Your Wi-Fi network may have intruders right now
You pay for your internet plan, maintain your router, and yet someone could be using your connection without your knowledge. It happens more often than you’d think: neighbors who discovered your password, forgotten devices from old visits, or someone exploiting a weakly configured network. The practical result is slower speeds, higher latency, and in the worst case, exposure of your data to someone on your local network.
The good news is that identifying who’s connected to your Wi-Fi and blocking unwanted access is a completely accessible process, even for those without technical training. You’ll need access to your router’s panel or a helper app, and the process takes less than ten minutes in most cases. This guide covers the main ways to do it, whether through your router’s web interface, the manufacturer’s app, or third-party software on your computer.
What you need before starting
Before any steps, confirm you have on hand:
- Your router’s IP address (usually
192.168.0.1or192.168.1.1, but may vary) - The router’s administrator username and password (different from Wi-Fi password; usually found on the label under the device)
- A device connected to your network, whether laptop, smartphone, or tablet
If you’ve never accessed your router’s panel before, look for the label on the physical device. It usually contains the access address, default username (normally “admin”), and default password. If someone has already changed this password and you don’t know it, the solution is a factory reset on the router, but this will erase all settings, including your Wi-Fi password.
How to see connected devices through your router panel
This is the most reliable way and doesn’t depend on any external application. Your router’s administrative panel has direct access to the ARP table (an internal record that maps which network addresses are active on your local network) and the DHCP lease list, which shows all devices that received an IP address automatically.
- Open a browser on your smartphone or computer connected to your network
- Type your router’s IP address in the address bar (e.g.,
192.168.0.1) and press Enter - Enter your administrator username and password when prompted
- Look for a section called “Connected Devices”, “DHCP Clients”, “Network Map”, or something similar; the name varies by manufacturer
- The list will show devices with their name (hostname), local IP address, and MAC address (a unique hardware identifier for each network card)
The MAC address is the most important information here. It has the format AA:BB:CC:DD:EE:FF and uniquely identifies the device’s hardware, regardless of the name shown on the network. Write down your own devices’ MACs to identify anything unfamiliar.
How to use apps to scan your network
If your router’s panel is confusing or difficult to navigate, some apps can scan in a more visual way. They work by scanning the local network and listing everything that responds to a ping query, which is basically a “hello, is anyone there?” message sent to each possible address on your network.
Fing (Android and iOS, free with premium features)
Fing is one of the most well-known for this purpose. It scans your network and displays device name, network card manufacturer, IP address, and MAC. The free version works for most cases. An important limitation: Fing lists what’s connected at that moment, not connection history. If the intruder disconnected before the scan, they won’t appear.
Advanced IP Scanner (Windows, free)
For those who prefer working on a computer, Advanced IP Scanner is a solid Windows option. It scans your entire IP range and shows found devices with manufacturer, name, and MAC address. It’s especially useful on networks with many devices, like environments with computers, printers, and IP cameras.
Routers with their own apps
Manufacturers like TP-Link (Tether app), ASUS (ASUS Router app), and Intelbras offer applications that show connected devices more intuitively than the web panel. If your router is from one of these brands and has the app available, it’s worth using as a starting point before diving into the administrative panel.
How to block an unwanted device
Found something suspicious in the list? You now have two main options: MAC address blocking or password change. Each has its ideal context.
MAC address blocking (MAC filtering)
- Note the MAC address of the device you want to block
- In your router’s panel, look for “MAC Filter”, “Access Control”, or “MAC Filtering”
- Add the MAC address to the blocklist and save
- The router will refuse future connections from that specific hardware
The weakness of this approach is that a more experienced user can spoof their device’s MAC address (a technique called MAC spoofing), bypassing the block. For the common case of a neighbor or visitor with access to the password, MAC filtering works well. For someone with malicious intent and technical knowledge, it’s not sufficient on its own.
Changing your Wi-Fi password
This is the most effective and definitive solution. By changing the password, all devices are disconnected and only reconnect with the new credentials. The process is done in your router’s panel under wireless settings.
