Have you noticed that your smartphone or laptop's internet connection is slower than usual, even though your data plan allows for high speeds? Often, this behavior isn't caused by a provider outage, but by unauthorized users secretly connecting to your wireless network. Neighbors, passersby, or hackers can use your connection to download movies, games, or even engage in illegal activities by masquerading as your IP address.
Fortunately, modern network infrastructure makes it easy to detect uninvited guests using just your smartphone Based on Android or iOS. You don't need to be a system administrator or have a computer at hand. Simply install a specialized app or access the router settings via a browser. In this article, we'll cover all available diagnostic and protection methods in detail.
Ignoring the fact that your network is being used illegally can lead not only to a decrease in speed, but also to the leakage of personal data. The attackerAnyone with access to a local network can theoretically intercept traffic or access shared folders and printers. Therefore, regular monitoring of connected devices is a basic digital security practice that every router owner should practice.
Primary signs of unauthorized access
Before running complex scanners, it's worth paying attention to indirect symptoms that may indicate the presence of "neighbors" on your network. One of the most obvious signs is a sharp drop in internet speed during hours when you're not performing resource-intensive tasks. If 4K video starts buffering and pages load jerkily, this is cause for concern.
Pay attention to the indicators on your router's body. The light WLAN Or the Wi-Fi indicator should blink at a regular interval. If the indicator is constantly on and blinks very rapidly when all your devices are in sleep mode or turned off, this is a sure sign that someone else is actively transmitting data. The router may also be running hotter than usual due to increased processor load.
⚠️ Note: Some modern routers have a "smart" traffic distribution feature that can mask the load. However, if you see strange indicator behavior at 3 a.m. when no one is home, it's worth checking your client list.
Another sign may be the inability to access the router's admin panel. If you try to go to the address 192.168.0.1 or 192.168.1.1, and the page isn't loading, someone may have already changed the administrator password or reached their connection limit, blocking your access. In this case, you may need to perform a full reset of your device to factory settings.
Using mobile apps to scan the network
The fastest and most convenient way to find out who's using your Wi-Fi is to install a dedicated scanner app on your phone. These programs analyze your local network, identifying all active devices, their IP addresses, MAC addresses, and even hardware manufacturers. This allows you to instantly identify unknown devices.
One of the most popular tools is the application Fing, available for Android and iOS. Once launched, it performs a deep scan and produces a detailed report. You'll see not only computers and phones, but also smart light bulbs, TVs, and refrigerators. It's important to be able to distinguish your devices from others by checking the MAC addresses specified in your gadgets' settings.
Other useful utilities such as WiFi Analyzer or Network Scanner, also offer connection monitoring functionality. They often send notifications when a new device appears on the network. This is especially convenient, as you don't need to keep the app open all the time—your phone will automatically notify you of an intrusion.
When using third-party apps, keep privacy in mind. While most only scan your local network, some may request access to your location or other data. Always check the permissions you grant to an app and download software only from official stores. Google Play or App Store.
Checking via the router's web interface
The router itself provides the most accurate and reliable information about connected clients. The device's web interface contains a section displaying all active connections in real time. This method requires no additional software and works on any smartphone with a browser.
First, you need to find out your gateway IP address. On Android, go to Wi-Fi settings, tap your network name, and find the "Gateway" or "Router" field. On iPhone, this information is found in Settings → Wi-Fi → the "i" button next to the network name. Enter this IP address (usually 192.168.0.1 or 192.168.1.1) in the browser's address bar.
After entering your administrator login and password (they are often found on a sticker on the bottom of the router), you need to find the section with the client list. Depending on your router model (TP-Link, ASUS, Keenetic, MikroTik), this section may be called differently: "Client List", "Wireless Statistics", "DHCP Client List" or "Network Map".
In this list, you'll see a table with connected devices. MAC addresses, IP addresses, and sometimes device names are displayed. Compare the number of devices with the actual number of devices you own. If you see extra entries, especially with unknown manufacturer names (such as "Unknown" or strange abbreviations), these are likely the offending devices.
| Router model | Path to the menu | Section title | Blocking capability |
|---|---|---|---|
| TP-Link | Wireless → Wireless Statistics | Client list | Through MAC filtering |
| ASUS | Network Map → Clients | Client list | Direct blocking |
| Keenetic | My Networks and Wi-Fi → Client List | Active clients | Direct blocking |
| D-Link | Wi-Fi → Wi-Fi Client Monitor | Statistics | Through the MAC filter |
☑️ Check via browser
MAC address analysis and device identification
The key identifier of any device on the network is its MAC addressThis is a unique code assigned to the network adapter during manufacturing. It allows you to accurately identify whose phone or laptop is connected to the network, even if the device name is hidden or changed by the user.
