How do I find the manufacturer of an unknown device?

The first half of the device's MAC address (the OUI, or first three bytes) is registered to its manufacturer. Look the OUI up in a vendor database to get the maker — often enough to recognize the device by brand.

What if the unknown device has a randomized MAC address?

Modern phones use a private, randomized MAC per network, so the vendor lookup returns nothing useful. Identify it instead by its hostname, the times it connects, and by temporarily disabling WiFi on your own devices to see which entry disappears.

Is an unknown device on my network dangerous?

Usually it's a device you forgot you own — a smart plug, a TV, a guest's phone. Treat it as worth checking, not an emergency: identify it, and if you can't, change your WiFi password so every device must rejoin.

How do I open my router's list of connected devices?

Log into your router's admin page (commonly 192.168.1.1 or 192.168.0.1) and look for a section called Attached Devices, DHCP Clients, or Device List. The exact name and default login vary by model.

Unknown device on my network: how to identify it fast

TL;DRFound an unknown device on your WiFi? Identify it from its MAC address, IP, and hostname — and know what to do when the MAC is randomized.

Short answer: identify an unknown device by looking up the manufacturer from its MAC address, then matching that against the devices you own. If the MAC is randomized (most phones now), fall back to its hostname and connection pattern.

Step 1 — open your router’s device list

Everything starts at your router’s admin page. Log in (commonly at 192.168.1.1 or 192.168.0.1) and find the connected-devices list — routers call it Attached Devices, DHCP Clients, or Device List. If you’re not sure how to log in or what the default password is, look up your exact model in the router login directory; each entry has the gateway address, login, and reset steps cited to the manufacturer.

Each entry in that list has three useful fields: a MAC address (six pairs like A4:83:E7:2C:1B:90), an IP address, and sometimes a hostname.

Step 2 — look up the manufacturer from the MAC

The first three bytes of a MAC are the OUI — a block the IEEE assigns to one manufacturer. Run the address through a MAC vendor lookup and you get the maker. The brand alone usually tells you what the device is:

Apple, Samsung, Google → a phone, tablet, or watch (often randomized — see step 3).
Espressif, Texas Instruments, Realtek → a smart-home gadget or IoT board (plugs, bulbs, sensors).
Amazon → an Echo, Fire TV, or Kindle.
Sonos, Roku, LG → a speaker or TV.
Ubiquiti, TP-Link, Netgear → networking gear you already own.

If you have a whole list to work through, the same lookup is available as an API, so you can resolve every MAC at once instead of one at a time.

Step 3 — when the lookup says “private” or nothing

If the vendor comes back blank or locally administered, the device is using a randomized MAC — normal for modern phones and tablets. A quick way to confirm: look at the second hex digit of the address. If it’s 2, 6, A, or E, the address was generated by the device itself, so there’s no manufacturer to find. The full explanation is in randomized MAC addresses, explained and in Private WiFi Address explained.

For a randomized device, identify it another way:

Hostname — often the device model or the owner’s name (Janes-iPhone).
Elimination — turn WiFi off on one of your own devices and watch which entry drops out of the list.
Timing — a device that only appears in the evening is probably a TV or console; one that’s always on is likely a smart-home hub.

Step 4 — lock it down if you’re unsure

Can’t identify it and don’t like it? Change your WiFi password. Every device is forced to rejoin, and anything you don’t re-authorize is gone. While you’re in there, it’s a good moment to confirm the admin password isn’t still the factory default — look up your model in the router directory to check what it should be.

When to actually worry

An unknown device is almost always something you forgot you own — a smart plug set up months ago, a guest’s phone, a TV’s second radio. The realistic risk isn’t a stranger sitting on your LAN; it’s an old device with a weak password or stale firmware. Identify what you can, remove what you can’t, and rotate the WiFi password if the list still doesn’t add up.