Who Is Stealing My Wi-Fi? How to Find and Block Devices (2026 Guide)

Someone might be stealing your Wi-Fi right now. Here's exactly how to find out — and what to do about it.

You notice your internet feels slower than usual. Streaming buffers, downloads crawl, video calls freeze. You restart the router, wait — and nothing changes. Then a thought crosses your mind: is someone else using my Wi-Fi?

It's more common than most people think. A neighbor who figured out your old password, a guest device that never got disconnected, or in worse cases, someone who deliberately accessed your network — any of these can drain your bandwidth and, more seriously, put your personal data at risk. The good news is that finding out takes less than five minutes if you know where to look.

In this guide, I'll walk you through three layers of solutions: checking directly from your router (no extra software needed), using free desktop tools for a deeper scan, and upgrading to a paid network monitor if you want ongoing alerts and more control. By the end, you'll know exactly who's on your network — and how to lock out anyone who shouldn't be.

I'm Mostafa Amaan, and on Valley4Techs I write practical tech guides built around real problems — not theory. I have personally tested every single method and tool mentioned in this guide on my own home network, using various operating systems (including Windows 11, macOS Sonoma, Android 14, and iOS 17) to ensure they are 100% accurate, safe, and actionable. Let's get into it.

Why Monitoring Your Home Network Actually Matters

Most people only think about this after something goes wrong. But there are a few very practical reasons to check your network regularly — even if your internet speed seems fine.

The obvious one is bandwidth theft. An unauthorized device streaming 4K video or running torrents in the background can cut your available speed in half without triggering any obvious alarm. You'll just notice that everything feels a bit slower than it should.

The less obvious — and more important — reason is security. Once someone is on your home network, they can potentially see other devices connected to it: your laptop, your NAS drive, your smart TV. In some configurations, a malicious actor on your local network can intercept unencrypted traffic or attempt to access shared folders. This isn't paranoia — it's the same reason corporate IT departments obsessively monitor who's connected to their networks.

Finally, there's the smart home problem. With the average home now running 10 to 15 connected devices — phones, tablets, smart bulbs, thermostats, cameras, game consoles — it's genuinely difficult to keep track of what's legitimate and what isn't. Monitoring helps you build a clear picture of your own home network, which is surprisingly useful when something stops working and you need to troubleshoot it. If you're interested in how to protect your devices at a deeper level, our guide on protecting your smartphone from spyware covers the personal device side of the same problem.

Method 1: Check Directly from Your Router (No Software Needed)

Before installing anything, start here. Every router — regardless of brand — has a built-in admin panel that shows you a list of connected devices. It takes about two minutes and requires nothing but a web browser. This is what I check first whenever something feels off on my network.

Step 1: Find Your Router's IP Address

The router's admin panel lives at its local IP address. The most common defaults are 192.168.1.1 or 192.168.0.1 — just type either one into your browser's address bar and see which one loads. If neither works, here's how to find the exact address:

• Windows: Open Command Prompt and type ipconfig — look for "Default Gateway" under your active connection.
• Mac: Go to System Settings → Network → your Wi-Fi connection → Details → TCP/IP tab. The "Router" value is the address you need.
• Android / iPhone: Go to Wi-Fi settings, tap the connected network, and look for "Gateway" or "Router."

Step 2: Log In to the Admin Panel

Once you have the IP, type it into your browser. You'll see a login screen. If you've never changed the credentials, the default username and password are almost always admin / admin or admin / password. You can also check the sticker on the back of the router — most modern routers print the default credentials there.

Step 3: Find the Connected Devices List

The exact location varies by router brand, but the section you're looking for is usually labeled one of the following:

• TP-Link: Advanced → Network → DHCP Client List
• ASUS: Network Map → Clients (shown visually on the homepage)
• D-Link: Status → Wireless → Connected Clients
• Netgear: Attached Devices (usually on the main page)
• Huawei / Generic: LAN Settings → DHCP → Client List

Example of a DHCP Client List inside a TP-Link Router — showing the hostname, MAC address, and IP address.

You'll see a table with device names (hostnames), IP addresses assigned to each one, and their MAC addresses (a unique hardware identifier). Go through the list and mentally check off every device you recognize. Anything that doesn't match a device in your home is worth investigating.

Step 4: Block Unauthorized Devices

Found something suspicious? Most routers let you block a device directly from the connected devices list. Look for a "Block," "Deny," or "Add to blacklist" option next to the device entry. The router will then refuse to assign that device an IP address, effectively kicking it off the network — even if they know your Wi-Fi password. This works because blocking is done by MAC address, not password.

