To identify an unknown device on your Wi-Fi, list everything connected, mark the devices you recognize, then use the leftover device's maker, name, open services and first-seen time to work out what it is. If it still can't be explained, unplug suspects one at a time and rescan. If it isn't yours, remove it in your router and change your Wi-Fi password.
Why unknown devices appear
A typical home now has 20 or more connected things, and many of them never tell the network what they are. The usual suspects:
- Phones, tablets and watches with private addresses. iOS and Android give each network a random Wi-Fi address, so the maker can't be looked up and the device often has no name.
- Smart-home gadgets. Plugs, bulbs, light strips and sensors often show only a chip maker such as Espressif or Tuya.
- Entertainment devices. TVs, streaming sticks, consoles and speakers, sometimes listed under the maker of their Wi-Fi module rather than the brand on the box.
- Network gear. Mesh nodes, extenders and the router itself.
- Guests and family members you gave the password to.
How to identify an unknown device, step by step
- List everything on the network. Open your router's app or admin page and find its list of connected devices, or run a scan with a network scanner such as NetSamurai. Write down any device you can't place, with its IP address and any name or maker shown.
- Mark the devices you know. Go through phones, laptops, TVs, speakers, consoles, printers and smart-home gadgets, and name each one. The short list that's left is what you actually need to investigate.
- Read the clues. Look at the maker, any name the device announces, and the services it offers. A maker such as Espressif or Tuya usually means a smart plug, bulb or other gadget; an open port 631 points to a printer; port 554 often means a camera.
- Match it by time. Check when the device was first seen. If it appeared the day you set up a new gadget, or when a guest visited, you probably have your answer.
- Try the unplug test. Switch off or unplug suspects one at a time, then scan again. The entry that disappears is the device you just unplugged.
- Remove it if it isn't yours. If a device still can't be explained, block or remove it in your router, change the Wi-Fi password, use WPA2 or WPA3 encryption, turn off WPS, and update the router's firmware. Then reconnect your own devices with the new password.
What common maker names usually mean
The first half of a device's hardware address identifies the company that made its network chip. That company is often not the brand on the box.
| Maker shown | Usually |
|---|---|
| Espressif, Tuya, Shenzhen-based makers | Smart plugs, bulbs, light strips, robot vacuums, cheap cameras: anything built on a Wi-Fi chip module |
| Amazon, Google, Sonos, Roku | Smart speakers, displays, streaming sticks and TVs |
| Samsung, LG, Hisense, TCL, Vizio | Smart TVs and appliances; also Samsung phones without a private address |
| Hon Hai / Foxconn, Murata, AzureWave, Liteon | Wi-Fi modules inside TVs, consoles, laptops and printers |
| Raspberry Pi | A hobby computer: a home server, ad blocker or project someone in the house set up |
| Ubiquiti, TP-Link, NETGEAR, ASUS, eero | Routers, mesh nodes, access points and Wi-Fi extenders |
| No maker at all | Usually a phone, tablet or watch using a private Wi-Fi address |
What open ports reveal
The services a device offers say a lot about what it is. A network scanner that checks ports, such as NetSamurai's Quick check, shows these:
| Port | Service | Likely device |
|---|---|---|
| 554 | RTSP video stream | IP camera or video doorbell |
| 631, 9100 | Printing (IPP, raw) | Printer |
| 8009, 8008 | Google Cast | Chromecast, Google TV or Nest speaker |
| 7000 | AirPlay | Apple TV, Mac or AirPlay speaker |
| 1400 | Sonos control | Sonos speaker |
| 445, 139 | File sharing (SMB) | Computer or NAS |
| 22 | SSH remote login | Computer, NAS, router or Raspberry Pi |
| 23 | Telnet | Older router, camera or IoT device, and a security risk |
| 80, 443 | Web admin page | Router, NAS, printer, camera, almost anything |
If the device isn't yours
- Remove or block it in your router's device list, if your router supports that.
- Change the Wi-Fi password to a long, unique one. Everyone is disconnected; only people with the new password can rejoin.
- Use WPA3, or WPA2 with AES, and turn off WPS, which lets devices join without the password.
- Update the router's firmware and change its admin password from the default.
- Put guests and smart gadgets on a guest network so they can't see your computers.
- Scan again later and compare, to make sure it hasn't come back.
Then check the rest of the network for the weaknesses that make it easier to get in. The Wi-Fi security check guide covers what to look for.
How NetSamurai helps
NetSamurai scans your Wi-Fi from your iPhone or iPad and highlights devices you haven't marked as yours and devices that are new since the last scan. Its Identify this device screen gathers the maker, announced names, open services and first-seen time, with steps to find the device in your router. Optional new-device alerts let you know when something new joins. It can't block devices or say who is using one.
Frequently asked questions
Why is there an unknown device on my Wi-Fi?
Most unknown devices are your own: phones and tablets using a private Wi-Fi address, smart plugs and bulbs that never show a name, TVs, streaming sticks, consoles, printers and a router's own extenders. Visitors you gave the password to are the next most common. A device that stays unexplained after you have checked everything in the house deserves to be removed.
Can someone use my Wi-Fi without me knowing?
Yes, if they know or guess the password, or if the router has weaknesses such as WPS turned on or outdated firmware. Comparing scans over time shows when new devices appear. Changing the Wi-Fi password disconnects everyone, and only people you give the new password to can rejoin.
Does an unknown device mean I've been hacked?
No. An unfamiliar device on a list is not proof of an attack, and most turn out to be ordinary gadgets. It is worth identifying, and a device with a known exploited flaw is worth fixing, but neither proves that someone has broken in.
Why do devices show up without a name?
Many devices never announce a name on the network, and iPhones, iPads and Android phones use a private, randomized Wi-Fi address on each network, so the maker can't be read from the address either. Clues such as open services and first-seen time usually narrow it down.
Can NetSamurai block a device from my Wi-Fi?
No. iOS apps can't remove devices from a network. NetSamurai helps you identify the device and then points you to where you can remove or block it in your router's settings.
Find out who's on your Wi-Fi
NetSamurai is free on iPhone and iPad. Scan, name your devices, and see what's left.