How to Check Who's Stealing Your Wi-Fi: A Step-by-Step Guide (2026)

Have you noticed your internet has become slower and your data is running out early? Someone may be using your Wi-Fi without permission. According to KasperskyEvery fifth router in Russia has vulnerabilities that allow attackers to connect to the network. But how can you accurately determine if your Wi-Fi is being hijacked, and what can you do about it?

In this article we will look at 7 proven methods Identify traffic thieves—from simple (viewing the list of devices in the router's admin panel) to advanced (MAC address analysis and network activity monitoring). You'll also learn how block other people's gadgets permanently, even if they change their data. All methods are relevant for routers. TP-Link, ASUS, Keenetic, Zyxel and other popular brands.

Important: Some steps require access to your router's settings. If you've never accessed the router's admin panel, don't worry—we'll provide step-by-step instructions with images (please refer to the official documentation for your model).

1. Check the list of connected devices via the router

The fastest way to identify "unnecessary" gadgets is to view the list of active connections in the router's web interface. To do this:

1. Open your browser and type in the address bar 192.168.0.1 or 192.168.1.1 (the exact address is indicated on the router sticker).
2. Enter your login and password (by default it is often admin/admin or admin/empty password).
3. Find the section DHCP, Local area network or Wireless (names vary depending on model).

In the table of connected devices you will see:

• 📱 IP addresses (For example, 192.168.0.102)
• 🔤 MAC addresses (unique species identifier 00:1A:2B:3C:4D:5E)
• 🖥️ Device names (if they are not hidden, for example, iPhone-12-Pro or Samsung-Galaxy-S23)

Compare the list with your gadgets. Unknown devices are the first sign of a leak. But be careful: some routers show not only Wi-Fi but also wired connections (for example, Smart TV or a game console).

Take a photo of the MAC address and device name | Try disabling it temporarily through the admin panel | Check if your internet speed has improved | Block the device permanently (instructions below) -->

⚠️ Warning: Attackers often fake device names (for example, they might call their smartphone iPhone-YourName). Don't rely on the name alone - check the MAC addresses!

2. MAC address analysis: how to distinguish your gadgets from others

A MAC address is a device's "passport," making it difficult to forge. To find out which addresses belong to your gadgets:

1. On Windows: open Command line (Win + R → enter cmd) and run the command:

   ipconfig /all

   Find the line Physical address — this is the MAC of your PC/laptop.

2. On Android: go to Settings → About phone → General information → Wi-Fi MAC address.
3. On iOS: path: Settings → General → About → Wi-Fi Address.

Create a table of your MAC addresses and compare it with the data from your router. For example:

If you find any discrepancies, it's likely someone has connected to your network without permission. But before blocking, make sure it's not a guest device (for example, a friend's smartphone who visited your site a week ago and forgot to disconnect).

Once a month|Only when the internet is slow|Never tested|I don't know how to do it-->

3. Traffic monitoring: who is “eating” your internet?

Some routers (eg. Keenetic or ASUS RT-AX88U) know how to show traffic statistics by deviceThis helps identify "greedy" thieves who download movies or play online games.

How to enable monitoring:

1. Find the section in the router admin panel Traffic, Statistics or Bandwidth Monitor.
2. Enable data collection (you may need to reboot your router).
3. After 1-2 hours, check which devices are consuming the most traffic.

Signs of "theft":

• 📉 Unknown gadget uses >50% of traffic.
• 🕒 Activity at night, when everyone is sleeping.
• 🎮 Large amount of data on ports related to games (UDP 3074, TCP 27015).

If your router does not support built-in monitoring, use third-party programs:

• 🖥️ Windows: GlassWire, NetBalancer.
• 📱 Android: Fing, Network Analyzer.

⚠️ Note: Some monitoring applications require root rights on Android or administrator rights on Windows. Install them only from official sources!

4. Checking via mobile apps: Fing, WiFi Guard, and others

If accessing your router settings is difficult, use mobile apps. They scan the network and display all connected devices.

Top 3 apps for Android And iOS:

• 🔍 Fing - determines the device manufacturer by MAC address (for example, it will show that 00:1A:2B:... belongs Xiaomi).
• 🛡️ WiFi Guard — compares current connections with the “white list” of your gadgets.
• 📊 NetScan — creates graphs of traffic usage in real time.

How to use Fing:

1. Download the app and connect to your Wi-Fi network.
2. Click Scan — after 10–20 seconds a list of devices will appear.
3. Click on the unknown gadget → Ping or Port scanto check its activity.

The advantage of apps: they work even if you don’t have access to the router’s admin panel (for example, if you’re connected to an office or hotel network).

5. Advanced Techniques: Wireshark and Packet Analysis

If you are an advanced user, you can go further and analyze your network traffic using WiresharkThis is a network sniffer program that shows what data is being transmitted between devices.

How to use Wireshark:

1. Download the program from the official website and install it.
2. Select the network interface (Wi-Fi adapter) and click Start.
3. Enter in the filter wlan.addr == 00:1A:2B:3C:4D:5E (replace with the suspicious MAC address).
4. Analyze packets: if the device sends/receives large amounts of data, this is confirmation of “theft”.

What to look for in logs:

• 🎥 Streaming video (YouTube, Netflix, Twitch).
• 🎮 Online games (Steam, Epic Games, PlayStation Network).
• 🔄 Torrent traffic (BitTorrent, uTorrent).

⚠️ Caution: Use Wireshark Using it on public networks (cafes, airports) may violate privacy laws. Use it only on your home network!

arp -a

6. How to Block a Wi-Fi Thief Permanently

Finding the "thief" is half the battle. Now we need to block his access to your network. Methods:

Method 1: Filtering by MAC address

1. Find the section in the router admin panel MAC Filter or Access control.
2. Add the suspicious MAC address to the blacklist.
3. Save the settings and reboot the router.

Method 2: Change your Wi-Fi password

If you don’t know which gadget is connected:

1. Change your Wi-Fi password to a complex one (for example, k7#pL9!qR2$vN4).
2. Use an encryption standard WPA3 (if the router supports it).
3. Reconnect all your devices with the new password.

Method 3: Disabling WPS

Function WPS (Wi-Fi Protected Setup) makes connecting easier, but it's easily hacked. Disable it in your router settings (Wireless Network → WPS).

Method 4: Hiding the network name (SSID)

In the Wi-Fi settings, disable the option Broadcast SSIDThe network will no longer be visible in the public list, and you can only connect to it manually.

7. Prevention: How to protect your Wi-Fi from future hacking

To avoid traffic hijacking in the future:

• 🔐 Change your Wi-Fi password once every 3–6 months.
• 🛡️ Update your router firmware (there is a section in the admin panel Software update).
• 📵 Disable the guest network if you are not using it.
• 🔍 Check the list of connected devices regularly (at least once a month).

Additional measures for advanced users:

• 🌐 Set up VLAN (virtual networks) to separate traffic.
• 🕵️ Use it VPN on the router (for example, OpenVPN) to encrypt all traffic.
• ⚡ Install alternative firmware (DD-WRT, OpenWRT) for advanced security features.

⚠️ Attention: Some routers (especially budget models) have vulnerabilities by defaultCheck your model on the website. RouterSecurity.org or in the database CVE Details.

FAQ: Frequently Asked Questions About Wi-Fi Theft