Who's Connected to My Wi-Fi? How to See Every Device — and Why Most "Unknown" Ones Are Yours

Something made you suspicious. The internet got slower around the same time every evening, or you counted the gadgets in the house and the router said there were more, or you looked at the device list once out of curiosity and found half a dozen entries that meant nothing to you. So now you want a straight answer to a simple question: who is actually on my Wi-Fi?

It is a reasonable thing to want to know, and it is worth knowing how to check. But we should say the most useful part first, because almost nothing you will find written about this says it: an unfamiliar entry in your router's device list is now completely normal, and on its own it is very weak evidence that anybody is stealing anything. That is not us being reassuring for the sake of it — it is a direct consequence of a privacy change every phone maker has made in the last few years. This guide covers how to see the list, how to read it without frightening yourself, and what to do if it turns out somebody genuinely is on your network.

Why your device list stopped making sense

Every device on a network identifies itself with a hardware address — a MAC address. For most of Wi-Fi's history that address was fixed and unique, which is exactly why it was useful for tracking people: a shop, an airport or an advertiser could recognise your phone every time it came within range. So phone makers took that away.

Android has used a randomised MAC address by default since Android 10, and Google's own developer documentation spells out how it works: the phone generates a persistent randomised address from the network's details, so your home Wi-Fi gets one invented address, your office another, and the coffee shop a third — and that address "remains the same until a factory reset." iPhones and iPads do the same thing under the name Private Wi-Fi Address, and Windows 11 has an equivalent random hardware addresses setting. Nobody is hiding from you. They are hiding from everyone else, and your router is caught in the crossfire.

There is a further wrinkle that explains a lot of miscounts, and it is buried where almost no one quotes it. From Android 12 onward, phones can use non-persistent randomisation on some networks — meaning, in Google's words, the Wi-Fi module "re-randomises the MAC address at the start of every connection," with the address regenerated when a DHCP lease expires or once about 24 hours have passed. In plain terms: the same phone can appear in your router's list twice, under two different identities, on two different days. If your device count looks higher than the number of things you own, this is the first thing to suspect — not a stranger.

How to actually see the list

There are three places the list might live, and which one applies to you depends on where your router came from. If you bought the router yourself, you can usually reach it through a browser. On a NETGEAR router, for example, you go to routerlogin.net, sign in, and choose Attached Devices from the BASIC home screen — NETGEAR's own documentation describes the page as splitting wired from wireless devices and showing each one's status, device name, IP address and MAC address. Other brands use different words for the same page: Client List, DHCP Clients, Connected Devices, Device Manager or Network Map.

The second place, and usually the easier one, is the manufacturer's phone app. TP-Link's Tether app has a Clients list; NETGEAR has Nighthawk and Orbi apps with a Device Manager; ASUS, eero, Google Nest Wifi and Linksys all have equivalents. The apps tend to be friendlier than the browser page because they let you rename entries — and renaming is the single most valuable thing you can do here, which we will come back to.

The third case covers most households, and it is the one the generic guides get wrong. If your router came from your internet provider — a Spectrum box, a Cox Panoramic Wifi gateway, an AT&T gateway, a Frontier unit — then typing an address into a browser often gets you a stripped-down page with no device list at all, because the provider expects you to use their app instead. Look for the app that matches your service before you conclude the feature does not exist. On some provider plans the device controls sit behind an optional extra you may or may not be paying for, so if you cannot find them, that is worth a call rather than an hour of hunting.

One thing that trips people up on every platform: you need the router's admin password to get in, which is a different thing from the Wi-Fi password you give guests. If you have never set the admin one, it is usually printed on the sticker on the router. We have written separately about telling those two passwords apart and finding either of them.

Reading the list without scaring yourself

Start by lowering your expectations of the names. A phone that shows up as a string of letters and numbers is behaving exactly as designed, and so is a smart plug that calls itself something like "ESP-2A4F" because the manufacturer never gave it a friendly name. The entries that look most sinister are usually the cheapest gadgets in the house.

The reliable way to work out what something is takes about ten minutes and no software. Write down the mystery entries. Then switch off, or turn the Wi-Fi off on, one device at a time — the TV, the thermostat, the doorbell, the printer, each phone, the tablet nobody uses, the old laptop in the closet, the games console, the speaker in the kitchen, the watch on your wrist. Refresh the router page after each one and watch which entry drops away. Households consistently under-count by a wide margin, because the things that never draw attention to themselves are exactly the things you forget: printers, TVs, streaming sticks, robot vacuums, cameras, smart bulbs and their hubs.

For anything still unidentified, the first half of a MAC address identifies the company that made the network chip, and there are free lookup sites that will translate it. Treat the answer as a hint rather than proof — a randomised address will return nothing useful, and a chip maker's name is not the same as the brand on the box. As you identify each device, rename it in the app right then. Tether and most competing apps let you tap an entry and give it a real name, and doing that once turns a permanently unreadable list into one you can scan in ten seconds next time. It is the difference between checking this in a minute a year from now and starting this whole exercise from scratch.

The signs that actually point to a freeloader

Now the honest version of the thing you came here for. If your Wi-Fi uses WPA2 or WPA3 with a password you chose, a neighbour joining it is genuinely uncommon, because they would have to know the password. The realistic ways it happens are mundane: you gave the password to a house guest, a contractor, a teenager's friend or a former housemate and never changed it; you are still on the default password printed on an old router; or the network has no password at all, which happens more often than you would think on a gateway that was set up in a hurry.

