A sudden drop in internet speed or unstable video calls are often the first warning signs that an uninvited guest has entered your network. Many users are unaware that neighbors or more sophisticated friends have been using their data for some time while they try to figure out the cause of the lag. Control of connected devices — This is a basic skill that every home router owner should have to ensure the stability and security of personal traffic.
There are several proven ways to identify intruders, ranging from using specialized mobile apps to in-depth analysis of logs in the equipment's administrative panel. Don't panic ahead of time: sometimes a slow network is caused by interference from neighboring routers or technical issues with your provider. However, if you notice suspicious activity on the router's LEDs when all your devices are turned off, it's time to act.
In this article, we'll take a detailed look at how to check how many people are using your Wi-Fi using available tools. We'll cover both smartphone software solutions and the native features of routers from various manufacturers, and discuss the steps you should take immediately after detecting an intruder.
Signs of unauthorized network access
The first step in diagnosing is monitoring your home network's behavior. Users often ignore obvious signs, attributing them to bad weather or temporary ISP maintenance. However, a combination of factors may point to a problem. Wi-Fi theftIf you live in an apartment building, the likelihood that your neighbors have guessed your password or are using programs to crack it is quite high.
Pay attention to the indicators on the router. The light that indicates wireless connection (usually labeled WLAN or Wi-Fi) may flash wildly, even while you're sleeping or at work, and all your devices are turned off. This clearly indicates active data transfer. You should also be wary if your internet speed drops to a crawl during peak hours, when neighbors typically return home.
⚠️ Note: Some modern routers have activity indicators for each port and Wi-Fi separately. If the wireless network indicator is blinking when your devices are not connected, this is almost certainly a sign of an external connection.
Another indirect sign could be a change in router settings you haven't touched. For example, a change in the admin panel password or network name (SSID). Attackers with advanced knowledge may attempt to take complete control of the device. In such cases, you should immediately perform factory reset.
Using mobile apps to scan the network
The fastest and most accessible way to check who's using your Wi-Fi is to use specialized smartphone apps. They scan your local network and provide a complete list of all devices currently online. This is convenient because it doesn't require turning on your computer or accessing complex router settings.
One of the most popular tools is the application FingIt's available for both Android and iOS. After running a scan, the program displays not only the IP and MAC addresses of devices but also attempts to identify their type (TV, phone, laptop) and manufacturer. This helps you quickly identify which devices are unfamiliar. For example, if you see a device named "Samsung-TV" but don't own a TV of that brand, this is cause for concern.
Other useful utilities such as Wi-Fi Analyzer or Network Scanner, also provide detailed information. They allow you to see not only connected gadgets but also the signal strength of each one. Signal level analysis It can help you figure out where the intruder is: if the signal from someone else's device is very strong, it means the person stealing your internet is physically close, perhaps behind a wall.
- 📱 Fing — a market leader, able to identify the device type and operating system.
- 🔍 Wi-Fi Analyzer - shows the load channels and the list of clients on the network.
- 🛡️ Kaspersky Wi-Fi Security — checks connection security and identifies suspicious devices.
- 📡 Network Scanner - simple interface and the ability to ping devices to check their activity.
⚠️ Please note: Mobile apps only work when your smartphone is connected to the same Wi-Fi network you're checking. They won't scan the network remotely over a mobile internet connection (4G/5G).
It's important to understand that apps only show devices that are active at the time of scanning. If a hacker has set their devices to operate on a schedule, you may not be able to spot them. Therefore, it's best to scan at different times of day. Additionally, some advanced users can hide their devices from standard detection by changing their MAC address, but for everyday use, this is usually unnecessary.
Checking connected devices via the router's web interface
The most accurate and complete list of connected subscribers can be obtained by logging into the router's settings. This method requires the login address (usually 192.168.0.1 or 192.168.1.1) and the administrator password. The web interface provides access to system logs and ARP tables, which display all devices with which the router has communicated.
Interfaces may vary between manufacturers, but the logic for finding information remains the same. You need to find a section called "Client List," "Status," "Wireless Statistics," or "DHCP Client List." The DHCP client table stores information about which devices have been assigned an IP address. Even if a device is currently sleeping, it may remain in the leases list for some time.
Let's look at how to find this information on popular hardware models. The table below provides sample navigation paths for different brands. Please note that the exact names of the items may vary depending on the firmware version.
| Router brand | Path to the menu | Section title |
|---|---|---|
| TP-Link | Wireless -> Wireless Statistics | Host List / Statistics |
| ASUS | Network Map -> Clients | Wireless network clients |
| Keenetic | My Networks and Wi-Fi -> Client List | Active devices |
| D-Link | Status -> Wireless -> Active Clients | Active clients |
| Mikrotik | IP -> DHCP Server -> Leases | Address rental |
Inside this list, you will see the MAC addresses and IP addresses of all connected gadgets. MAC address — is a unique identifier assigned to a network card at the factory. By comparing the first three pairs of characters (OUI) with the manufacturer's database, you can determine whose device it is. For example, if you see an address starting with 00:1A:2B, this may indicate an Apple device, and B8:27:EB — on Raspberry Pi.
The advantage of the web interface over mobile apps is that you can not only see but also instantly block the intruder. Most routers allow you to enter the MAC address. blacklist (Blacklist) or configure filtering by whitelist (Whitelist), when access is allowed only to trusted devices.
