Signs Someone Is Using Your Wi-Fi
- Speeds drop at random times, especially evenings and weekends
- Router activity lights blink even when all your devices are off or sleeping
- Your monthly data usage (on a capped plan) grows without explanation
- Video calls or games randomly stutter when the rest of the household isn't active
- Unknown device names appear in your router's connected-devices list
Any one of these alone isn't proof. Together, they're strong circumstantial evidence. The definitive test is your router's admin page.
Step 1: Open Your Router's Connected Devices List
Sign in to your router's admin page. The device list is usually under Attached Devices, DHCP Clients, Connected Devices, or Network Map. You'll see a list with device names, MAC addresses, and IP addresses.
| Router brand | Where to look |
|---|---|
| Netgear | Attached Devices |
| TP-Link | Network Map or Wireless Clients |
| ASUS | Network Map → Client List |
| Linksys | Network Map |
| Xfinity xFi | See My Network in the xFi app |
| Eero | Devices tab in the Eero app |
| Google Nest Wifi | Devices in the Google Home app |
| Fios / Quantum Gateway | My Network → Devices |
Step 2: Identify Every Device
Go through the list and label each one. The easy ones — your laptop, phone, TV — are labeled by hostname. The tricky ones are smart devices that show up with cryptic names ("ESP_34A7B1", "Chromecast-5F2", or sometimes just a MAC address).
Walk around the house with the list open. Turn each Wi-Fi device off one at a time and refresh the router page — whichever device disappears is the one you just powered down. Label it. Repeat for:
- Phones, tablets, laptops
- Smart TVs, streaming sticks, game consoles
- Alexa / Google / HomePod speakers
- Smart bulbs, plugs, thermostats, doorbells, cameras
- Printers and network storage
- Guest devices currently in the house
Anything left unaccounted for after this process is a suspect.
Step 3: Look Up Unknown MAC Addresses
Every device has a unique MAC address (6 pairs of hex, like A4:5E:60:DE:47:88). The first three pairs identify the manufacturer. Paste the MAC into a free tool like macvendors.com or macaddress.io to see who made it.
If the manufacturer is a brand you don't own (say, a Xiaomi device when you have no Xiaomi products), that's a strong hint it's not yours. Note: manufacturers often rebrand — a "Murata" or "Liteon" could still be in a router-branded device you own, and modern OSes randomize MACs by default so your own phone may appear with a random vendor.
Step 4: Confirm and Remove
Once you've identified a suspect device, you have three options:
- Block the MAC address — most routers let you add a MAC to a block list so that specific device cannot reconnect. Permanent until you unblock.
- Change your Wi-Fi password — forces every device to reauthenticate with the new password. The freeloader can't reconnect without it. Easiest and most thorough — see our change Wi-Fi password guide.
- Both — change the password and block the MAC for belt-and-suspenders protection.
How Neighbors Get On Your Wi-Fi in the First Place
- You gave a friend or guest the password and it spread
- You never changed the default password printed on the sticker
- Your network uses WEP or original WPA (both trivially breakable — always use WPA2 or WPA3)
- Your password is short (under 12 characters) or a dictionary word
- Someone reset and reconfigured the router (rare, usually requires physical access)
Preventing It From Happening Again
- Use WPA3 (or WPA2-AES if WPA3 isn't available) — never WEP, never "Open"
- Use a 16+ character password mixing letters, numbers, and symbols
- Set up a separate guest network for visitors so your main password never gets shared
- Disable WPS (Wi-Fi Protected Setup) — it has known vulnerabilities on older routers
- Check your connected-devices list every few months
What About "Deauth" or Wi-Fi Attacks?
A determined attacker with directional antennas can capture WPA2 handshakes and attempt offline password cracking. A strong 16+ character random password makes this computationally infeasible for residential targets. WPA3 adds per-session key exchange that prevents the offline attack entirely. For a home network, a long password and WPA3 is adequate defense.
Frequently Asked Questions
How can I tell if someone is stealing my Wi-Fi?
Sign in to your router and open the connected-devices list. Walk around turning your own devices off one by one and label each entry as it disappears. Anything left unaccounted for is likely unauthorized.
Can I see what websites a neighbor visited on my Wi-Fi?
Some advanced routers (ASUS with Trend Micro, Eero Plus, Fing) log connection history per device. Most basic routers don't, and even those that do typically only show domains, not full URLs, because of HTTPS encryption.
What's the fastest way to kick someone off my Wi-Fi?
Change the Wi-Fi password. Every device is immediately disconnected and anyone without the new password cannot reconnect. Takes under two minutes and requires no MAC-level configuration.