Check your router’s connected devices list
The quickest way to find out who is using your Wi‑Fi is to open your router’s admin interface and view the attached clients list. Every device that is currently connected by Wi‑Fi or Ethernet appears with a name (often the device name or MAC address), private IP, and connection time. Access the interface by typing the router IP address, such as 192.168.0.1 or 192.168.1.1, into a browser and logging in with the admin credentials. If you have not changed the default password, do so immediately after confirming who is on the network.
How to open your router admin page
- Check the router label for the IP address, admin username, and password.
- Connect via Wi‑Fi or Ethernet, then enter the IP in your browser.
- Log in with the admin credentials and navigate to Connected Devices, Device List, or DHCP client list.
Device names can be ambiguous because phones and computers often use friendly names you recognize. The MAC address and private IP are more reliable identifiers.
Use your internet service provider app or portal
Many modern routers provided by your ISP or purchased from major brands include a companion app or web portal that shows connected devices in a simpler, user friendly view. These tools often label devices with recognizable names, show usage over time, and let you pause Wi‑Fi for specific devices. If your ISP offers this feature, sign in to the portal or install the app, then locate the Connected Devices or Network Map section.
What to look for in an ISP device list
- Device name or label (TV, Laptop, Guest).
- MAC address for cross verification with the router list.
- Data usage over the selected time period.
Interpreting device identifiers and cross checking
Once you locate a device, you can determine whether it belongs to someone in your household or an unknown device by cross checking details. A device listed with a name you recognize, such as Johns iPhone or Office PC, is likely authorized. Unknown entries often appear with generic labels like Android_1234, a numeric string, or a partial MAC address. You can verify by noting the MAC address and comparing it with devices you own.
To cross reference, find the MAC address on the back or underside of your owned devices, in Settings > About Phone or Tablet, or on a sticker on the device itself. If the MAC address matches, the device belongs to you or a permitted user. If it does not match any known device, it is likely an unauthorized user or a neighbor piggybacking on your network.
Detect unauthorized devices with network monitoring tools
In addition to built in lists, you can use network monitoring tools to detect devices that appear briefly or intermittently. Simple tools like Wireshark, or open source solutions such as Fing (available on desktop and mobile), scan your network and present devices by MAC address and vendor. These scans can reveal devices that are not actively showing in the router list if they are using advanced privacy features or are only connected for short periods.
Quick tool comparison for device discovery
| Tool or Method | What It Shows | Source Type |
|---|---|---|
| Router admin connected devices list | Current private IPs, MAC addresses, device names, uptime | Primary source |
| ISP app or portal | Recognizable device names, usage over time, pause device option | Convenient interface |
| Network scan tools (e.g., Fing, Wireshark) | Detects both active and briefly appearing devices, vendor information | Supplementary verification |
| DHCP lease logs | Historical connection records, timestamps for each device | Audit trail |
Understand MAC addresses and how they identify devices
The Media Access Control (MAC) address is a unique identifier burned into the network interface of most devices. It remains constant regardless of which network the device joins, making it a dependable way to identify hardware. When a device connects to your Wi‑Fi, it advertises its MAC address to the router, which logs it alongside an assigned private IP. Note that MAC addresses can be spoofed by advanced users, but for most households they are a reliable first check for identifying unknown devices.
Secure your network against unauthorized users
Discovering an unknown device is only the first step. The most effective response is to prevent future access by strengthening your network security. Start by changing the Wi‑Fi password to a strong, unique phrase or a generated passphrase, and update the router admin password from its default. Enable WPA3 encryption if your router supports it; otherwise use WPA2 AES. These steps will kick off unauthorized devices and block most casual attempts to connect.
Concrete steps to secure your Wi‑Fi
- Change the Wi‑Fi password to a strong, complex passphrase.
- Update the router admin username and password from defaults.
- Enable WPA3 or, at minimum, WPA2 AES encryption.
- Hide the SSID only if you can manage the network name carefully, as it is not a strong security measure alone.
- Implement MAC address filtering for an additional layer, but know that MAC addresses can be forged.
- Firmware update: install the latest router firmware to patch known vulnerabilities.
Investigate and remediate persistent or suspicious use
If you notice repeated connections from an unknown device or suspect targeted activity, take further steps. Start by kicking all devices from the router admin interface and changing the Wi‑Fi password immediately. Observe whether the unknown device returns; if it does, continue to the next step. For advanced verification, review DHCP lease logs in the router to see timestamps of when the device connected and whether it used a static or dynamic IP. If necessary, consider temporarily blocking the MAC address and monitoring network activity. Persistent intrusion may indicate a neighbor or a more determined attacker, in which case consulting your ISP or a network security professional is advisable.
Checklist for investigating suspicious use
- Kick all devices and rotate the Wi‑Fi password.
- Check the router logs for MAC address and connection timestamps.
- Compare MAC addresses against your known devices.
- Enable logging in the router to retain historical records.
- Use network monitoring tools to detect brief connections.
- Contact your ISP if you suspect external tampering or line tapping.
Legitimate reasons unknown devices may appear
Not every unknown device represents a security risk. Guests, contractors, or devices belonging to family members in another room may not show recognizable names. Smart home devices, such as thermostats, cameras, or voice assistants, often appear with manufacturer or model names that are initially unfamiliar. If you recently purchased or installed new devices, check their MAC addresses against the hardware. Temporary devices, such as a friend’s phone or a technician’s equipment, may connect only while on your premises, so periodic checks are sufficient rather than continuous alarm.
When to seek professional support
Most households can manage device discovery and network security using the router admin interface, ISP tools, and basic network scan apps. However, if you see repeated unauthorized access after changing passwords, discover evidence of tampering with the router physical settings, or face ongoing connectivity anomalies, consider professional assistance. A network security specialist can perform deeper packet analysis, review firmware integrity, and recommend enterprise grade protections if needed. Your internet service provider can also help verify line integrity and confirm whether unauthorized access points exist on the external side of your modem.