How to Find What Is Using Your Bandwidth

Two Layers to Investigate

Bandwidth investigations happen at two layers, and you almost always want to start at the higher one. The network layer — your router — sees every device in the house at once and can tell you which one is responsible. The device layer — Task Manager, Activity Monitor, the data screen on a phone — sees only the machine you are sitting at, but it can tell you exactly which app on that machine is to blame. Find the noisy device from the router, then drill into that device to find the noisy app.

This matters because the slowdown is rarely the computer in front of you. A game console downloading a 90 GB update, a cloud-backup app uploading a year of photos, or a security camera streaming to the cloud will saturate the connection without ever opening a window you would notice.

Step 1: Read Your Router's Traffic Monitor

Most modern routers include a live traffic or "QoS" page that lists every connected device with its current upload and download rate. Log into the admin panel (usually 192.168.1.1 or 192.168.0.1) and look for a section named Traffic Monitor, Bandwidth Monitor, QoS, or Device Manager. Sort by current throughput and the heaviest device rises to the top.

If your router only lists devices by hostname or MAC address and you cannot tell which is which, temporarily turn one suspect device off and watch which entry's traffic drops to zero. That identifies it without guesswork.

Step 2: Drill Into the Device — Per-App Usage

Once you know the culprit device, open the per-app view on that machine to find the responsible process.

# Windows — live per-process network use
Task Manager (Ctrl+Shift+Esc) > Performance tab > Open Resource Monitor > Network tab
# or, total per-app over time:
Settings > Network & internet > Advanced network settings > Data usage

# macOS — live per-process network use
Activity Monitor > Network tab (sort by "Sent Bytes" / "Rcvd Bytes")

# Linux — live per-process bandwidth
sudo nethogs        # per-process up/down rates
sudo iftop          # per-connection live throughput

On phones the data is already grouped by app:

# Android
Settings > Network & internet > Internet > (gear) > App data usage
# also: Settings > Apps > [app] > Mobile data & Wi-Fi

# iPhone / iPad
Settings > Cellular  (per-app cellular totals)
# Wi-Fi per-app is not exposed by iOS — use the router for Wi-Fi attribution

Step 3: Identify the Pattern, Not Just the Peak

A single high number is not always a problem — a one-time 4K download finishes and frees the line. What you are hunting for is a transfer that is sustained and unexpected. The table below maps common signatures to their usual cause.

Step 4: Confirm With a Before-and-After Test

Once you have a suspect, prove it. Run a speed test while the suspected transfer is active and note the result. Pause or stop that app, wait thirty seconds for the buffers to drain, and run the test again. If capacity jumps back up, you have your answer. This before-and-after method is more reliable than staring at a single traffic graph, because it directly demonstrates cause and effect rather than correlation.

If stopping every heavy app still leaves you with a slow result on a wired connection, the bottleneck is no longer local — it is your line or your plan, and the next step is to test the ISP against your own network.

When to Use QoS Instead of Hunting

If the same conflict recurs — a 4K stream stutters whenever a backup runs — you do not have to police it manually. Most routers let you set Quality of Service rules that cap or de-prioritise a specific device or traffic type so real-time apps stay smooth while bulk transfers yield. That converts a recurring investigation into a one-time configuration. Bufferbloat, where bulk downloads add latency to everything else, is a closely related symptom worth ruling out with a dedicated bufferbloat test.

Frequently Asked Questions

Why does my internet slow down even though no one is streaming?

Background transfers are the usual culprit: a cloud backup uploading photos, a console downloading a game update, a PC installing OS updates, or a security camera uploading footage. None of these show an open window, so they are easy to miss. The router traffic monitor is the fastest way to spot which device is responsible, because it sees every device at once.

Can I see what is using bandwidth without router access?

Yes, but only for the single device you are on. Windows Task Manager, macOS Activity Monitor, and the per-app data screens on Android and iOS show per-process usage for that one machine. To see usage across every device on the network at once, you need the router's traffic monitor or a tool that captures from the router.

Does a speed test show what is using my bandwidth?

No. A speed test measures how much capacity is available at the moment you run it. If a background download is saturating the line, the speed test will simply report a low number — it will not tell you which app or device is responsible. Use a traffic monitor to attribute usage, then a speed test to confirm capacity is restored after you stop the offending transfer.

My phone's Wi-Fi usage is not shown anywhere — why?

iOS only breaks down cellular data per app, not Wi-Fi. Android does show per-app Wi-Fi usage under App data usage, but the figure resets on a cycle you set. For an authoritative per-device Wi-Fi number, read it from the router, which counts every byte regardless of which OS the device runs.