The internet feels slower than usual, and the first suspicion is usually the same: someone is piggybacking on the Wi-Fi.

Checking isn't difficult and needs no app at all. What confuses people is reading the result — because the list that appears almost never names a person.

Opening the device list

The most trustworthy source is the router itself. It sees every connected device, including the idle ones.

Open the router's settings page

Through a browser at 192.168.1.1 or 192.168.0.1. The default address and password are usually printed on a sticker on the router's body.

Find the device list menu

Names vary: Connected Devices, Client List, DHCP Client, or Attached Devices. Some brands put it on the front page.

Note what's there

What matters: the total count, the device names, and each MAC address. A MAC address is six pairs of letters and numbers, and it's the most reliable identifier available.

If your router has an official phone app, the list is usually easier to read there — some even show how much data each device has used.

Why the list is confusing

This is where most people stop and draw the wrong conclusion. The list rarely reads like "Andi's phone". What appears more often are entries like android-4f2a91, ESP-8266-1A2B, or an empty column.

There are two reasons, and both are normal:

Modern phones disguise their identity. Android and iOS from the last few years use a randomised MAC address that differs per network, and some rotate it periodically. The feature exists to prevent tracking across locations, and its side effect is that one phone can appear several times as different devices.

Smart devices use factory names. Smart plugs, bulbs, cameras, and televisions rarely state their function. What shows up is usually the name of the chip maker inside, not the brand printed on the box.

Count before you suspect

Before concluding there's an intruder, count your own devices. The number is almost always higher than expected.

GroupCommonly forgotten
Per personPhone, laptop, watch, earbuds
EntertainmentSmart TV, set-top box, console, speakers
Smart homePlugs, bulbs, cameras, robot vacuum, air conditioning
MiscellaneousPrinter, scales, an old tablet sitting idle

A household of four easily reaches fifteen to twenty active devices with no outsiders at all. If your list shows that figure, there's most likely nothing to worry about.

Working out which ones are yours

The most convincing method is elimination. It takes about ten minutes, and the result lasts a long time.

  1. Note the MAC address of each of your devices. On Android: Settings › About phone › Status. On iPhone: Settings › General › About › Wi-Fi Address. On Windows: run ipconfig /all and look for Physical Address.
  2. Match them against the router's list. Give them recognisable names if your router allows it — this saves a lot of time later.
  3. Turn off Wi-Fi on one device, reload the list, and see which entry disappears. This resolves devices using randomised addresses.
  4. Whatever remains genuinely unidentified once everything else is matched is what deserves attention.

Look at the first three pairs of the MAC address. That portion identifies the manufacturer and can be looked up in public registries. It frequently reveals that the device you suspected is your own television or printer.

Slow Wi-Fi isn't proof of an intruder

Worth setting straight, because the order of suspicion is often reversed. Wi-Fi slowing down is far more often caused by something other than an outsider:

  • Channels competing with neighbouring networks in a dense area
  • Devices clinging to the 2.4 GHz band when 5 GHz is available
  • Background downloads or automatic updates running unnoticed
  • Provider network congestion at certain hours

The full order of checks is in the guide to fixing slow Wi-Fi, and if the signal is full but it's still slow, the explanation is in the guide to full signal but slow internet.

If someone really is piggybacking

Once all your devices are matched and something still remains, one step resolves everything at once:

Change the Wi-Fi password, and make sure encryption is WPA3 or WPA2-AES. This disconnects every unauthorised device in a single move. The steps are in the guide to changing your Wi-Fi password, and the differences between encryption types in the guide to WPA2 vs WPA3.

A few things worth doing at the same time:

  • Turn off WPS. That quick-connect button is one of the most frequently exploited ways in.
  • Change the router's admin password, not just the Wi-Fi password. They're different, and the second is often left at the factory default — the guide to securing a home router.
  • Create a guest network for visitors and smart devices, so the main password never needs sharing again.

Blocking devices one by one by address sounds more targeted, but is less effective — that address can be changed in seconds. The trade-offs are discussed in the guide to blocking Wi-Fi users.

Making it a habit

Checking the device list once a month is enough for an ordinary home. What makes it useful is the naming step above: once all your devices are recognisable, a new entry stands out immediately without retracing everything from scratch.

Other signs worth watching for — beyond simply the device count — are covered in the guide to signs your Wi-Fi has been compromised.

Frequently asked questions

Where do I find the list of connected devices?

On the router's settings page, under a menu called Connected Devices, Client List, DHCP Client, or Attached Devices depending on the brand. Some brands also show it in their phone app, where it's usually easier to read.

Why are there so many device names I don't recognise?

Mostly because modern phones disguise their identity with randomised addresses for privacy, and because smart devices use factory names that say nothing about their function. A count that feels excessive is usually still all yours.

Does a high device count mean someone is stealing my Wi-Fi?

Not necessarily. One person typically carries two or three devices, and a home with smart devices easily reaches a dozen or more with no outsiders at all. Counting your own first is far more useful than jumping to suspicion.

What should I do if there really is an unknown device?

Change the Wi-Fi password and use WPA3 or WPA2-AES. That disconnects every unauthorised device at once, and is far more effective than blocking them one by one by address.