Is your internet feeling sluggish even though you’re not doing anything bandwidth-heavy? Or maybe your devices keep dropping off the network for no obvious reason? There’s a chance someone else is using your Wi-Fi, and they didn’t exactly ask permission. The good news is that checking for uninvited guests and locking them out for good is easier than you might think.
In this guide, you’ll learn how to spot unknown devices on your network, kick them off, and tighten up your security so it doesn’t happen again. We’ll also cover what actually works in 2026 (strong encryption, firmware updates, guest networks) versus the old-school tricks that security experts now say aren’t worth your time.
Why This Actually Matters Beyond “Stolen Bandwidth”
Sure, a neighbor leeching your Wi-Fi is annoying. But the bigger concern is that anyone connected to your network can potentially see shared files, access connected smart home devices, or use your connection for something you really don’t want traced back to your IP address. Think of your home network like your front door, you want to know exactly who has a key.
Step 1: See Who’s Connected to Your Wi-Fi
The most reliable way to see every device on your network is to check your router directly. You’ve got two solid options: use your router’s mobile app (the easiest route for most people) or log into the router’s web interface from a browser.
Option A: Use Your Router’s App
Most modern routers, and basically all mesh Wi-Fi systems like Eero, Google Nest Wi-Fi, Netgear Orbi, or TP-Link Deco, come with a smartphone app that makes this dead simple. Your ISP may also have its own app (think Xfinity, AT&T, or Verizon) that does the same thing.
- Open your router’s app on your phone (or download it from the App Store or Google Play if you haven’t already).
- Look for a section called Connected Devices, Device List, Network Map, or something similar, the exact label varies by brand.
- You’ll see a list of every device currently on your network, usually with the device name, IP address, and whether it’s on Wi-Fi or plugged in via Ethernet.
Option B: Log Into Your Router’s Web Interface
If you’d rather do this from a computer, you can log into your router through a web browser. Here’s how:
- Open a browser and type your router’s IP address into the address bar. The most common addresses are
192.168.1.1or192.168.0.1you can also find it printed on a label on the router itself.
- Sign in with your router’s admin username and password. This is different from your Wi-Fi password, it’s the login for the router’s management interface. (It’s also printed on the router label if you’ve never changed it.)
- Once you’re in, look for a section labeled Connected Devices, Attached Devices, DHCP Client List, or Wireless Clients. The exact name depends on your router brand.
- You’ll see a list of devices showing names, IP addresses, and MAC addresses (a unique hardware identifier for each device).
Option C: Use a Network Scanner App
If your router’s interface is hard to navigate (some ISP-supplied routers are pretty barebones), a third-party app can help. Fing Network Scanner is a popular free option for both iOS and Android that scans your network and shows every connected device, often with more detail than the router itself provides, including device type, manufacturer, and sometimes even the device model.
How to Spot an Unknown Device
Once you have your device list, go through it and mentally check off everything you recognize, your phone, laptop, smart TV, tablets, smart speakers, security cameras, game consoles, and so on. It adds up fast when you think about it!
If something’s still unaccounted for, try this trick: temporarily turn off Wi-Fi on all your own devices. Anything that stays listed as active after that is either a wired device you forgot about, or something that shouldn’t be there.
Some routers and apps let you label devices so they’re easy to identify in the future. If yours supports that, take a few minutes to name everything. It makes future checkups much faster.
Step 2: Kick Unknown Devices Off Your Network
Found something suspicious? Here’s how to deal with it right now.
Block or Pause the Device (Quick Fix)
Many routers and apps let you block or “pause” internet access for a specific device with a tap or click. This is a good immediate step, but it’s not a permanent fix, a savvy user could potentially reconnect with a different device. For a real solution, you need to change your Wi-Fi password (more on that in the next section).
Change Your Wi-Fi Password (The Real Fix)
Changing your Wi-Fi password is the most effective way to kick everyone off and start fresh. Every device, including yours, will need to reconnect with the new password. Yes, it’s a little annoying to reconnect everything, but it’s worth it.
- Log into your router’s app or web interface.
- Go to Wireless Settings, Wi-Fi Settings, or Security, again, the name varies by router.
- Find the Wi-Fi Password or Network Key field and replace it with a new, strong password.
- A good password is a long passphrase, something like
BlueCoffee!Mountain42is far better than a short string of random characters. Aim for at least 12–16 characters.
- Save your changes. Your router will likely restart briefly.
- Reconnect all your own devices using the new password.
Step 3: Lock Down Your Router Settings
Changing the Wi-Fi password is a great start, but there are a few more things you should do to make sure your network stays secure going forward. Think of this as putting a deadbolt on top of the regular lock.
Use WPA3 or WPA2 Encryption (And Ditch WEP)
Encryption is what scrambles your Wi-Fi traffic so it can’t be easily intercepted. Not all encryption standards are equal, and some are dangerously outdated.
- WPA3-Personal: The current gold standard. Use this if your router supports it.
- WPA2-Personal (AES): Still solid and widely supported. This is your minimum if WPA3 isn’t available.
- WEP or WPA/TKIP: Do not use these. They’re considered broken and can be cracked in minutes with freely available tools.
To check or change your encryption setting, go to your router’s Wireless or Security settings and look for Security Mode or Authentication Type. Set it to WPA3-Personal if available, or WPA2-Personal (AES) if not.
One heads-up: if you switch to WPA3-only mode and some of your older devices (smart home gadgets, older laptops) can’t connect anymore, try a WPA2/WPA3 mixed mode instead. That lets newer devices use WPA3 while keeping compatibility for older ones.
