us Technology & digital loss

What to do if…
your router shows many unknown devices connected to your network

Produced and maintained by PanicStation.org Published: 3 July 2026 Last reviewed: 17 July 2026 Editorial policy USA guide

Short answer

Stop doing sensitive activity on that Wi-Fi for the moment, then secure the router: change the router admin password, change the Wi-Fi password, use WPA3 or WPA2, turn off WPS, remote management, and UPnP, and update the router firmware.

Do not do these things

Don’t assume every “unknown” device is an intruder; routers often label normal devices poorly.
Don’t rely on blocking one device at a time as your main fix; it may not address how access happened.
Don’t do banking, email password changes, or other sensitive logins on this Wi-Fi until it is secured; use cellular data or another trusted connection.
Don’t post router screenshots, device lists, MAC addresses, or passwords publicly.
Don’t hold the reset button in a rush unless you are ready to set the router up again securely.
Don’t share the new Wi-Fi password until you have reconnected only devices you recognise.

What to do now

Move your own activity to a safer connection.
Use cellular data on your phone, or a trusted wired connection, while you secure the router.
Pause outside access if you can do it easily.
Unplug the internet or WAN cable, or unplug the router power while you prepare. Do not hold the reset button yet.
Log in to the router settings or ISP router app.
Use the address, app, or instructions from the router label, ISP, or manufacturer. Use cellular data to look up instructions if the Wi-Fi still feels suspect.
Change the router admin password first.
This is the password used to change router settings. Make it long, unique, and not the same as your Wi-Fi password.
Change the Wi-Fi network password.
Set a new strong Wi-Fi password. This forces devices to reconnect and keeps anyone without the new password off the network.
Use secure Wi-Fi encryption.
Choose WPA3-Personal if available. If not, choose WPA2-Personal. Do not use WEP, WPA-only, or an open network.
Turn off WPS.
In wireless settings, disable Wi-Fi Protected Setup, often shown as WPS or push-button setup.
Turn off remote management.
Disable settings called remote management, remote administration, administration over WAN, or similar, unless you specifically rely on them.
Turn off UPnP for now.
If something important stops working, note what broke and turn UPnP back on only if you need it after the router is secured.
Update the router firmware.
Check the router app or admin page for firmware or software updates. Enable automatic updates if the router offers them.
Reconnect only devices you recognise.
Common “unknown” devices include phones, tablets, smart TVs, streaming sticks, printers, speakers, game consoles, cameras, smart plugs, extenders, and guest devices. Some devices may show generic names or privacy-style addresses. If you cannot identify a device, leave it off by keeping the new Wi-Fi password private.
If unknown devices keep coming back, do a controlled factory reset.
Factory reset the router only when you can immediately set a new admin password, new Wi-Fi password, WPA3 or WPA2, WPS off, remote management off, UPnP off unless needed, and updated firmware. If the router came from your ISP, contact the ISP for secure reset steps or replacement options.
If you also see fraud, account takeover, or identity theft, report through official routes.
If money was taken, contact your bank or card issuer first. If this involves cyber-enabled crime, report it to the FBI’s IC3. If this involves scams or fraudulent activity, report it to the FTC. If someone used your personal information, use IdentityTheft.gov for recovery steps. Keep a simple note of dates, times, affected accounts, and alerts.

What can wait

You don’t need to identify every device owner right now.
You don’t need to prove who connected to the network before locking it down.
You don’t need to hide the network name, buy a new router, or organize every smart home setting immediately.
You can rename devices, rebuild guest networks, and tidy router settings after the network is stable.

Important reassurance

A long list of “unknown” devices can be alarming, but it often includes ordinary household devices with unclear names. Changing both router passwords, using WPA3 or WPA2, turning off risky convenience features, and updating firmware are strong first steps that usually stop simple unwanted access.

Scope note

These are first steps to reduce access and buy time. If devices keep reappearing after a secure reset, or if accounts, money, or personal information are affected, you may need help from your ISP, device manufacturer, bank, or an appropriate cybercrime or identity-theft reporting service.

Important note

This is general information, not professional, legal, cybersecurity, financial, law-enforcement, or technical advice. If you believe you or someone else is in immediate danger, call 911 or local emergency services.

Additional Resources

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us