The signs people are usually told to look for are weaker than they sound. A router light that keeps blinking after you turn off your devices does not mean much when a dozen smart-home gadgets are still quietly checking in. A device count higher than your gadget count is explained by re-randomisation and forgotten hardware far more often than by an intruder. Even a slowdown in the evening has a much likelier explanation, which is that everyone in your own house is streaming at once.

What is genuinely worth acting on is a device that stays connected while everything you own is switched off, or one that keeps reappearing after you change the password. That is a real signal. Everything short of it is ambiguous, and the good news is that the fix below is cheap enough that you never have to resolve the ambiguity — you can simply close the door and stop wondering.

Getting someone off: change the password, don't play whack-a-mole

Most routers offer a block or deny button next to each device, and it is tempting to reach for it. It is the weaker option. Blocking works on the address the device is presenting, and as we have covered, that address is invented and can change — a phone that gets a new randomised address simply reappears as a new device that is not on your block list. Worse, the blocking is not always as complete as it looks: TP-Link's own instructions for its block list warn that "on some models, the blocked device can still connect to Wi-Fi but cannot access the Internet."

The same reasoning applies to MAC filtering, the setting that only lets approved addresses join. It sounds like a lock and behaves like a chore. Randomised addresses mean every new phone in the house needs adding by hand, and the address it presents is one the owner can change from their own settings screen in about fifteen seconds. Treat MAC filtering as optional housekeeping for a network you want to keep tidy, not as security.

The real answer is to change the Wi-Fi password. It takes five minutes, it removes every device that is not supposed to be there in one move, and there is no list to maintain afterwards. The cost is that it also removes every device that is supposed to be there, so plan for the reconnecting: phones and laptops are quick, but the printer, the TV, the doorbell, the thermostat and the smart bulbs all need doing too, and some of them are more fiddly than you remember. It is the same job as moving everything to a new router, and it is worth setting aside an evening rather than doing it at eleven at night. While you are in there, change the router's admin password as well if it is still the one from the sticker.

Then close the door properly

Having done the work once, a few settings make it stick. Make sure the network is on WPA2 or WPA3 rather than the long-obsolete WEP or an open network — any router made in the last decade offers this, and if yours genuinely cannot, that is a hardware age problem worth addressing. Pick a password long enough to be awkward to guess and boring enough to write on a card in a drawer.

Then use the guest network, which is the most under-used feature on any home router and the thing that stops this problem recurring. A guest network is a separate Wi-Fi name with its own password that gives visitors internet access without putting them on the same network as your computers, your file shares and your printer. Give that password to the house-sitter, the plumber and your daughter's friends, and when you eventually want to reset it you change one thing and nothing you own goes offline. It is also the right home for smart-home gadgets you do not entirely trust.

Two more worth ten minutes. Update the router's firmware — it is in the same app or admin page, and old router firmware is one of the few genuinely exploitable things on a home network. And if your router still has WPS, the push-button pairing feature, turning it off costs you nothing; many current gateways and mesh systems have already dropped it or ship with it disabled, so its absence is not a fault.

A warning about the apps and the "router support" numbers

Search this problem and the results are a minefield, so it is worth saying plainly what is on the other side of them. A large share of the top results are apps promising to show you who is on your Wi-Fi and kick them off. Some network scanners are legitimate diagnostic tools, but understand the limit: an app on your phone can only scan the network it is joined to, and it cannot remove anyone. Only the router can do that, which is why every one of those apps eventually tells you to change your password — the thing you can do for free in the router page you already have open.

The more expensive trap is the support pages. Router admin addresses like routerlogin.net are served by the router itself rather than by the internet, so when one fails to load — usually because you are on the wrong network — people search for the address instead. We have checked what comes back for these searches before, and the results are heavy with lookalike domains, pages built on free site builders, and "24/7 certified technician" services offering to fix your router for a fee. That is the same operation as the fake security pop-ups we have written about, aimed at someone who is already worried and looking for a phone number.

So: nobody legitimate charges you to look at your own router's device list. If a page wants a credit card, wants to install remote-access software so a technician can "check your network," or produces a support number for a router that is working fine, close it. And be extra sceptical of anyone who contacts you first claiming to have detected an intruder on your Wi-Fi — that is a sales pitch, not a diagnosis.

If the real problem is that your Wi-Fi is slow

It is worth naming the thing that sent most people looking. If the honest reason you started checking the device list is that the internet feels slow, finding a stranger would at least have been a satisfying explanation — but it is rarely the right one. Even a freeloading neighbour typically streams video at a few megabits, which a modern connection barely notices.

Household slowdowns almost always come down to something else: the wrong band, where the router sits, one device quietly uploading a backup, crowded airwaves in an apartment building, or a router old enough that it is the bottleneck. We have a full guide to working through those in order, and if the trouble is one room rather than the whole house, that is a coverage problem rather than a speed one and has a different set of answers.

How we can help

Most of this is a satisfying hour of work: open the list, name everything on it, change the password, set up a guest network, and never have to wonder again. The tedious part is not the router — it is the twenty devices that need reconnecting afterwards, and the two or three that put up a fight.

That is the part we are happy to take off your hands. We set up and secure home and small-business networks across Southern California and the Coachella Valley — auditing what is actually connected, changing keys and admin credentials properly, separating guest and smart-home traffic from the machines that hold your work, and getting every printer, camera and thermostat back on afterwards. If you have a specific reason to think someone has been on your network rather than a vague worry, tell us and we will look at it seriously rather than selling you a subscription for it.