Many users are familiar with the sudden drop in internet speed, the router overheating, or the lights flashing wildly. Often, this trivial inconvenience isn't caused by hardware failure or provider issues, but by a third-party device connected to your network without your knowledge. Neighbors parked near your window or residents upstairs may have cracked your password and are now using your bandwidth for their own purposes, whether watching 4K movies or downloading large files.
You can determine who exactly is using your access point yourself, even without advanced cybersecurity knowledge. Modern routers and specialized software allow you to see a list of all active clients in real time. The key is to act quickly and consistently to not only identify the intruder but also close the loophole they used to gain access to the system.
In this article, we'll cover a detailed algorithm of actions: from visual diagnostics to in-depth security configuration. routerYou'll learn how to distinguish your smartphone from someone else's laptop, what tools to use for scanning, and how to permanently block the intruder. Ignoring this issue can lead not only to a loss of speed but also to the theft of personal data stored on your devices on the local network.
Signs of unauthorized network access
The first warning sign is usually abnormal network behavior. If you're used to a certain loading speed, but now pages are loading slowly, or videos are constantly buffering, it's time to check. However, don't rush to blame your ISP: often the problem stems from overloading the channel with unrelated subscribers. This is especially noticeable in the evening, when network load is at its highest.
Pay attention to the router's indicators. Light WLAN or Wi-Fi, which flashes at a frantic rate even when all your devices are off or in sleep mode, indicates high data transfer activity. This could mean someone is actively downloading torrents or updating games over your connection. A flashing indicator is also a warning sign. Internet when there are no active tasks on your gadgets.
There are also software indicators that are easy to spot if you pay close attention to your equipment. For example, your antivirus software might suddenly report an unauthorized access attempt from the local network, or you might see an unknown device in the list of available printers. Sometimes, the operating system might warn you of an IP address conflict, which occurs when two devices on the same network attempt to use the same identifier.
⚠️ Warning: If you notice that your router settings have changed on their own (the administrator password has been changed, the firewall has been disabled), this is a sign that an attacker has gained full control of the device. In this case, you will need to perform a full reset using the button.
Reset.
Don't ignore any strange behavior on your own devices. If your smartphone or laptop starts draining faster than usual due to constant network activity, or if your computer's fans start making noise without any apparent load, check your network traffic. Background activity This could be caused by an outsider using your channel for mining or sending spam, loading your devices.
How to check the list of connected devices via a router
The most reliable way to find out who's connected to your Wi-Fi is to access your router's control panel. To do this, open any browser on a device connected to the network and enter the gateway's IP address in the address bar. This is most often 192.168.0.1 or 192.168.1.1, however, the exact address can be found on the sticker on the bottom of the device or in its documentation.
After entering the address, the system will ask for your login and password. If you have never changed this information, it is also indicated on the factory sticker (often this is admin/admin). Once in the menu, look for a section with names like Wireless, Wi-Fi, Status or Client list (Client List). This is where you'll see a table of all devices currently accessing the internet through your router.
What should I do if my router password doesn't work?
If the default password doesn't work and you haven't changed it, someone else may have changed it. In this case, a hard reset is the only solution. Find the small hole marked "Reset" on the router's case and press it with a paperclip for 10-15 seconds while the router is turned on. The device will reset to factory settings, and you'll be able to log in using the credentials on the sticker.
In the client list, you'll see MAC addresses and sometimes device names. To figure out who's who, turn off Wi-Fi on all your devices one by one and watch which line disappears from the list. The remaining "ghosts" are those connected without your permission. Write down their MAC addresses; you'll need them to block them.
Modern routers from brands such as Keenetic, TP-Link or Asus, have convenient mobile apps that display a list of clients graphically. This makes things much easier: you immediately see an icon for your phone, laptop, or TV. If you see a device labeled "Unknown" or a name that clearly doesn't match your device (for example, "Android-5" when you only have an iPhone), this is cause for concern.
Using specialized scanning software
If you find accessing your router settings complicated or want more detailed technical information, you can use third-party utilities. Network scanning programs can display not only a list of devices but also open ports, the operating system of the connected device, and signal strength. This helps more accurately identify the intruder.
One of the most popular and simple utilities is Wireless Network Watcher from NirSoft. It requires no installation, works instantly, and lists all active IP and MAC addresses on your subnet. The program automatically highlights new devices added to the network, making it ideal for real-time monitoring. You can export a report and compare the list with your own devices.
For smartphone users, there are great apps such as Fing or Network ScannerThey allow you to conduct a deep network analysis directly from your phone. FingFor example, it can identify a device's manufacturer by its MAC address (e.g., Samsung, Apple, Intel), which helps determine whether a neighbor is using a laptop or a smartphone. The app also shows the time the device was last seen online.