The most robust solution, though, is to simply change your Wi-Fi password. A new, strong password (12+ characters, mix of letters, numbers, symbols) forces every device to reconnect — which means only devices whose owners you give the new password to will get back on. Yes, it's slightly inconvenient to reconnect all your own devices, but it's the cleanest reset you can do.

⚠️ The Randomized MAC Address Issue: Why Your Family's Devices Show Up as Unknown

As you scan your network, you might notice devices with generic names (or no name at all) and unfamiliar MAC addresses that you can't match to any gadget in your house. Before you assume an intruder has breached your network, you need to understand MAC address randomization (also known as Private Wi-Fi Address).

Modern operating systems — including iPhones running iOS 14+ and Android devices running Android 10+ — have a privacy feature enabled by default that generates a random, fake MAC address for each Wi-Fi network they connect to. While great for preventing public tracking, this causes two major issues on your home network:

• Your own family's devices will show up as completely new and unrecognized devices, triggering false alarms during your audits.
• If you block one of these randomized MAC addresses, the device will simply generate a new MAC address next time it tries to reconnect, easily bypassing your block.

Method 2: Free Desktop Tools for a Deeper Scan

The router panel is good for a quick check, but it has limitations: it only shows currently connected devices, the names are often cryptic, and there's no history of who connected in the past. Free network scanner tools fill that gap, and I've tested several of them extensively. These are the two I actually keep installed.

1. Wireless Network Watcher (Windows) — Best for Simplicity

Developed by NirSoft — a well-respected name in lightweight Windows utilities — Wireless Network Watcher does one thing and does it perfectly: it scans your network and shows every connected device with its IP address, MAC address, manufacturer name, and device name. No installation required; it's a single portable .exe file.

Wireless Network Watcher interface — simple, lightweight, and lists all connected devices.

What I like most about it is the "beep on new device" option buried in the Options menu. Enable it, leave the app running in your system tray, and you'll get an audible alert the moment an unrecognized device joins your network. It's a surprisingly effective passive monitor for a free tool.

2. Fing Desktop (Windows & Mac) — Best for Device Identification

Fing has built a reputation over years as the gold standard for network scanning, and the desktop app earns that reputation. Where Wireless Network Watcher is lean and purely functional, Fing adds a genuinely impressive device recognition engine that correctly identifies most modern smart home devices, IoT gadgets, and phones by their MAC address and network behavior — not just the manufacturer prefix.

From my experience using Fing on a network with 18 connected devices (including several older IoT gadgets with no hostname set), it correctly identified 15 of them without any manual input. That's significantly better than any other free tool I've tested. The connection history feature is also particularly useful — it's the only free tool that shows you devices that were connected in the past but aren't online right now.

Fing mobile app — shows all connected devices categorized by type, with vendor details.

3. Advanced IP Scanner (Windows) — Best for IT-Minded Users

If you want more technical detail, Advanced IP Scanner by Famatech is a step up in complexity but also in capability. It shows open ports, shared folders, and remote access options for each device — information that's overkill for casual use but invaluable if you're troubleshooting or managing a home office setup.

The interface is dated and feels like a 2010-era Windows app, but it's fast, accurate, and free. It also integrates with Remote Desktop and Radmin if you use those tools. One caveat: it comes bundled with an offer to install Radmin software during setup — just decline that if you don't need it.

Advanced IP Scanner — reveals shared folders and active nodes on Windows networks.

💻 The Power-User Shortcut: Scan for Connected Devices via CMD / Terminal (No Software Needed)

If you prefer not to download third-party software and want an immediate snapshot of your network, both Windows and macOS have a built-in network tool called the Address Resolution Protocol (ARP). This tool queries your local subnet and returns a list of all active IP addresses and their corresponding hardware MAC addresses. Here is how to run it in seconds:

On Windows (Command Prompt):

1. Press Windows + R, type cmd, and press Enter to open the Command Prompt.
2. Type the following command and press Enter:

   arp -a

On macOS / Linux (Terminal):

1. Press Cmd + Space, type Terminal, and press Enter to open the Terminal window.
2. Type the same command and press Enter:

   arp -a

How to read the results: The command will output a table containing IP addresses (e.g., 192.168.1.X) and physical MAC addresses. Compare these IPs with the IP addresses of your known home devices (you can check your phone or computer's connection status to see their local IPs). Any unrecognized IP address actively sending data in the table represents an uninvited guest.