Change the Router Admin Password
Your Wi-Fi password and your router admin password are two different things. The admin password is what you use to log into the router’s settings, and if it’s still set to the factory default (usually something like admin / admin or admin / password), anyone who gets on your network could take full control of your router.
- In your router’s settings, look for Administration, System, or Management.
- Find the option to change the admin password (and username, if your router allows it).
- Set a strong, unique password that you don’t use anywhere else.
- Some newer cloud-managed routers and ISP apps also support multi-factor authentication (MFA) for the admin account, enable it if that option exists. It’s an extra layer that makes it much harder for anyone to hijack your router settings.
Enable Automatic Firmware Updates
Router firmware (the software that runs your router) gets security patches just like your phone or computer does. An outdated router can have vulnerabilities that let attackers bypass your Wi-Fi password entirely, so keeping it updated is genuinely important, not just a nice-to-have.
Look for a Firmware Update or Software Update option in your router’s settings, usually under Advanced or System. If there’s an option to enable automatic updates, turn it on. If not, make a habit of checking manually every few months.
Step 4: Set Up a Guest Network (And an IoT Network)
Here’s something a lot of people skip but really shouldn’t: keeping guests and smart home devices off your main network.
Create a Guest Network for Visitors
Most modern routers let you create a separate guest network, a second Wi-Fi network with its own password that gives visitors internet access without letting them see your main devices (your NAS, your work laptop, your printer, etc.).
- In your router’s settings, look for Guest Network or Guest Wi-Fi.
- Enable it and give it its own name (SSID) and a strong password.
- Make sure client isolation is turned on, this is the setting that prevents guest devices from seeing anything on your main network. It might be labeled “Allow guests to access Internet only” or similar.
Going forward, give the guest network password to anyone visiting rather than your main Wi-Fi password. You can change the guest password anytime without disrupting your own devices.
Put Smart Home Devices on Their Own Network
Smart TVs, security cameras, smart plugs, robot vacuums, these IoT (Internet of Things) devices are notoriously less secure than phones and computers. If one gets compromised, you don’t want it having direct access to everything else on your network.
If your router supports multiple SSIDs or VLANs (virtual network segments), create a separate network just for IoT devices and keep them isolated from your main network. Many mesh systems like Eero and Google Nest Wi-Fi make this easy through their apps.
What NOT to Rely On
A few older security tricks still get recommended around the internet, but modern security guidance is pretty clear that they’re not worth treating as real defenses:
- Hiding your SSID (disabling network name broadcast): This does not meaningfully improve security. Anyone with basic network scanning tools can still find a hidden network in seconds. It also causes connection headaches with some devices. Use strong WPA2/WPA3 encryption instead.
- MAC address filtering: Every device has a unique MAC address, and some routers let you create an “allowed” list. The problem is that MAC addresses can be spoofed (faked) easily, so a determined attacker can get around this in minutes. It’s a lot of maintenance for very little actual protection.
- WPS PIN mode: WPS (Wi-Fi Protected Setup) is the push-button or PIN method for connecting devices. The PIN version in particular has known security vulnerabilities. If your router has WPS, it’s worth disabling it in the settings and just using manual password entry instead.
Tips and Troubleshooting
Common Issues
Problem: I switched to WPA3 and some devices can’t connect.
Older phones, laptops, and smart home gadgets often only support WPA2. Switch your router to WPA2/WPA3 mixed mode if available, or put older devices on a separate WPA2-only network.
Problem: I changed my password and now my smart home devices won’t reconnect.
IoT devices usually need to be re-paired manually after a password change. Check the app for each device (your smart plug app, camera app, etc.) and follow the setup process again using your new password. Some devices are also picky about special characters in passwords, if one won’t connect, try a password without symbols.
Problem: My ISP router doesn’t show a device list or block button.
Some ISP-supplied gateways have pretty limited interfaces. Try logging into the ISP’s mobile app instead, many ISPs have added more features there than in the web UI. If that doesn’t work either, contact your ISP and ask if they can enable advanced mode. As a last resort, you can always change the Wi-Fi password to kick everyone off and start fresh.
Problem: My internet is still slow even after locking down the network.
If no unknown devices are showing up and your speed is still bad, the culprit might be something else entirely. Try running a speed test with just one device connected. If speeds look fine there but slow down with multiple devices, check whether any of your own devices are doing something bandwidth-heavy in the background (cloud backups, software updates, streaming in 4K). If speeds are consistently bad even with one device, it might be time to have a chat with your ISP.
Pro Tips
- Label your devices in the router app: Most router apps let you rename devices. Spend five minutes labeling everything once, and future checkups take about 30 seconds.
- Check the device list every few months: Make it a habit, like checking your smoke detector batteries. Remove or block anything you don’t recognize.
- Consider a mesh system if you have a big home: Systems like Eero, Google Nest Wi-Fi, or TP-Link Deco have excellent apps for managing connected devices, blocking unwanted ones, and setting up guest networks. They’re worth considering if your current router’s management tools feel clunky.
- Keep all your devices updated too: An unpatched phone or laptop on your network can be a weak point even if your router is locked down tight.
Wrapping Up
Securing your home Wi-Fi doesn’t have to be complicated. Check your router’s connected device list, kick off anything you don’t recognize by changing your password, switch to WPA3 or WPA2 encryption, update your router admin password, and set up a guest network for visitors. Do those five things and you’re in pretty solid shape. If you want to go the extra mile, separate your smart home gadgets onto their own network, it’s one of the best things you can do for your overall home network security in 2026.
The honest truth is that most home network breaches come down to weak passwords and outdated firmware, not sophisticated hacking. Fix those basics and you’ve solved 90% of the problem. If you run into any issues along the way, drop a question in the comments below!