Using these tools provides a more complete picture than the standard router interface. You can see how strong the signal is from another device. If the signal is at its maximum, the intruder is very close, perhaps even in your apartment or the next room. If the signal is weak, the source of interference is far away, outside your home.
Methods for blocking uninvited guests
Once you've found the MAC address of someone else's device, you need to block it. The most effective method is to use MAC filteringIn your router settings (Wireless MAC Filtering section), add the intruder's MAC address to the blacklist (Deny/Block). Once the settings are applied, this device will no longer be able to connect to your network, even if it knows the password.
A more drastic, but often necessary, step is to completely change your Wi-Fi password. Changing the security key will disable all your devices, and you'll have to re-enter the new password on your devices. Make sure the new password is complex: use a combination of uppercase and lowercase letters, numbers, and special characters, at least 12 characters long. Avoid obvious combinations like your date of birth or phone number.
☑️ Action plan in case of hacking
Some users try to use the "Hide SSID" feature, believing it will make the network invisible. However, experienced hackers can easily find hidden networks, and for regular users, this creates unnecessary inconvenience when connecting new devices. It's much more effective to disable the feature. WPS in the router settings, as it is often a vulnerability that allows automatic programs to guess the password.
⚠️ Important: After changing your password or setting filters, be sure to save your changes by clicking "Save" or "Apply." Some routers may require a reboot for the settings to take effect. Do not unplug the router while saving the configuration.
If you discover that an attacker has changed your router's administrator password, the only way out is to reset it. Find the button Reset (often recessed into the case), press it with a paperclip for 10-15 seconds. The router will return to factory settings, and you can set it up again, setting up reliable security from the start.
Setting up maximum Wi-Fi network security
To avoid the "who hacked my Wi-Fi" problem in the future, you need to configure your router correctly. First, make sure you've selected the most modern and secure encryption protocol. In the wireless network section (Wireless Security) select the mode WPA2-PSK or, if the equipment supports it, WPA3Protocols WEP And WPA are considered obsolete and can be hacked in minutes.
Regularly updating your router's firmware is an important security measure. Manufacturers release updates that patch security holes. Check your firmware version in the section System Tools or Administration If a new version is available, update. This can be done automatically through the interface or manually by downloading the file from the manufacturer's official website.
It's also worth limiting the number of connected devices, if your router has this feature, or setting up a guest network for visitors. Guest mode isolates guests from your main local network, where important files may be stored on a NAS or shared printers. This creates an additional layer of security.
Don't forget about physical security. If the router is located in an accessible location (for example, in an office or on the ground floor of a private home with windows), an attacker could simply press the reset button. In such cases, it makes sense to disable the reset option via software interfaces or restrict physical access to trusted individuals.
Table: Comparison of Wi-Fi security protocols
Understanding the differences between encryption protocols will help you choose the right settings. Below is a comparison of the main security standards found in router settings.
| Protocol | Security | Speed of work | Recommendation |
|---|---|---|---|
| WEP | Critically low | Low | Do not use |
| WPA (TKIP) | Low | Average | Replace with WPA2 |
| WPA2 (AES) | High | High | Recommended |
| WPA3 | Maximum | Maximum | Use if supported |
As can be seen from the table, the use WEP or old WPA makes your network an open book for anyone with a minimal set of tools. Switching to WPA2/WPA3 with encryption AES - This is the basic minimum that should be installed on any modern router.
Frequently Asked Questions (FAQ)
Can my neighbor see my personal photos and files if he is connected to Wi-Fi?
Unless a shared folder or network attached storage (NAS) is configured on your network, they won't be able to directly access files on your phone or computer. However, using traffic sniffers, an attacker could theoretically intercept unencrypted data you transmit over the network. Therefore, it's important to use HTTPS websites and avoid transmitting sensitive information over open channels.
Why won't my router let me change my password to a complex one?
Some older router models have password length or character set restrictions. If the system doesn't accept the password, try using only letters and numbers, avoiding special characters. Also, make sure you don't use spaces at the beginning or end of the password.
Will changing the Wi-Fi password reset my router?
No, changing your wireless network password does not affect other settings (ISP connection type, IPTV, etc.). However, all previously connected devices will lose connection and will require a new password to reconnect.
How can I find out who is connected if I don't know the router password?
If you don't know the password for the admin panel, try the default combinations (admin/admin) provided in the instructions. If they have been changed and you don't know them, only a hard reset using the button will help. Reset, after which the router will need to be reconfigured with the data from the provider.
Does the number of connected devices affect internet speed?
Yes, the bandwidth is shared among all active users. If one connected device starts downloading a large file or watching a high-definition video, the speed on the other devices will inevitably drop, as the bandwidth is limited by the provider's plan.