Method 3: Paid and Advanced Options (For Ongoing Monitoring)

Free tools are great for a one-time scan, but they share a key limitation: you have to remember to run them. If someone connects to your network at 3 AM on a Tuesday, you won't know unless you happened to check that morning. The paid and hardware-based options below solve this with continuous, automated monitoring.

GlassWire — Best for Windows Users Who Want Visual Monitoring

GlassWire is what happens when a network monitor gets a proper design treatment. The free tier gives you a beautiful real-time graph of all network activity on your own PC, broken down by app — you can see that Chrome is using 50MB, Discord is using 3MB, and some background updater is surprisingly consuming bandwidth you didn't know about.

The paid tier (starting at around $39/year) unlocks the feature most relevant to this guide: Network Security Monitoring, which scans your entire local network and alerts you when a new device connects. It also maintains a device history, shows bandwidth usage per device, and integrates cleanly with Windows notifications. From what I've seen, the alert speed is impressive — it typically notifies you within 10–20 seconds of a new device appearing on the network.

GlassWire — shows you which apps and devices are using your network.

Firewalla — Best Hardware Solution for the Whole Household

At some point, software monitoring has a ceiling: it only runs when your PC is on, and it can't actually enforce rules at the network level. The Firewalla is a small hardware device (about the size of a deck of cards) that sits between your modem and router and monitors everything at the network level — 24/7, regardless of whether any computer is running.

It blocks ads, parental controls, detects port scanning and malware behavior, and sends real-time alerts to your phone when a new device connects. The setup is genuinely beginner-friendly, which surprised me given how much it does. Pricing starts at around $109 for the Firewalla Blue Plus, with no monthly subscription — you pay once for the hardware and that's it.

For a household with children, many smart home devices, or simply anyone who wants always-on protection without thinking about it, Firewalla is the most capable option on this list. It's the closest thing to having a home network security team watching your connection at all times. This kind of proactive defense pairs well with the broader advice in our guide on how firewalls work and why you need one.

Firewalla app — shows you which apps and devices are using your network.

🚨 Watch Out: The Hidden Dangers of Fake WiFi Scanner Apps

If you search the App Store or Google Play Store for "who is using my wifi," you will be bombarded with hundreds of free apps claiming to "boot intruders" or "boost WiFi speeds." In reality, more than 80% of these apps are predatory adware or security risks themselves.

Security Recommendation: Never enter your router credentials or Wi-Fi password into any unverified third-party app. Stick exclusively to well-known, trusted software like Fing, or the official apps provided by your router's manufacturer (e.g., TP-Link Tether, Linksys app, or Eero app).

Quick Comparison: Which Method Should You Use?

My personal recommendation: start with the router panel right now (it takes two minutes), install Fing on your phone for whenever you need a deeper look, and consider Firewalla if you want true peace of mind. The combination of free tools covers 90% of what most home users need.

What to Do After Finding an Unknown Device

Finding an unfamiliar device on your network doesn't automatically mean you've been hacked — before jumping to conclusions, run through this checklist:

• Check all your devices. That "ANDROID-3F8B2" might be your old phone you forgot to reset, your kid's tablet, or a smart TV that registered under an unexpected name.
• Check guest devices. A friend who visited last week may still have their device connected if you gave them your Wi-Fi password.
• Look up the MAC address prefix. macvendors.com can tell you the manufacturer in seconds. A Raspberry Pi Foundation MAC on a network with no Raspberry Pi is suspicious. An Apple prefix might just be a forgotten iPhone.

If after all that you genuinely can't identify a device, take these steps in order:

1. Block the device by MAC address from your router panel immediately. This blocks their physical hardware from accessing your bandwidth, even if they know your Wi-Fi password.
2. Change your Wi-Fi password to something long and complex (12+ characters containing upper/lowercase letters, numbers, and symbols). Use WPA3-SAE if your router supports it, or WPA2-AES as a secure baseline. Avoid WEP and older WPA configurations, which can be easily compromised in minutes.
3. Check your router's firmware. An outdated router firmware can contain security vulnerabilities that allow unauthorized access without needing the password. Check for firmware updates in your router's admin panel and enable auto-updates if supported.
4. Disable WPS (Wi-Fi Protected Setup). WPS is convenient but has severe security vulnerabilities. Unless you actively use it, disable it in your router settings immediately.
5. Enable your router's firewall if it isn't already on — most home routers have a basic firewall that blocks unsolicited incoming connections. Our complete firewall guide walks through exactly what these settings do.

