What to do if…
your router shows many unknown devices connected to your network
Short answer
Secure the router first: disconnect the router from the internet if you can, then change the router admin password and Wi-Fi password, and turn off risky features like WPS, UPnP, and remote management.
Do not do these things
- Don’t assume the names are accurate (many devices show up as “unknown”, “generic”, or with misleading labels).
- Don’t treat “block one device” as the main fix (it’s easy to miss one and it doesn’t fix how access happened).
- Don’t do sensitive logins (banking, email, password changes) on this Wi-Fi until you’ve secured it (use mobile data instead).
- Don’t factory-reset in a rush: try the key security steps first. If you can’t regain control of settings or things look tampered with, do a controlled reset later.
- Don’t share screenshots of your router admin page publicly (it can expose network names and settings).
What to do now
-
Move your own activity to a safer connection for the next few minutes.
If you need to do anything important online right now, switch your phone/laptop to mobile data (or a trusted wired connection). -
Buy time: disconnect the router from the internet briefly (if you can).
If it’s simple, unplug the internet/WAN cable (the cable from the router to the wall/ONT/modem) for a minute while you change settings. If you can’t do that, a short power-off can also pause activity. -
Log into the router and change the router admin password first.
In the router settings, change the admin/login password (not just the Wi-Fi password). Use a long, unique password you don’t use anywhere else. -
Change the Wi-Fi password and re-join only your devices.
Change the Wi-Fi password to a strong one (long and unpredictable). This forces everything to reconnect—unknown devices should drop off. -
Set Wi-Fi security to WPA2 or WPA3 (not WEP), and disable WPS.
In wireless/security settings:- Use WPA2-Personal or WPA3-Personal (or WPA2/WPA3 mixed if needed).
- Turn off WPS.
-
Turn off remote administration/remote management (if it’s on).
Look for “Remote Management”, “Remote Admin”, “Admin over WAN”, or similar. If you don’t specifically need it, turn it off. -
Turn off UPnP (unless you know you need it).
If you see “UPnP” (Universal Plug and Play), turn it off. If something important stops working (some games/streaming/voice services), you can turn it back on later after everything is stable. -
Update router firmware (or enable auto-updates).
In the router settings, check for firmware/software updates and apply them. If there’s an auto-update option, enable it. -
Check whether any “unknown” devices are actually yours.
Common culprits: smart TVs, speakers, printers, game consoles, streaming sticks, smart plugs, hubs, cameras. If you can’t confidently identify a device, keep it locked out by keeping the new Wi-Fi password private. -
If unknown devices still appear after steps 3–8, do a controlled factory reset.
Factory reset the router, then set it up again securely (new admin password, WPA2/WPA3, WPS off, UPnP off unless needed, remote admin off, firmware updated). If your ISP supplied the router, you can ask them for the safest reset/setup steps. -
If you suspect fraud or account access, document basics and report appropriately.
- If money was taken or you were scammed: contact your bank/provider first.
- To make a police report for cyber crime/fraud in England, Wales, or Northern Ireland, use Report Fraud.
- If you’re in Scotland, report to Police Scotland (use 999 in an emergency; 101 for non-emergency).
Keep a simple note of dates/times, affected accounts, and any alerts/messages.
What can wait
- You do not need to identify exactly who the devices belong to right now.
- You do not need to hide your network name or buy new hardware immediately.
- You can sort “tidying” later (renaming devices, guest network setup, parental controls) once the router is locked down.
Important reassurance
It’s common for router lists to look alarming—devices can show up with unhelpful names, and homes often have more connected gadgets than people realise. Forcing a fresh reconnect after changing the admin and Wi-Fi passwords is a strong first response.
Scope note
This is first-steps guidance to stabilise the situation and prevent further access. If you see repeated re-entry after a reset, or any account takeovers/financial loss, you may need ISP support and broader account security steps.
Important note
This is general information, not professional or legal advice. If you believe a crime is occurring now or anyone is in immediate danger, call 999.