- Access your router’s panel
- Go to “Wireless Settings” or “Wi-Fi Settings”
- Find the password field (usually called “WPA Key” or “Password”)
- Choose a new password with at least 12 characters, mixing uppercase, lowercase, numbers, and symbols
- Confirm that the security protocol is set to WPA2 or, if your router supports it, WPA3
- Save and reconnect your devices with the new password
If you frequently make decisions about connected device security, it might make sense to look at newer equipment. Current routers with Wi-Fi 6E or Wi-Fi 7 come with WPA3 enabled by default and more organized panels. But before considering a hardware upgrade, the problem in most cases is configuration, not equipment.
Extra measures to protect your network
Blocking the immediate intruder solves the short term. To prevent the problem from happening again, some additional settings make a difference:
- Disable WPS (Wi-Fi Protected Setup): a feature that allows connection without entering a password, but has known vulnerabilities. Most routers have this option in wireless settings
- Change your router’s administrator credentials: if still on “admin/admin”, anyone on your local network can access the panel
- Create a guest network (Guest Network): keep your main devices on a separate network and offer the guest network to people you don’t fully trust
- Check if your router’s firmware is updated: manufacturers release security updates that fix vulnerabilities; look for the update option in your router’s panel
- Disable remote panel access: unless you need to manage your router from outside your home, this function creates an unnecessary attack vector
Common problems and how to solve them
The router’s IP address won’t open in the browser
Confirm you’re connected to the Wi-Fi network, not using mobile data. The default address might be different from 192.168.0.1; on Windows, open Command Prompt, type ipconfig, and look for the “Default Gateway” field. On Android or iPhone, go to Wi-Fi settings and tap your connected network’s name to see the gateway.
Strange device names or unnamed devices appear
Many IoT devices (cameras, smart TVs, voice assistants) appear with generic names or MAC addresses without friendly names. Use the MAC’s manufacturer to identify: the first six characters of the MAC address identify the hardware manufacturer. Sites like Wireshark OUI Lookup (search for the name on Google) translate this prefix to the company name.
MAC blocking didn’t work
Verify that you saved the configuration correctly and that the router applied the rule. Some models require a restart for the filter to take effect. If the device keeps connecting, it may be using MAC randomization, a feature in newer iPhones and Androids that changes the MAC address with each connection. In this case, changing your password is the most reliable solution.
My speed improved after blocking a device
This confirms the device was consuming bandwidth from your network. Bandwidth usage monitors, present in more advanced routers, help identify which device uses the most data in real time.
Frequently asked questions about Wi-Fi monitoring
Can I see the history of who’s already connected, not just who’s connected now?
It depends on your router. Basic models only show active connections at the moment. Some more advanced routers, especially those for businesses or with alternative firmware like OpenWrt, keep connection logs. Check if your model has a logs or reports option in the administrative panel.
Can the Fing app block devices directly?
Fing can identify devices, but blocking itself must be done in your router’s panel. The app can’t instruct the router to cut a specific device’s access without direct hardware integration, which only exists in some partner models.
Do routers sold in Brazil have the same MAC filtering functions?
Yes, MAC filtering and basic security settings are standard on virtually all routers available in Brazil, including models certified by Anatel from brands like Intelbras, TP-Link, D-Link, and ASUS. The interface varies, but the functionality is present.
Does switching to WPA3 disconnect older devices?
It may disconnect devices that don’t support WPA3, like some older IoT gadgets and notebooks with old network cards. Most routers allow configuring WPA2/WPA3 mixed mode, which keeps compatibility with older devices while offering WPA3 for newer ones.
When it’s worth considering a new router
If your router doesn’t have MAC filtering, doesn’t allow creating a guest network, or no longer receives firmware updates from the manufacturer, the security limitation isn’t in configuration, it’s in hardware. Models launched more than five years ago often fall into this category.
Routers with Wi-Fi 6 (802.11ax) are now well established in the Brazilian market in 2026, with prices varying depending on coverage and features. Before buying, check if the model has Anatel certification (mandatory for legal sale in Brazil), manufacturer-declared firmware support period, and whether warranty is provided locally. Importing uncertified routers can cause problems with your provider and limit technical support.
Taking care of your home network security is a habit, not a one-time task. Checking connected devices every two or three months, changing your password periodically, and keeping firmware updated already solves the vast majority of problems coming through your Wi-Fi door.