Who Connected to My Wi-Fi Without Permission? 7 Proven Ways to Check Your Router

Have you noticed your internet has become slower and your data usage is depleting faster than usual? Someone else may be accessing your Wi-Fi. According to research KasperskyOne in five routers in Russia has vulnerabilities that allow attackers to access the network. But how can you find out exactly who's using your Wi-Fi, and what should you do if you discover unfamiliar devices?

In this article we will look at 7 working verification methods — from standard router tools to advanced network scanners. You'll learn how to distinguish legitimate devices from fake ones, what signs indicate hacking, and how Block the connection by MAC address or change the password to make it more difficult for hackers to guessAnd at the end, there's an FAQ with answers to the most frequently asked questions about Wi-Fi security.

1. Checking via the router's web interface: step-by-step instructions

The most reliable way is to access your router's control panel. This doesn't require any additional software, just a browser and access to the router. Here's how:

  1. Find out your router's IP address. Usually it is 192.168.0.1 or 192.168.1.1You can check this via the Windows command line:
    ipconfig /all

    Look for the line "Default gateway" (Default Gateway).

  2. Enter your IP address in the browser's address bar. The system will ask for your login and password (often by default) admin/admin or indicated on the router sticker).
  3. Go to the section with a list of connected devices. The path may vary depending on the model:
    • 🔹 TP-Link: Wireless Mode → Wireless Mode Statistics
    • 🔹 ASUS: Network Map → Devices
    • 🔹 Keenetic: Devices → Client List
    • 🔹 Zyxel: Wi-Fi Network → Clients

The list will show all devices connected to your network—both via cable and Wi-Fi. Please note:

  • 📱 Device names (if they are not changed, models are displayed, for example, iPhone 13 or Samsung Galaxy S22).
  • 🔢 MAC addresses (unique identifiers that can be used to track the manufacturer through services like MAC Vendors Lookup).
  • 📡 Connection type (Wi-Fi 2.4 GHz/5 GHz or Ethernet).
⚠️ Attention: If the list contains devices with unfamiliar MAC addresses or names like android-123456, unknown, this is cause for concern. But first, check if smart light bulbs, cameras, or other IoT gadgets are connected to the network.
📊 How often do you check connected devices in your router?
Once a month
Only when the internet is slow
Never checked
I don't know how to do this

2. Signs that strangers have connected to your Wi-Fi

It's not always possible to access your router settings. But there are indirect signs that should alert you:

  • 🐢 Internet speed reduction Without objective reasons (the provider isn't doing any maintenance, the tariff hasn't changed). This is especially noticeable in the evenings, when neighbors are actively using the network.
  • 🔋 Rapid consumption of trafficIf you have a limited data plan, check your statistics in your provider's personal account—spikes in consumption may indicate background file downloads on other devices.
  • 🔄 Spontaneous Wi-Fi disconnectionsThe router can automatically disconnect if the maximum number of connected devices is exceeded (usually 10–30, depending on the model).
  • 🛡️ Router indicator activityIf the Wi-Fi light is blinking too frequently even though you're not using the internet, it could indicate high network load.

One of the most obvious symptoms is inability to connect to the network from your device, even though the password is entered correctly. This can happen if the router has reached its connection limit, and one of them is occupied by an unauthorized user.

3. How to distinguish your devices from others: MAC address analysis

A MAC (Media Access Control) address is a unique identifier for a network interface. The first six characters can be used to identify the device's manufacturer. For example:

  • 🍎 A4:83:E7Apple (iPhone, MacBook).
  • 🤖 78:31:C1Xiaomi (smartphones, smart devices).
  • 🖥️ 00:0A:EBASUS (laptops, routers).

To check who owns a MAC address:

  1. Copy the address from the list of devices in the router.
  2. Enter it in the search bar Google or use the services:
MAC prefix Manufacturer Typical devices
3C:5A:B4 Google Pixel, Nest, Chromecast
B8:27:EB Raspberry Pi Microcomputers, servers
00:1A:79 Samsung Smartphones, TVs, smart refrigerators
A0:0B:BA Amazon Echo, Kindle, Fire TV

If the MAC address belongs to an unknown manufacturer or a device that you do not have (for example, TP-Link, even though you have a router of a different brand), this is a sure sign of an unauthorized connection.

Is it possible to spoof a MAC address?

Yes, advanced users can change the MAC address of their device using special utilities (for example, Technitium MAC Address Changer (for Windows). Therefore, MAC address alone does not guarantee 100% identification, but in most cases it helps to identify suspicious devices.

4. Mobile applications for monitoring Wi-Fi networks

If accessing your router settings is inconvenient, use specialized apps. They scan your network and display all connected devices in a convenient format. Here are the top 5 proven utilities:

  • 📱 Fing (iOS/Android) — identifies devices, their MAC addresses, manufacturers, and even network vulnerabilities. Includes a notification feature for new connections.
  • 🛡️ NetScan (Android) - scans the local network, shows open ports and possible threats.
  • 🔍 WiFi Guard (Android) - Compares current connections with a "white list" of your devices and signals new ones.
  • 🍎 Network Analyzer (iOS) - visualizes the network, shows the connection speed of each device.
  • 🖥️ Advanced IP Scanner (Windows) — scans the network by IP range, identifies device models.

