data transfer activity. Some advanced routers and monitoring programs show the amount of traffic consumed by each device in real time. If an "unknown" computer is downloading gigabytes of data while you're browsing, there's no doubt your network is being used by third parties.
Methods for blocking uninvited guests
Once the attacker has been identified, they must be neutralized. There are several ways to disconnect a device from your network. The simplest and most effective method is to change your Wi-Fi password. Changing the security key will disconnect all connected devices, requiring them to enter the new code to reconnect. This is guaranteed to eliminate all "spawners."
The second, more targeted method is to use MAC filteringThis feature allows you to create a "whitelist" of devices that are allowed to connect. All others, even with the password, will be blocked from accessing the network. To do this, copy the MAC addresses of your devices into the filtering settings and enable the "Allow only listed MAC addresses" option.
The third option is direct blocking through the router interface. In many modern models (for example, Keenetic or TP-Link (With the new firmware) there's a "Block" or "Kick" button next to each client in the list. This is a temporary measure that will immediately terminate the connection, but if the password remains the same, the attacker will be able to reconnect.
Protecting your Wi-Fi network from re-hacking
Simply kicking out an intruder isn't enough—you need to close the door they entered through. First, make sure you're using a modern encryption protocol. WPA2-PSK or, ideally, WPA3The outdated WEP and WPA-TKIP standards can be cracked in a few minutes using a regular smartphone. You can switch the mode in the wireless security section (Wireless Security).
Your passphrase should be complex. Avoid obvious combinations like your date of birth or phone number. Use a combination of uppercase and lowercase letters, numbers, and special characters. Your password should be at least 12 characters long. Password managers on your phone are a good way to store such complex passwords.
Don't forget about the security of your router itself. Change the default password for the admin panel (admin/admin). Disable the WPS function, as it is one of the most vulnerable entry points for hackers. Regularly update your router firmware to patch security holes discovered by researchers.
In conclusion, it's worth noting that regularly monitoring connected devices is a good habit for every home network owner. A monthly check takes no more than five minutes, but it will protect you from speed loss and personal data theft. Be vigilant and monitor your digital perimeter.
What should I do if an outsider connects again after changing my password?
This could mean there's a device in your home with a virus that's transmitting the password, or someone in your household knows the password and is connecting their devices without asking. It's also possible that WPS is still enabled, and the password is being brute-forced using a PIN code.
Frequently Asked Questions (FAQ)
Can my neighbor see what websites I visit if he's connected to my Wi-Fi?
Theoretically, yes, if the connection isn't secured by HTTPS. However, most modern traffic (social media, banking, email) is encrypted, so your neighbor will only see the website domain, not the pages or passwords. Nevertheless, the risk of data interception (for example, through packet sniffing) remains high.
Will my internet speed decrease if only one person connects to my internet?
It depends on your plan speed and the guest's activity. If you have a 100 Mbps plan and your neighbor is simply scrolling through their news feed, you won't notice anything. But if they start downloading torrents or watching 4K videos, the speed for other devices could drop dramatically, especially on plans under 50 Mbps.
How can I find out my phone's MAC address to avoid getting locked out?
On Android the path is usually: Settings -> About phone -> General information (or Status). On iPhone: Settings -> General -> AboutThe Wi-Fi address (MAC) will be listed there. Modern versions of iOS and Android may use a random MAC address to protect privacy; you should find it in the settings of the specific Wi-Fi network.
Will hiding the network name (SSID) from other connections help?
Hiding the SSID is weak security. The network doesn't broadcast its name, but it still responds to connection requests. Specialized scanners easily detect "hidden" networks and may display them as "Hidden Network." This provides protection from "hobbyists," but not from those deliberately looking for something to connect to.