A MAC address appears as a set of six pairs of hexadecimal characters separated by a colon or a hyphen (e.g., 00:1A:2B:3C:4D:5E). The first three pairs of characters (OUI) identify the equipment manufacturer. There are special online services and databases that allow you to identify the manufacturer using these first six characters: Apple, Samsung, Xiaomi, Intel etc.
If you see a device named "Android-1234" in the client list, but you don't have an Android smartphone, or a device with the manufacturer "Espressif" (often used in smart plugs and lightbulbs), but you don't have one in your home, this is a clear sign of an intruder. However, be careful: some devices may show up as "Unknown" or have strange names due to their drivers.
⚠️ Note: Modern smartphones (iOS 14+ and Android 10+) use the "MAC Address Randomization" feature by default to enhance privacy. This means the phone may present itself to the router as a random address. To accurately identify your devices, temporarily disable this feature in your phone's Wi-Fi settings or use a static MAC address.
For accurate identification, it's recommended to walk around your home and disable Wi-Fi on each device one by one, observing how the hotspots disappear from the router's client list. Record the MAC addresses associated with your devices to quickly identify anomalies in the future.
Methods for blocking uninvited guests
Once you've identified the intruder, you need to immediately restrict their access. The simplest, but not the most reliable, method is to change your Wi-Fi password. Changing the security key will disable all devices, forcing you to re-enter the new password on your devices. This is guaranteed to kick the "neighbor" off the network if they don't intercept the new key.
A more advanced method is to use MAC filteringYou can create a "White List" in your router settings, which only includes the MAC addresses of your trusted devices. All others, even with the password, will be unable to connect. This is the most reliable security method, although it requires manual configuration when purchasing new equipment.
What should I do if an attacker has changed the administrator password?
If you can't access your router settings because the administrator password has been changed, a hard reset will help. Find the small hole marked "Reset" on the router's case and press it with a paperclip for 10-15 seconds while the router is turned on. This will reset the device to factory settings, and you'll be able to set new passwords.
Some routers allow you to block devices directly from the client list. Simply click the "Block" or "Ban" button next to the suspicious MAC address. The device will remain in the list, but its access to the internet and local network will be blocked. This is convenient if you want to temporarily restrict access without changing the master password.
Remember that an experienced user can spoof (clone) their device's MAC address to match the address of your authorized device. Therefore, a combination of methods—a complex WPA2/WPA3 password and MAC filtering—provides the best results. Also, remember to update your router's firmware to patch security vulnerabilities.
Prevention and strengthening of network security
To avoid the question "how do I find out who's connected to my Wi-Fi?", it's important to follow basic digital hygiene rules. First and foremost, avoid using factory-set passwords and network names (SSIDs). Standard names like "TP-LINK_5A2B" immediately reveal your router model and potential vulnerabilities to hackers.
Use an encryption protocol WPA2-PSK or, if your hardware supports it, WPA3Older WEP and WPA protocols are easily cracked by automated scripts in minutes. It's also recommended to disable the WPS function, as it often contains security holes that allow password recovery using brute-force attacks.
Regularly check the list of connected devices, at least once a month. If you have a lot of smart devices, keep a log of their MAC addresses. This will help you quickly spot the appearance of a new, unfamiliar device. Also, keep an eye on your router's firmware updates—manufacturers frequently release patches to address new threats.
Securing your home network isn't a one-time action, but an ongoing process. Technology evolves, and hacking methods become more sophisticated. However, by following simple rules and using modern security tools, you can minimize the risk of unauthorized access and enjoy fast, stable internet.
Can my neighbor see my files via Wi-Fi?
If your network has file sharing (SMB, FTP) configured and there's no password for folder access, then theoretically, an attacker on the same network could attempt to access shared resources. However, modern operating systems automatically detect a new network as "Public" when connecting, hiding your computer from other devices. The risk is minimal, but using a strong Wi-Fi password completely eliminates this possibility.
Why won't my router let me change my password to a complex one?
Some older router models have password length limitations (for example, only 5 or 8 characters) or don't support special characters. In this case, use the maximum possible length and a combination of letters and numbers. If your router is very old, it may need to be replaced, as it may not support modern encryption standards.
How do I find out my Wi-Fi password if I forgot mine but I'm using my phone?
On Android (with root access) or iOS (if the device is synced with iCloud Keychain and you're using a Mac), you can view saved passwords. On a standard, non-rooted Android device, you can't view the password in plain text, but you can generate a QR code to connect another device in the Wi-Fi settings. You can also reset the password and set a new one through the router's web interface if you remember the administrator password.
Does the number of connected devices affect the speed?
Yes, it does have a direct impact. The bandwidth is divided among all active users. If one person is downloading torrents or watching 4K videos, everyone else may experience speed issues. Furthermore, cheap routers can simply choke under the large number of simultaneous connections, even with light traffic.