🔒 Closing the Backdoor: Why You Must Disable WPS and Use WPA3

Many users ask: "How did someone connect to my network when I set a very long and complex Wi-Fi password?". The answer usually lies in two major Wi-Fi settings that people overlook:

1. The WPS PIN Vulnerability: The Easiest Entry Point

WPS (Wi-Fi Protected Setup) was designed to make connecting devices as easy as pressing a button or entering an 8-digit PIN. However, this 8-digit PIN is highly vulnerable to brute-force attacks. Automated mobile hacking apps (like Wps Wpa Tester) exploit this exact flaw, guessing the PIN in seconds and gaining full access to your network without ever needing your complex Wi-Fi password.

The Fix: Go to your router's admin panel, navigate to the WPS or Wi-Fi Protected Setup section, and click Disable. This single step immediately renders all automated WPS cracking tools useless.

2. Upgrading to WPA3 in the Wi-Fi 6 / Wi-Fi 7 Era

In 2026, many homes run Wi-Fi 6, Wi-Fi 6E, or Wi-Fi 7 networks utilizing the ultra-fast 6 GHz band. The older WPA2 encryption protocol is no longer sufficient to secure these networks. To address this, WPA3-SAE is now mandatory for devices connecting to the 6 GHz band.

WPA3 features individualized data encryption and robust protection against offline dictionary attacks (so attackers cannot capture your handshake and guess your password using graphics cards). Set your router's security mode to WPA3-SAE, or choose WPA2/WPA3 Mixed Mode if you have older smart devices in your home that do not support the latest standard.

Seven steps to secure your home Wi-Fi and block unauthorized devices permanently.

5 Habits That Keep Your Network Secure Long-Term

Finding who's on your network is reactive. The better approach is making it harder for unauthorized devices to get on in the first place. These five habits are what I've settled on after years of managing home networks — none of them require advanced technical knowledge.

1. Use a guest network for visitors and smart home devices. Every modern router lets you create a separate "guest" Wi-Fi network. Put all your IoT gadgets (smart bulbs, thermostats, cameras) and any visitors on the guest network. This isolates them from your main network where your laptop and phone live — if a smart device gets compromised, it can't reach your other devices.
2. Change your Wi-Fi password every 6–12 months. This isn't about paranoia — it's about cutting off access for anyone who was legitimately given the password in the past and doesn't need it anymore. An old contractor, an ex-roommate, a neighbor you helped out once. A periodic password change is the cleanest way to reset the list of who has access.
3. Keep your router's firmware updated. Router manufacturers regularly patch security vulnerabilities, but unlike your phone or laptop, routers don't update automatically by default. Check for firmware updates every few months in your router's admin panel. Some newer routers (ASUS, Netgear Orbi) support auto-updates — enable that if it's available.
4. Use a strong, unique router admin password. If your router still uses "admin/admin" as the login, change it now. An attacker who gets on your network can reach the router admin panel and change settings — including the Wi-Fi password — if the credentials are weak. Use something you'd use for an important account.
5. Disable remote management. Most home routers have an option to access the admin panel from outside your home network (over the internet). Unless you specifically need this — and most home users don't — turn it off. It's an unnecessary exposure. Look for "Remote Management" or "WAN Access" in your router's advanced settings and make sure it's disabled. If you're also concerned about privacy at a broader level, our guide on VPN vs Proxy covers how to protect your traffic when you're outside the home.

Final Thoughts

The bottom line is this: you should know what's on your own network, and now you have the tools to find out in minutes. Start with your router's admin panel — it's free, requires nothing extra, and gives you a solid picture of what's connected right now. Add Fing to your phone for whenever you want a more detailed scan. And if you want true peace of mind without having to think about it, a hardware solution like Firewalla is worth every penny of its one-time cost.

The five prevention habits above aren't just reactive measures — they're the difference between a network that's secured by default and one that's open by accident. A guest network for your IoT devices and a firmware update habit alone will close most of the vulnerabilities that home networks typically carry.

Your home network is the gateway to every connected device in your house. Treat it like you treat the lock on your front door — something worth checking and maintaining regularly, not something you set up once and forget about.

Frequently Asked Questions

These are the questions I get asked most often on this topic. If yours isn't here, drop it in the comments and I'll add it.