It's often frustrating when your internet starts to slow down or become intermittent. You check the speed, reboot your equipment, but the problem persists. At this point, few people consider the possibility of an uninvited guest on your network. Neighbors or random passersby could have brute-forced your password or connected via WPS, gaining access to your traffic and personal data.
Checking the list of connected clients is the first step to take if you suspect a hack. Modern routers allow you to see all active devices in real time, identifying them by IP and MAC addresses. Understanding How to see who is connected to WiFi, will give you complete control over your home network and allow you to instantly respond to intrusions.
In this article, we'll take a detailed look at methods for detecting unauthorized devices, using both built-in router features and specialized software. You'll learn not only how to find intruders but also how to properly configure security to prevent unauthorized users from reconnecting to your infrastructure.
Symptoms of unauthorized network access
The first sign that someone else has connected to your WiFi is a sharp drop in internet speed. If in the evening, when everyone else is asleep, the router's activity lights continue to flash wildly, this is cause for concern. Traffic It is spent not only on loading pages, but also on background processes that can be launched by other devices.
Another warning sign is the inability to connect to your own network. If your router reports that the maximum number of clients has been exceeded, even though you only have a couple of devices connected, it means someone else has reached the limit. Some devices may spontaneously reboot or freeze under the load created by neighbors downloading torrents.
⚠️ Attention: If you notice that the WAN indicator is constantly bright, even when you're not downloading anything, check your client list immediately. This may indicate that someone is actively transferring large amounts of data.
It's also worth paying attention to the behavior of your antivirus or firewall. Increased alerts about network attacks or port scans may indicate a device conducting reconnaissance on the local network. Security The security of your data directly depends on who has access to the internal network.
Checking connected devices via the router's web interface
The most reliable way to find out who is connected to your WiFi is to access the router's settings. To do this, you need to enter the gateway IP address (usually 192.168.0.1 or 192.168.1.1) in the browser's address bar. After entering the administrator login and password, you will gain full access to network management.
Interfaces vary by manufacturer, but the logic for finding clients is the same. Find a section called "Client List," "DHCP Server," "Wireless Statistics," or "Network Map." This is where you'll find a table of all the devices currently receiving an IP address from your router.
☑️ Web interface verification algorithm
In this list, you'll see MAC addresses and possibly device names. If you see an unfamiliar name, such as Xiaomi-TVIf you don't have such a TV, or the network card manufacturer is unknown, this is a clear sign of intrusion. Some routers, for example, TP-Link or Keenetic, allow you to block the device or change its access speed directly from this menu.
⚠️ Attention: Router interfaces are frequently updated. If you can't find the menu item you need, check the official instructions on the manufacturer's website for your model, as the location of the settings may change.
Using mobile apps to scan the network
If you don't have a computer at hand, you can check the network using your smartphone. There are many apps for Android And iOS, which scan the local network and provide detailed information about all connected devices. One of the most popular and functional tools is Fing.
After installing the app and connecting to your WiFi network, run a scan. The program will display a list of all devices, their IP addresses, network card manufacturers, and even operating systems. This allows you to quickly identify whether a Smart TV device is a television or, for example, a security camera.
The advantage of mobile apps is their simplicity and clarity. They often use MAC address databases to display brand logos (Apple, Samsung, Huawei), making it easier to find the intruder. You can click on a device and see open ports or running services, which is useful for advanced users.
Device List Analysis: How to Distinguish Your Gadgets from Others
The most difficult part of the process is identifying which devices are rogue. In the router's client list, devices often appear as "Unknown" or simply as a string of numbers and letters. To conduct an effective audit, you need to compile a list of all your devices in advance.
The table below provides examples of how devices may be displayed and what to look for when analyzing:
| Device type | Approximate name / Manufacturer | What to look out for |
|---|---|---|
| Smartphone | iPhone, Samsung, Android-xxx | Number of phones in the family |
| Laptop/PC | Realtek, Intel, Windows-PC | Work and personal computers |
| Smart technology | Tuya, Xiaomi, Philips | Light bulbs, sockets, vacuum cleaners |
| Game consoles | Sony, Microsoft, Nintendo | Set-top boxes are rarely connected |
Start by disabling WiFi on all your devices one by one. When only one active device remains in the list, you'll know which MAC address belongs to which device. Write down the addresses of all your devices in a notepad. Any device that appears in the list while your devices are disabled is guaranteed to be someone else's.
Pay attention to the last connection time. Some routers display the IP address lease time. If the device was online late at night, when everyone was asleep, this is a serious cause for concern. Monitoring activity helps to identify hidden connections.
Methods for blocking uninvited guests
Once you've identified the intruder by their MAC address, you need to immediately restrict their access. The most effective method is MAC filtering. In your router settings, find the "Security" or "Wireless MAC Filtering" section and add the intruder's device to the blacklist (Deny/Block).
An alternative, but more radical, method is to change your WiFi password. If you change the security key, all devices will be disconnected, and only those with the new password will be able to reconnect. This is guaranteed to kick out all "pirates," even if they used sophisticated hacking methods.
What happens if you don't block a stranger?
Constant traffic theft will result in unnecessary charges for gigabytes. Furthermore, while on the same network, an attacker could attempt to access your shared folders, printer, or even intercept website passwords if the connection isn't secured with HTTPS.
Some modern routers allow you not only to block but also to limit the speed for specific clients. You can set a 10 Kbps limit for an unknown device, which will prevent it from using the internet but leave it on your watch list if you want to track the signal source.
⚠️ Attention: Be careful when enabling MAC address filtering. Make sure you whitelist your devices (Allow) if you enable this feature, otherwise you may block yourself.
Setting up reliable WiFi network security
To never be bothered by the question "Who's connected to my WiFi?" again, you need to set up security correctly. First and foremost, abandon the outdated WEP and even WPA encryption standards. The only relevant standard at the moment is WPA2-PSK or its new version WPA3.
Your password should be complex: at least 12 characters long, containing uppercase and lowercase letters, numbers, and special characters. Avoid using simple words, birthdays, or sequences like "12345678." Your password is your network's first and primary line of defense.
The second important step is to disable the WPS function. This technology allows you to connect to WiFi by pressing a button or entering a PIN code, but it is extremely vulnerable to brute-force attacks. In the wireless network settings, find the WPS option and set it to Disable or Off.
It's also recommended to disable remote management on your router unless you specifically use it. This will prevent access to your equipment settings from outside the network, protecting you from hackers who might scan the internet for vulnerable routers.
Frequently Asked Questions (FAQ)
Can my neighbor steal my internet if I changed my password?
If you've changed your password to a strong one and updated your router's firmware, your neighbor will be blocked from accessing your router. However, if you still have WPS enabled, it's theoretically possible to brute-force your PIN, although this is more difficult on modern routers. The best defense is a full reset and a new configuration.
Can a connected neighbor see my files on my computer?
By default, Windows blocks access to shared folders in "Public Network" profiles. However, if you have a HomeGroup configured or files are shared, theoretically, an attacker on the local network could attempt to access them. It's recommended to check your sharing settings.
Will having someone else's device slow down my internet speed?
Yes, the WiFi channel is shared between all connected clients. If your neighbor starts downloading large files or watching 4K videos, your speed will definitely drop, and your gaming ping will increase, as the radio channel will be busy.
How do I find out my phone's MAC address for comparison?
On Android, this can be found in the section Settings → About phone → General information or in the WiFi settings. On iPhone: Settings → General → AboutThe address will look like a set of characters separated by colons, for example, A1:B2:C3:D4:E5:F6.