Have you noticed your internet has become slower and your data usage is depleting faster than usual? Someone else may be accessing your Wi-Fi. According to research KasperskyOne in five routers in Russia has vulnerabilities that allow attackers to access the network. But how can you find out exactly who's using your Wi-Fi, and what should you do if you discover unfamiliar devices?
In this article we will look at 7 working verification methods — from standard router tools to advanced network scanners. You'll learn how to distinguish legitimate devices from fake ones, what signs indicate hacking, and how Block the connection by MAC address or change the password to make it more difficult for hackers to guessAnd at the end, there's an FAQ with answers to the most frequently asked questions about Wi-Fi security.
1. Checking via the router's web interface: step-by-step instructions
The most reliable way is to access your router's control panel. This doesn't require any additional software, just a browser and access to the router. Here's how:
- Find out your router's IP address. Usually it is
192.168.0.1or192.168.1.1You can check this via the Windows command line:ipconfig /allLook for the line "Default gateway" (Default Gateway).
- Enter your IP address in the browser's address bar. The system will ask for your login and password (often by default)
admin/adminor indicated on the router sticker). - Go to the section with a list of connected devices. The path may vary depending on the model:
- 🔹 TP-Link:
Wireless Mode → Wireless Mode Statistics - 🔹 ASUS:
Network Map → Devices - 🔹 Keenetic:
Devices → Client List - 🔹 Zyxel:
Wi-Fi Network → Clients
- 🔹 TP-Link:
The list will show all devices connected to your network—both via cable and Wi-Fi. Please note:
- 📱 Device names (if they are not changed, models are displayed, for example, iPhone 13 or Samsung Galaxy S22).
- 🔢 MAC addresses (unique identifiers that can be used to track the manufacturer through services like MAC Vendors Lookup).
- 📡 Connection type (Wi-Fi 2.4 GHz/5 GHz or Ethernet).
⚠️ Attention: If the list contains devices with unfamiliar MAC addresses or names likeandroid-123456,unknown, this is cause for concern. But first, check if smart light bulbs, cameras, or other IoT gadgets are connected to the network.
2. Signs that strangers have connected to your Wi-Fi
It's not always possible to access your router settings. But there are indirect signs that should alert you:
- 🐢 Internet speed reduction Without objective reasons (the provider isn't doing any maintenance, the tariff hasn't changed). This is especially noticeable in the evenings, when neighbors are actively using the network.
- 🔋 Rapid consumption of trafficIf you have a limited data plan, check your statistics in your provider's personal account—spikes in consumption may indicate background file downloads on other devices.
- 🔄 Spontaneous Wi-Fi disconnectionsThe router can automatically disconnect if the maximum number of connected devices is exceeded (usually 10–30, depending on the model).
- 🛡️ Router indicator activityIf the Wi-Fi light is blinking too frequently even though you're not using the internet, it could indicate high network load.
One of the most obvious symptoms is inability to connect to the network from your device, even though the password is entered correctly. This can happen if the router has reached its connection limit, and one of them is occupied by an unauthorized user.
3. How to distinguish your devices from others: MAC address analysis
A MAC (Media Access Control) address is a unique identifier for a network interface. The first six characters can be used to identify the device's manufacturer. For example:
- 🍎
A4:83:E7— Apple (iPhone, MacBook). - 🤖
78:31:C1— Xiaomi (smartphones, smart devices). - 🖥️
00:0A:EB— ASUS (laptops, routers).
To check who owns a MAC address:
- Copy the address from the list of devices in the router.
- Enter it in the search bar Google or use the services:
| MAC prefix | Manufacturer | Typical devices |
|---|---|---|
3C:5A:B4 |
Pixel, Nest, Chromecast | |
B8:27:EB |
Raspberry Pi | Microcomputers, servers |
00:1A:79 |
Samsung | Smartphones, TVs, smart refrigerators |
A0:0B:BA |
Amazon | Echo, Kindle, Fire TV |
If the MAC address belongs to an unknown manufacturer or a device that you do not have (for example, TP-Link, even though you have a router of a different brand), this is a sure sign of an unauthorized connection.
Is it possible to spoof a MAC address?
Yes, advanced users can change the MAC address of their device using special utilities (for example, Technitium MAC Address Changer (for Windows). Therefore, MAC address alone does not guarantee 100% identification, but in most cases it helps to identify suspicious devices.
4. Mobile applications for monitoring Wi-Fi networks
If accessing your router settings is inconvenient, use specialized apps. They scan your network and display all connected devices in a convenient format. Here are the top 5 proven utilities:
- 📱 Fing (iOS/Android) — identifies devices, their MAC addresses, manufacturers, and even network vulnerabilities. Includes a notification feature for new connections.
- 🛡️ NetScan (Android) - scans the local network, shows open ports and possible threats.
- 🔍 WiFi Guard (Android) - Compares current connections with a "white list" of your devices and signals new ones.
- 🍎 Network Analyzer (iOS) - visualizes the network, shows the connection speed of each device.
