How to find the MAC address of a Wi-Fi access point and connected devices

Identifying devices on a local network is a fundamental process that every home or office network administrator faces. It's often necessary to determine exactly what equipment is connected to your network. Wi-Fi router, or you need to filter access for unauthorized devices. This identification is based on a unique physical address known as a MAC address. Understanding how to find and interpret it is a key skill for securing your wireless network.

There are many situations where knowing this address becomes critical. This could be setting up MAC address filtering, diagnosing IP address conflicts, or simply the curiosity of a network owner who wants to see a list of all "guests." Regardless of whether you're using equipment from Keenetic, MikroTik or standard solutions from providers, the search principles remain similar, although the interfaces may differ.

In this article, we'll take a detailed look at all possible methods for obtaining this information: from looking at a sticker under the device's casing to using specialized commands in operating systems. We'll examine the difference between the router's address and the addresses of connected clients, and why they shouldn't be confused. We'll also explore the nuances of modern security protocols that can obscure real values.

What is a MAC address and why is it needed in a Wi-Fi network?

MAC address A Media Access Control Address (MAC) is a unique identifier assigned to a network interface during manufacturing. Unlike an IP address, which can change dynamically with each connection, the physical address is hardcoded into the hardware and theoretically shouldn't change. This code allows the access point to distinguish between your smartphone, laptop, and smart speaker, even if they are connected simultaneously.

In the context of Wi-Fi networks, this identifier acts as a digital pass. When you set up White List By using a whitelist on a router, you're essentially telling the device, "Allow only those whose IDs are listed in this table." This is a basic level of protection, but it shouldn't be considered a complete panacea against hacking, as the address can be spoofed (cloned).

⚠️ Note: MAC addressing operates at the data link layer of the OSI model. This means that the router sees this address only within its local network. Websites on the internet see your IP address, but not the physical address of your network card.

It's important to understand the difference between the WAN port address (which is visible to the ISP) and the LAN/WLAN interface address. To configure filtering within a home network, we're interested in the latter. Wireless MAC or LAN interface address. Confusion between these concepts often leads to users entering the wrong numbers into filters, and the device still cannot access the network.

Finding the address on the sticker and router body

The easiest and most reliable way to find out the factory MAC address of an access point is to look at the bottom of the device's case. Almost all manufacturers, whether TP-Link, Asus or Zyxel, they place an information sticker there. It usually contains the serial number, the default Wi-Fi password, and the code itself, often designated as MAC or MAC ID.

The format of the entry is standard: six pairs of hexadecimal digits separated by a colon or a hyphen (for example, 00:1A:2B:3C:4D:5E). The first three pairs of characters are the OUI (Organizationally Unique Identifier), which identifies the equipment manufacturer. These characters allow you to accurately identify the vendor, which is useful for network inventory.

However, physical wear and tear should be taken into account. Over time, stickers may fade, wear off, or become covered with warranty seals. In such cases, relying solely on the case is not recommended. Furthermore, if the router has been reflashed with third-party software (for example, OpenWrt or DD-WRT), the program address may differ from the printed one, although this is rare and requires specific skills.

Some modern models, especially compact "travel routers," may not have a sticker on the case due to their minimalist design. In these cases, manufacturers often include a QR code that, when scanned with a smartphone, accesses the quick setup page, which also displays the device's unique ID.

Finding the MAC address via the router's web interface

The most informative source of data is the router's administrative panel. Accessing it through a browser gives you full control over the network. The address is usually located on the main status page (Status or Dashboard) or in the network settings section (Network -> LAN). It is indicated there. WAN MAC address (to connect to the provider) and LAN/WLAN MAC address (for internal network).

If your goal is to find out the addresses of connected clients, you need to go to the section that may be called Client List, DHCP Client List or Wireless StatisticsThis list displays all devices currently connected to your access point. You'll see not only the IP addresses but also the physical IDs of each device.

Interfaces vary greatly between manufacturers. MikroTik this will be a section IP -> DHCP Server -> Leases, at Keenetic - the "Client List" tab on the main page, and TP-Link - chapter Wireless -> Wireless StatisticsIt's important to be able to navigate these menus, as this is where access control occurs.

⚠️ Note: Web panel interfaces may be updated by the manufacturer. If you can't find a menu item, search for similar names or use the settings search if it's available in the new firmware version.

Particular attention should be paid to MAC address cloning. Some providers lock subscribers to specific equipment. If you change your router, your internet may stop working. In this case, in the WAN settings section (Network -> WAN) need to find a function MAC Address Clone and copy the address of the old device or registered network card there.