What should you do if you didn't change the router password?
If you can't access the settings because the administrator password has been changed, you'll need to perform a physical reset. Find the small hole marked "Reset" on the router's case and press it with a paperclip for 10-15 seconds while the power is on. The router will reset to factory settings, and you'll be able to log in using the information on the sticker on the bottom of the device.
MAC address analysis and device identification
Once you have a list of MAC addresses, the detective work begins. The main task is to match each address with an actual physical device in your home. This can be challenging if you have a lot of gadgets in your home: smartphones, tablets, smart plugs, TVs, consoles, and IoT sensors.
First, make a list of all your devices and write down their MAC addresses. This information can usually be found in your phone's settings (under "About Phone" -> "Status") or on a sticker on the device's body. Compare this list with what your router displays. Anything left out are potential intruders.
Users often forget about smart devices. Light bulbs, robotic vacuum cleaners, speakers with Alexa or Google Assistant—they all connect to Wi-Fi and appear in the list. If you see a device named "Espressif" or "Tuya," it's most likely a smart plug or sensor, not a hacker down the hall.
- 🔎 Check by manufacturer: Use online services to check the first 6 characters of the MAC address to find out the brand of the device.
- 📉 Method of elimination: Turn off your devices one by one and see if the unknown gadget disappears from the list (although this takes a long time).
- 📝 Logging: Write down the MAC addresses of your devices immediately after purchasing a router to avoid guessing later.
Pay special attention to devices named "Unknown" or "Android-xxxx." Attackers often use programs to randomize MAC addresses to make them more difficult to track. However, completely hiding from an attentive administrator is difficult: abnormal traffic behavior will still give them away.
☑️ Device identification
Methods for blocking uninvited guests
Once you've identified the intruder, you need to immediately block their access. The simplest, but least effective, way is to simply change your Wi-Fi password. Yes, this will disconnect everyone, including your devices, which will have to be reconnected. But if your neighbor uses password-generating software, they might be able to find your new key again.
A more reliable method is to use MAC address filteringIn your router settings (Wireless MAC Filtering section), you can enable "Allow" mode, which allows only the addresses of your devices. In this case, even with the password, no other device will be able to connect to the network. This "whitelist" is the gold standard for home network security.
The third option is a guest network. If you often have friends over, create a separate guest network for them with speed and time limits. This will protect your main network from accidental virus infections from guest laptops and allow you to easily control who is connected and when.
⚠️ Warning: MAC address filtering is a powerful tool, but remember that MAC addresses can be spoofed (cloned). A skilled attacker can copy the address of your authorized device. Therefore, the best protection method is a complex password (WPA2/WPA3) combined with regular key changes.
Some routers, for example, from Keenetic or ASUS, allow you to block devices directly from the client list with one click, marking them as "Forbidden." This is equivalent to adding them to a blacklist. Once blocked, the device will lose connection, even if it was previously authorized.
Preventing and strengthening the security of your Wi-Fi network
To make the question "how to check who's using my Wi-Fi" irrelevant, it's essential to build a robust security system. Network security isn't a one-time action, but a process. Start by changing the default password, which is often listed on the router's sticker. Attackers know the default passwords for all popular models.
Use an encryption protocol WPA2-PSK or, if the equipment allows, WPA3Avoid using the outdated WEP, which can be cracked in minutes even by a novice using a smartphone. The password should be complex: contain upper- and lower-case letters, numbers, and special characters, and be at least 12 characters long.
Also, don't forget to update your router's firmware. Manufacturers regularly release patches to fix security holes. Automatic updates are a convenient feature, but it's better to check for new versions manually in the web interface every six months.
Disable WPS (Wi-Fi Protected Setup) if you don't use it to quickly connect devices with a push-button connection. This feature has known vulnerabilities that allow PIN code recovery and network access without knowing the password. In modern routers, WPS is often disabled by default, but it's worth checking.
Is it possible to find out what someone else is doing on my Wi-Fi?
You can't see traffic content (messages, passwords) using standard home router tools, as modern internet traffic is protected by the HTTPS protocol. You'll only see the connection and the amount of data transferred, but not the content.
Frequently Asked Questions (FAQ)
Can my neighbor steal my internet if I hide my network name (SSID)?
Hiding the network name (Broadcast SSID: Disabled) is weak security. The network still emits signals, and special programs can easily find "hidden" networks. This is inconvenient for you (you have to manually enter the name), but it's not a barrier for an experienced user.
Does the number of connected devices affect internet speed?
Yes, absolutely. The Wi-Fi channel is shared among all active users. If your neighbor is downloading 4K movies, your YouTube or work speeds may drop dramatically, even if your ISP offers a high plan.
What should I do if my speed hasn't increased after changing my password?
The problem may not be Wi-Fi hijacking, but rather interference from neighboring routers (especially at 2.4 GHz), a faulty ISP cable, or overheating in your router. Try rebooting your router or switching to a 5 GHz channel.
Is it safe to use Wi-Fi hacking software to check your network?
Using such programs (such as Aircrack-ng) on your network for security testing is legal, but requires advanced technical knowledge. For the average user, safer and more straightforward are legitimate network scanners, as described in this article.