How to Identify an Unknown Device on Your Home WiFi

A router lists a device called Unknown. The name tells you very little. It could be a printer that never reported a hostname, a family phone using a private Wi-Fi address, or an old entry the router still remembers. Before blocking it, collect enough evidence to tell those cases apart. The simplest test is to change one thing on a device you own and watch what happens in the router’s active client list.

Start with the right router screen

Open the administration page or official app for the router you manage. Look for connected clients and check whether the page distinguishes online devices from saved ones. If the router separates the main network, guest network, and wired connections, note which section contains the unfamiliar entry. Record its MAC address, local IP address, and any status or last-seen time the router displays. Take these notes privately. A device inventory can reveal more about your household than you intend to share.

A DHCP lease tells you the router reserved an address for a client for some period. A lease can still be listed after the device disconnects. If you are looking for a device that is connected right now, an active connection indicator or a recent timestamp is more useful. The router’s documentation can help if its interface uses a single list for both saved and connected devices.

Run a one-device disconnect and reconnect test

1. Pick a likely match that you can safely disconnect, such as your own phone. If the router dashboard is open on that phone, move the dashboard to a computer or another device first.
2. Open the phone’s details for the Wi-Fi network it is using. Look for the address associated with that network. Compare it with the router entry before changing anything. A private Wi-Fi address can differ from the hardware address on the phone’s About screen.
3. Turn Wi-Fi off on that phone only. Refresh the active client list and allow for the router’s normal refresh delay. Watch whether the matching address goes offline or its last-seen time stops updating.
4. Turn Wi-Fi back on and check the list again. An address match plus a corresponding disconnect and reconnect gives you a practical way to identify the entry. Once you have a match, label it in the router if the interface allows it.

For example, imagine a router showing an entry at 192.168.1.27 with a MAC address ending in 4A:91. A phone’s settings for the same network show that ending too. If that entry goes offline when the phone disconnects and returns when it reconnects, you have evidence to label it as the phone. If a lease at 192.168.1.27 remains visible throughout, that is expected. The lease entry is separate from the current connection state. Check the full MAC address in a real comparison, since a short suffix can match by coincidence.

Use Windows for a second observation

On a Windows computer connected to the same local network, open Command Prompt and run arp -a. It displays IPv4-to-MAC mappings already in that computer’s ARP cache. If several interfaces appear, read the section for the one connected to your router. A matching row can help cross-check an address. A missing row leaves the question open, and a cached row may outlast the connection. Guest isolation can also limit what one client can see from another. Idraaak has an Arabic walkthrough for معرفة عناوين الأجهزة المتصلة بالشبكة من ويندوز with examples of reading the output.

Make a decision after checking the evidence

Repeat the test with another likely device if the first one does not match. Try a television, a spare phone, or a printer when you can safely disconnect it. Leave equipment that people rely on online while you compare its settings or labels. If an active entry still has no owner after the household checks, review who has the Wi-Fi credentials and whether the address appeared on the guest network.

If you confirm unauthorized use on your own network, change the affected Wi-Fi password and reconnect known devices. Use a separate guest network when your router supports it so you can change guest access without reconnecting the whole house. Keep a short list of the devices you identified and the date you checked them. The next unfamiliar entry will be easier to investigate when you already know what usually belongs there.