- 🖥️ Advanced IP Scanner (Windows) — scans the network by IP range, identifies device models.
Example of work Fing:
- Install the application and open it.
- Click "Scan" and the utility will find all devices on your network.
- Compare the list with your gadgets. Unknown devices will be marked as "Unknown."
- Click on a suspicious device and the app will display its MAC address, manufacturer, and IP address.
⚠️ Attention: Some applications (eg. Fing) offer paid features like device blocking. Don't buy them—blocking can be done for free through your router settings (more on that below).
Make sure it's not your gadget (check MAC)
Block MAC address in router
Change your Wi-Fi password to a more complex one
Update your router's firmware
Enable MAC filtering (if supported)-->
5. How to Block Someone Else's Device: 3 Reliable Methods
Detected a rogue connection? Act quickly to prevent traffic or data theft. Here's what you can do:
Method 1: Blocking by MAC address
Most routers allow you to blacklist MAC addresses. Here are instructions for popular models:
- 🔧 TP-Link:
Wireless → MAC Filtering → Add. - 🔧 ASUS:
Wireless Network → MAC Filter → Blacklist. - 🔧 Keenetic:
Devices → [Select device] → Block.
Method 2: Change your Wi-Fi password
If an attacker has connected using a password, you need to change it immediately. Rules for creating a strong password:
- 🔐 Length must be at least 12 characters.
- 🔤 A combination of letters (upper and lower case), numbers and special characters (
!@#$%). - 🚫 Do not use personal information (dates of birth, names).
- 🔄 Change your password every 3-6 months.
Example of a strong password: kL9#pR2@xQ1!vN4.
Method 3: Disabling WPS
Technology WPS (Wi-Fi Protected Setup) simplifies connecting devices, but it's often vulnerable. Disable it in your router settings:
Wireless Network → WPS → Disable.
6. Advanced Methods: Network Scanning via Command Line
For experienced users there is a way to check through Windows command line or Linux/macOS terminalIt allows you to see all active connections on your local network.
For Windows:
- Open Command Prompt (
Win + R→ entercmd). - Enter the command:
arp -aIt will display an ARP (Address Resolution Protocol) table with the IP and MAC addresses of all devices on the network.
- Compare the list with your gadgets.
For Linux/macOS:
Use the command:
nmap -sn 192.168.1.0/24
(replace 192.168.1.0/24 to your subnet, if it is different).
The result will look like this:
Nmap scan report for 192.168.1.5
Host is up (0.045s latency).
MAC Address: A4:83:E7:12:34:56 (Apple)
⚠️ Attention: If you're unfamiliar with the terminal, it's best to use mobile apps or the router's web interface. Incorrect commands can disrupt network operation.
7. How to Protect Wi-Fi from Hacking: 5 Essential Steps
The best way to avoid problems is protect the network in advanceFollow these guidelines:
- 🔒 Use WPA3This is the most modern encryption protocol. If your router doesn't support it, select
WPA2-PSK(avoid outdatedWEP). - 🔄 Update your router firmwareManufacturers regularly patch vulnerabilities. Check for updates every 2-3 months.
- 📵 Disable remote control. In the router settings (
Administration → Remote Access) block access from the Internet. - 📡 Hide your SSIDDisable network name broadcasting in your Wi-Fi settings. This won't make your network completely invisible, but it will make it more difficult for attackers to access it.
- 🛡️ Enable guest network For friends. It's isolated from the main network and doesn't provide access to your devices.
Additionally, you can use VPN for a router (For example, NordVPN or ExpressVPN) to encrypt all traffic. This will protect not only from unauthorized connections but also from data interception.
FAQ: Answers to Frequently Asked Questions
Is it possible to find out who exactly connected to my Wi-Fi?
It's impossible to accurately identify a person using their MAC address or IP address. The most you can learn is the device model and manufacturer. If you suspect your neighbors are stealing your Wi-Fi, you can try tracking the signal using apps like WiFi Analyzer, but this does not give a 100% guarantee.
What should I do if my router doesn't show a list of connected devices?
Your router model may not support this feature (rare, but it does happen with older devices). In this case, use mobile apps (Fing, NetScan) or scanning via the command line. Also, check that the DHCP server isn't disabled in the settings.
Can an attacker connect to my Wi-Fi if I use WPA3?
WPA3 is significantly harder to crack than WPA2, but it doesn't provide absolute security. Vulnerabilities have been found in it as well (for example, Dragonblood). Therefore, it is important to combine several methods: a complex password, disabling WPS, and updating the firmware.
How can I check if my traffic is being stolen even if my internet speed is stable?
Even if your speed isn't dropping, other devices may be using your Wi-Fi for background activity (such as updates or cryptocurrency mining). Check your traffic statistics in your provider's account or through apps like GlassWire (Windows).
Is it possible to track connected devices through a provider?
Your ISP only sees overall traffic but can't show you a list of devices on your local network. This requires router logs, which are rarely stored for more than 24 hours. If you need evidence for a court case (for example, in the case of data theft), consult a cybersecurity specialist.