An unknown device on your Wi-Fi? Here's how to identify it in five minutes

November 5, 2026 · Trystero Montevideo · 10base-t interactive

There's a particular jolt that comes with opening your router's app or a network scanner to check something else entirely, and instead finding a device you don't recognize sitting right there on your own Wi-Fi. Maybe it's labeled with a manufacturer you've never heard of, maybe it just says "Unknown," and for a second the obvious question crowds out whatever you were actually trying to do. Most of the time the answer turns out to be ordinary. Figuring out which kind takes about five minutes if you know where to look.

What is that MAC address actually telling you?

Every device on your network broadcasts a MAC address, and the first half of it is not random. IEEE's registration authority assigns each manufacturer its own address block, an assignment it calls a MAC Address Block Large and still commonly refers to by its older name, an OUI. The same listing describes that block as something a manufacturer extends with 24 more bits of its own to build the full MAC address a device ends up broadcasting. Match the first half against a public listing and you learn who made the device, even when nothing else about it is labeled.

We've gone deeper into what a MAC address can and can't tell you in a separate piece; the short version for an unknown-device hunt is that the vendor name narrows things down fast, even when the device's own broadcast name is useless.

Why does a device you own show up as "unknown"?

Before assuming the worst, check whether the mystery entry is just your own phone. Apple's support page says an iPhone, iPad, or Mac uses a different MAC address for each Wi-Fi network by default, a feature called Private Wi-Fi Address. The same page explains the feature exists because a device that always shows the same MAC address lets network operators tie that address to the device's activity and location over time, a kind of tracking that affects every device on every Wi-Fi network. Our read: that's exactly why a phone or laptop you own can end up looking like a stranger on your own device list. The address it's using for this particular network is not the one printed on the box.

You can tell the two apart. Open Wi-Fi settings on the device you suspect and compare its currently shown network address to the mystery entry, or turn Private Wi-Fi Address to Off for that network, which Apple says makes the device fall back to its real hardware MAC address.

Why might a Mac scanner show no MAC address at all?

One more thing before the walkthrough, because it trips people up. A missing MAC address usually means the device sits on a different subnet, behind a router that doesn't pass ARP traffic, so its address never reaches your Mac. IP Scanner reads MAC addresses natively on Mac, iPhone, iPad and Apple Vision Pro, including macOS 27 and iOS 27. If the MAC column is still empty for a device, your router's own device list is the quickest place to read the address instead.

The five-minute walkthrough

Start with whatever already lists your connected devices: your router's own app, or a dedicated network scanner. Either way you want a list that shows the MAC address next to a device name and IP address, so the unfamiliar entry and everything you already recognize sit side by side.

From there:

1. Note the MAC address next to the unfamiliar entry, and check its first half against IEEE's public listing to learn the manufacturer.
2. Check whatever name the device is broadcasting. A blank or generic name usually just means the device never bothered to announce a friendlier one; that's normal for plenty of ordinary hardware.
3. If it's still not obvious, do the physical test: turn off, unplug, or disable Wi-Fi on whatever you suspect, and watch the list. The entry that disappears is your answer.
4. If nothing you own or expect drops off, you've confirmed it's something new, which at least tells you what to ask about next.

When an unfamiliar device is actually worth worrying about

Our advice: a generic vendor name by itself is not a red flag. Plenty of ordinary things (a smart plug, a streaming box, a printer) resolve to a manufacturer you don't recognize purely because most people don't memorize hardware brands. A device is worth a closer look when the steps above still can't account for it: not just an unfamiliar vendor, but one that's been connected far longer than you remember adding anything, or one that keeps reappearing under a name you don't recognize even after you've removed it.

If you'd rather not repeat this check by hand every time, IP Scanner has a whitelist feature that filters out the devices you already trust, so a new or unexpected one stands out. It can also notify you when a new device joins the network, with real-time push alerts available in IP Scanner Ultra.

That first jolt only has to happen once. Track down this one mystery device, and next time something new shows up, you'll already know exactly where to look.

Frequently asked questions