Example of work Fing:

  1. Install the application and open it.
  2. Click "Scan" and the utility will find all devices on your network.
  3. Compare the list with your gadgets. Unknown devices will be marked as "Unknown."
  4. Click on a suspicious device and the app will display its MAC address, manufacturer, and IP address.
⚠️ Attention: Some applications (eg. Fing) offer paid features like device blocking. Don't buy them—blocking can be done for free through your router settings (more on that below).

Make sure it's not your gadget (check MAC)

Block MAC address in router

Change your Wi-Fi password to a more complex one

Update your router's firmware

Enable MAC filtering (if supported)-->

5. How to Block Someone Else's Device: 3 Reliable Methods

Detected a rogue connection? Act quickly to prevent traffic or data theft. Here's what you can do:

Method 1: Blocking by MAC address

Most routers allow you to blacklist MAC addresses. Here are instructions for popular models:

  • 🔧 TP-Link: Wireless → MAC Filtering → Add.
  • 🔧 ASUS: Wireless Network → MAC Filter → Blacklist.
  • 🔧 Keenetic: Devices → [Select device] → Block.

Method 2: Change your Wi-Fi password

If an attacker has connected using a password, you need to change it immediately. Rules for creating a strong password:

  • 🔐 Length must be at least 12 characters.
  • 🔤 A combination of letters (upper and lower case), numbers and special characters (!@#$%).
  • 🚫 Do not use personal information (dates of birth, names).
  • 🔄 Change your password every 3-6 months.

Example of a strong password: kL9#pR2@xQ1!vN4.

Method 3: Disabling WPS

Technology WPS (Wi-Fi Protected Setup) simplifies connecting devices, but it's often vulnerable. Disable it in your router settings: Wireless Network → WPS → Disable.

6. Advanced Methods: Network Scanning via Command Line

For experienced users there is a way to check through Windows command line or Linux/macOS terminalIt allows you to see all active connections on your local network.

For Windows:

  1. Open Command Prompt (Win + R → enter cmd).
  2. Enter the command:
    arp -a

    It will display an ARP (Address Resolution Protocol) table with the IP and MAC addresses of all devices on the network.

  3. Compare the list with your gadgets.

For Linux/macOS:

Use the command:

nmap -sn 192.168.1.0/24

(replace 192.168.1.0/24 to your subnet, if it is different).

The result will look like this:


Nmap scan report for 192.168.1.5

Host is up (0.045s latency).

MAC Address: A4:83:E7:12:34:56 (Apple)

⚠️ Attention: If you're unfamiliar with the terminal, it's best to use mobile apps or the router's web interface. Incorrect commands can disrupt network operation.

7. How to Protect Wi-Fi from Hacking: 5 Essential Steps

The best way to avoid problems is protect the network in advanceFollow these guidelines:

  • 🔒 Use WPA3This is the most modern encryption protocol. If your router doesn't support it, select WPA2-PSK (avoid outdated WEP).
  • 🔄 Update your router firmwareManufacturers regularly patch vulnerabilities. Check for updates every 2-3 months.
  • 📵 Disable remote control. In the router settings (Administration → Remote Access) block access from the Internet.
  • 📡 Hide your SSIDDisable network name broadcasting in your Wi-Fi settings. This won't make your network completely invisible, but it will make it more difficult for attackers to access it.
  • 🛡️ Enable guest network For friends. It's isolated from the main network and doesn't provide access to your devices.

Additionally, you can use VPN for a router (For example, NordVPN or ExpressVPN) to encrypt all traffic. This will protect not only from unauthorized connections but also from data interception.

📊 What Wi-Fi security do you use?
WPA2
WPA3
Hidden SSID
Guest network
I didn't configure anything

FAQ: Answers to Frequently Asked Questions

Is it possible to find out who exactly connected to my Wi-Fi?

It's impossible to accurately identify a person using their MAC address or IP address. The most you can learn is the device model and manufacturer. If you suspect your neighbors are stealing your Wi-Fi, you can try tracking the signal using apps like WiFi Analyzer, but this does not give a 100% guarantee.

What should I do if my router doesn't show a list of connected devices?

Your router model may not support this feature (rare, but it does happen with older devices). In this case, use mobile apps (Fing, NetScan) or scanning via the command line. Also, check that the DHCP server isn't disabled in the settings.

Can an attacker connect to my Wi-Fi if I use WPA3?

WPA3 is significantly harder to crack than WPA2, but it doesn't provide absolute security. Vulnerabilities have been found in it as well (for example, Dragonblood). Therefore, it is important to combine several methods: a complex password, disabling WPS, and updating the firmware.

How can I check if my traffic is being stolen even if my internet speed is stable?

Even if your speed isn't dropping, other devices may be using your Wi-Fi for background activity (such as updates or cryptocurrency mining). Check your traffic statistics in your provider's account or through apps like GlassWire (Windows).

Is it possible to track connected devices through a provider?

Your ISP only sees overall traffic but can't show you a list of devices on your local network. This requires router logs, which are rarely stored for more than 24 hours. If you need evidence for a court case (for example, in the case of data theft), consult a cybersecurity specialist.