Using the Windows and macOS command line

For users who prefer working with the command line, operating systems provide powerful tools. In Windows, you need to open the Command Prompt (CMD) or PowerShell. To do this, click Win + R, enter cmd and press Enter. The basic command to view all network information is ipconfig /all.

ipconfig /all

In the output of this command, you need to find your active adapter (Wireless or Ethernet). Line Physical address (Physical Address) is the MAC address you're looking for. However, this command will only show your computer's address. To see the addresses of other devices on the network, you can use the command arp -a, which will display a table of IP and MAC addresses of all devices your PC has recently communicated with.

In macOS, the logic is similar, but the commands are different. Open Terminal and enter the command ifconfigIt will provide detailed information about all interfaces. Look for the section en0 (usually it's Wi-Fi) and a line etherTo obtain the ARP table in macOS, the command is also used. arp -a.

The Secret of the ARP Team

The ARP (Address Resolution Protocol) table is stored in the operating system cache. If a device hasn't been online for a while, it may not be listed. To update the list, you can try pinging the entire address range, but this requires a more in-depth understanding of networks.

It's worth noting that the command line provides raw data. Unlike the router's attractive web interface, you need to carefully read the output to avoid confusing virtual adapters (for example, VirtualBox Host-Only or Hamachi) with a real physical Wi-Fi module.

Viewing information on Android and iOS devices

Mobile devices also allow you to find out your own MAC address, although OS manufacturers are constantly complicating this process for privacy reasons. On Android, the usual route is Settings -> About the phone -> Status or General information. Depending on the Android version and shell (MIUI, OneUI, ColorOS), the path may vary.

In modern versions of Android (starting with 10) and iOS, the "Private Wi-Fi Address" feature is enabled by default. This means the phone generates a random MAC address for each network to prevent tracking companies from tracking the user's movements. Therefore, the address you see in your router may differ from the factory address printed on the smartphone box.

• 📱 Android: Settings -> Connections -> Wi-Fi -> Click the network gear -> View MAC address.
• 🍏 iOS: Settings -> General -> About -> Wi-Fi Address (this is the real address), but the specific network settings may show "Private Address".
• 🔒 Important: To filter by MAC address in a router, you need to use the address that the device is currently using (private), and not the factory one.

If you need to know MAC addresses others devices on the same Wi-Fi network; it's more difficult to do this from a phone without root access. There are network scanner apps (for example, Fing or Network Scanner), which can show a list of all devices on the network and their physical addresses, working similarly to the command arp on the computer.

Table: Comparison of MAC address acquisition methods

For convenience, we'll categorize the methods discussed. The method you choose depends on your current situation: whether you have physical access to the device, whether it's turned on, and what level of access rights you have.

As the table shows, the router's web interface is the most versatile tool for an administrator. It provides a complete picture of what's happening on the network in real time. However, if the router is unavailable (for example, because the password has been forgotten or it's frozen), physical methods or commands on client PCs become the only options.

Privacy issues and address randomization

Modern privacy protection technologies are making their own adjustments. As mentioned earlier, smartphones and laptops running Windows 10/11 can use randomized MAC addresses. This creates problems for administrators using strict filtering. A device can be disconnected from the network simply by rebooting or moving out of range, as the next time it connects, it will present a new identity to the router.

MAC address randomization is a feature of the client's operating system, not the router's, so you need to disable it on your phone or laptop if you want the device to always have a fixed address on your network.

For corporate networks or smart homes (where light bulbs and outlets require a static address for stable operation), it's recommended to disable private addresses for trusted networks. This can be done in the Wi-Fi settings for a specific network on the device: instead of "Random address," select "Use device MAC address."

In addition, there are programs for changing the MAC address on a PC (for example, Technitium MAC Address Changer). They allow you to temporarily assign any ID to a network card. This is useful for testing security systems or bypassing simple ISP restrictions, but can confuse the user when troubleshooting a network.

Frequently Asked Questions (FAQ)

Is it possible to change the MAC address of a router permanently?

The factory MAC address is hardcoded into the device's memory and cannot be physically changed without reflashing the chip, which is difficult and risky. However, any address can be set programmatically in the WAN settings for ISP authentication (cloning). This feature is not available on all router models for LAN/WLAN interfaces.

Why is the device called "Unknown" in the router's client list?

This occurs when the router cannot identify the manufacturer from the first three bytes of the MAC address (OUI) or when the device hides its hostname. This often happens to smart home devices or gadgets with the SSID and hostname hiding feature enabled.

Is it safe to use MAC address filtering?

This provides a basic level of protection from random neighbors, but won't protect against a skilled hacker who can eavesdrop on your broadcast, see the authorized address, and clone it onto their device. Always use a strong WPA2/WPA3 password in addition to filtering.

What should I do if the MAC address on my router and the one on the sticker don't match?

You're most likely looking at the WAN address in the interface, but the sticker says LAN/WLAN. Either the router has been flashed, or the address was manually changed by the previous owner. For an internal network, use the information in the web interface.