Who's Connected to My Wi-Fi? A Complete Guide to Checking Devices on Your Network

Have you noticed your internet has slowed down and your data is running out faster than usual? Perhaps unauthorized devices have connected to your Wi-Fi network—neighbors, guests who forgot to disconnect, or even hackers. In this article, we'll look into the matter. All working ways to check who's using your Wi-Fi, even if you are not an IT specialist.

We will look at methods for different types of routers (TP-Link, ASUS, Keenetic, MikroTik), mobile devices on Android And iOS, as well as universal solutions via the command line. You'll learn how to not only identify "unnecessary" gadgets, but also cut them off from the network forever without the risk of reconnectionImportant: Some methods require administrator rights or access to router settings. If you're renting a place with pre-configured Wi-Fi, these methods may not work.

A word of warning: if you discover unknown devices, don't panic. In 60% of cases, these are simply friends' forgotten smartphones or smart gadgets (e.g., Amazon Echo or Xiaomi Mi Home), which automatically connect to saved networks. But it's better to be on the safe side—especially if internet speeds drop during peak hours.

1. Checking via the router's web interface (universal method)

The most reliable way is to go to the router's control panel. It displays a complete list of connected devices and their MAC addresses, IP, and even names (if the gadget broadcasts them). These instructions are suitable for 90% of modern models, but the interface may differ slightly.

To open the web interface:

• 🌐 Enter in the address bar of your browser 192.168.0.1 or 192.168.1.1 (less often - 192.168.8.1 for some TP-Link).
• 🔑 Enter your login and password (usually admin/admin, if you haven't changed it. For Keenetic The login is often empty, and the password is indicated on the router sticker).
• 📊 Search section DHCP, Local area network, Wireless or Connected devices (names vary).

Here's what the list of devices looks like on popular router brands:

⚠️ Note: If you see a device with a name like android-123456 or iPhone-789abc, but you don't recognize it—it's not always a hack. Many smart lightbulbs, speakers, and even refrigerators connect to Wi-Fi using standard names. Check their MAC addresses in the gadget's documentation.

2. Using mobile applications (for Android and iOS)

If you're too lazy to access your router settings or don't have access, you can use specialized apps. They scan your local network and display all connected devices. Cons: Some apps require root rights on Android or purchase the Pro version for advanced features.

Top 3 verified apps:

• 📱 Fing (free for basic scanning) - identifies the device manufacturer by MAC address, shows open ports.
• 🛡️ NetCut (requires root) - can disconnect other people's devices from the network directly from the application.
• 🔍 WiFi Guard (iOS) — compares current connections with a "white list" of your gadgets.

How to use Fing:

1. Download the app from Google Play or App Store.
2. Connect to your Wi-Fi network.
3. Click "Scan" - after 10-20 seconds a list of devices with IP, MAC and name (if available) will appear.
4. Click on an unknown device → "WhoIs" to check the manufacturer by MAC.

Example of a report in Fing:

192.168.0.100  |  00:1A:2B:3C:4D:5E  |  Samsung Electronics (Galaxy S21)
192.168.0.101  |  00:1F:2E:3D:4C:5B  |  Unknown (Possibly IoT device)
192.168.0.102  |  00:22:48:6A:8E:F0  |  Apple (iPhone 13 Pro)

⚠️ Warning: Apps like NetCut They may violate the laws of some countries if used to disable other people's devices without consent. In Russia and the EU, this is considered interference in someone else's network. Use them only for diagnostic purposes.

3. Windows Command Prompt (for advanced users)

If you have a computer on WindowsYou can view a list of connected devices without using third-party software, using the command line. This method will only show devices that are actively communicating with your PC, not all devices on the network.

Instructions:

1. Click Win + R, enter cmd and press Enter.
2. Enter the command:

   arp -a

   This will show the ARP table (IP to MAC address mapping).

3. To see active connections, use:

   net view

   or for detailed information:

   nbtstat -a [IP address]

Output example arp -a:

Interface: 192.168.0.5 --- 0x12
Internet Address Physical Address Type
192.168.0.1 aa-bb-cc-dd-ee-ff dynamic <-- This is your router
192.168.0.100 00-1a-2b-3c-4d-5e dynamic
192.168.0.101 00-1f-2e-3d-4c-5b dynamic <-- Unknown device

To identify an unknown MAC address, use online services like MAC Vendors (opens in a new tab). For example, the first 6 characters of the MAC 00:1A:2B will indicate the manufacturer (for example, Samsung or Xiaomi).

4. Analyzing traffic with Wireshark (advanced method)

For deep network diagnostics you can use Wireshark — a professional traffic analyzer. It will show not only connected devices, but also what data do they transmit, what protocols they use, and even possible hacking attempts. Cons: difficult for beginners and requires installation.

Brief instructions:

1. Download Wireshark With official website (choose a stable version).
2. Launch the program and select the network interface (Wi-Fi adapter).
3. Click "Start" to begin capturing packets.
4. Enter in the filter wlan.addr == [MAC address]to track a specific device.

What to look for in Wireshark:

• 📡 Broadcast packages (e.g. ARP requests) - may indicate network scanning.
• 🔓 Unencrypted traffic (HTTP, Telnet) - vulnerability for data interception.
• 🤖 Suspicious DNS queries (for example, to domains like malware.example.com).

⚠️ Caution: Use Wireshark On public networks (cafes, airports) it may be illegal. On a home network, you have the right to analyze your own traffic, but not other people's data.

How to detect hacker activity in Wireshark?

If you see a large number of packets with the same MAC address sent to different IP addresses (especially outside your local network), this could be a sign of an ARP spoofing attack. You should also be wary if the device sends packets to ports 22 (SSH), 3389 (RDP), or 445 (SMB)—these are often used for hacking.

5. Checking via a mobile hotspot (alternative method)

If you don't have access to a router, but you have a smartphone with the function access pointsYou can temporarily share the internet and test which devices connect. This method helps identify "parasites" that automatically connect to any open network.

How does this work:

1. Turn on the mobile hotspot on your smartphone (on Android: Settings → Network & Internet → Access Point).
2. Set the same SSID (network name) and password as your main Wi-Fi.
3. Turn off your main router and see which devices connect to the hotspot.
4. Compare the list with the expected gadgets.

This method is especially useful if you suspect someone is saving your password and connecting automatically. For example, if an unknown device still shows up on the network after changing the password on your router, it means it's saved somewhere (on a phone, laptop, or smart device).

6. How to block other people's devices permanently

Found a strange device? Changing the password isn't enough—an experienced user can reconnect. 3 reliable ways Block your device permanently:

Method 1: Filtering by MAC address

• 🔒 Go to your router settings (see Section 1).
• 📋 Find the section MAC Filtering or Access control.
• 🚫 Add unknown MAC address to blacklist (or allow only your devices in whitelist).

Method 2: Change the network name (SSID) and password

• 🔄 Change SSID (Wi-Fi name) and a complex password (at least 12 characters with numbers and special characters).
• 🔄 Also change the password for the router admin panel (by default it is often admin).
• 🔄 Turn it off WPS (vulnerable fast connection protocol).

Method 3: Hiding the network (not recommended)

You can hide the SSID in the router settings (Hide network or Hide SSID). However, this doesn't protect against experienced hackers, but only makes it more difficult for legitimate users to connect. It's best to combine this with other methods.

7. Common mistakes and how to avoid them

When scanning devices on the network, many people make common mistakes that lead to false positives or, conversely, missing real threats. Here's what you can't do it:

Mistake 1: Ignoring Your IoT Gadgets

Smart sockets, light bulbs Philips Hue, columns Google Home often appear online under strange names (for example, espressif or Sonos_1234). Before blocking, check the documentation for your smart devices.

Mistake 2: Trusting device names completely

Hackers can fake a name (for example, call your laptop iPhone-YourName). Always check the MAC address. The first 3 bytes of the MAC are unique to the manufacturer—for example, B8:27:EB always belongs Raspberry Pi.

Mistake 3: Using default passwords

Passwords like 12345678 or qwerty are hacked in seconds. Use password generators (for example, Bitwarden or KeePass) and update your password every 3-6 months.

⚠️ Attention: If unknown devices continue to appear after all these steps, your router may be infected with malware (for example, VPNFilter or Mirai). In this case, the only solution is a full factory reset followed by flashing the firmware.

FAQ: Answers to Frequently Asked Questions

Is it possible to find out who is connected to my Wi-Fi if I'm not the network admin?

No, without access to the router or special rights, you won't be able to get a full list of devices. The most you can see is the devices that are actively exchanging data with your PC/smartphone (via arp -a or apps like Fing).

What should I do if a device with a Chinese MAC address appears on the network?

Don't panic: many gadgets (including Xiaomi, Huawei, TP-Link) are made in China and their MAC starts with prefixes like 78:11:DC (Xiaomi) or 28:6C:07 (TP-Link). Check the address via MAC Vendors.

Can my neighbor connect to my Wi-Fi if I hide the SSID?

Yes. Hiding the SSID does not protect the network - an experienced user can find it by scanning the air (for example, in Wireshark or Kismet). This only makes it more difficult for random people to connect, but does not stop targeted attacks.

How can you tell if a device on your network is a hacker and not a smart light bulb?

Please note:

• 🕒 Connection time (hacker bots are often active at night).
• 📤 Traffic (if the device sends a lot of data to external IPs).
• 🔌 Ports (connections to ports 22, 445, 3389 are suspicious).

Use Wireshark or GlassWire for deep analysis.

Is it legal to disconnect other people's devices from your Wi-Fi?

Yes, if it's your home network. You have the right to manage your network resources. However, disabling devices on public networks (such as hotels and cafes) may be considered a violation of the terms of service.