MAC stands for Media Access Control, and it's your device's physical address on your network

MAC is short for Media Access Control. It's a unique identifier assigned to every device that connects to a network — your laptop, phone, printer, smart TV, anything with a network card. While your IP address is like your mailing address (it can change), your MAC address is like your device's serial number. It stays the same as long as the device exists.

Your router uses MAC addresses to recognize which physical devices are on your network, separate from the internet addresses those devices get assigned. When your phone connects to your Wi-Fi, the router doesn't just see "192.168.1.5" — it sees your phone's specific MAC address and knows it's your phone, not someone else's.

The MAC address is burned into your device's network card when it's manufactured. You can't change it permanently, though some devices let you spoof it temporarily for troubleshooting. It's formatted as six pairs of hexadecimal characters, like 00:1A:2B:3C:4D:5E, and the first half identifies the manufacturer while the second half is unique to that specific device.

Key Takeaways

  • MAC stands for Media Access Control and is a permanent identifier for your device's network card, separate from its IP address.
  • Your router uses MAC addresses to recognize which physical devices are connected, which is how it knows to send data to your laptop instead of your phone.
  • MAC filtering — allowing only certain MAC addresses to connect — is one way to restrict who can join your network, though it's not a complete security solution.
  • You can find your device's MAC address in network settings on Windows, Mac, or Linux, or in your router's admin panel under connected devices.

How your router uses MAC addresses to manage your network

When you set up MAC filtering on your router, you're telling it: "Only let devices with these specific MAC addresses connect." This is useful if you want to prevent your neighbor's device from joining your network even if they know your Wi-Fi password. You add your laptop, phone, and printer to an allowed list, and anything else gets blocked at the router level before it even gets an IP address.

Your router also uses MAC addresses to assign the same IP address to the same device every time it connects. This is called DHCP reservation. Instead of your laptop getting 192.168.1.50 one day and 192.168.1.75 the next, you can tell the router: "Whenever the device with MAC address 00:1A:2B:3C:4D:5E connects, always give it 192.168.1.50." This matters for devices like printers or security cameras that you want to reach at a consistent address.

The router also logs MAC addresses when it detects a device trying to connect. If you see a MAC address in your router's logs that you don't recognize, that's a sign someone tried to join your network. You can then block that MAC address specifically.

Where to find your device's MAC address

On Windows, open Command Prompt and type ipconfig /all. Look for "Physical Address" — that's your MAC address. It will be listed under whichever network adapter you're using (Ethernet or Wi-Fi).

On Mac, go to System Settings, click Network, select your connection, then click Details. The MAC address appears as "Wi-Fi Address" or "Ethernet Address" depending on how you're connected.

On Linux, open a terminal and type ip link show or ifconfig. The MAC address is listed as "link/ether" or "HWaddr".

You can also find every device's MAC address by logging into your router's admin panel. Most routers show a list of connected devices with their MAC addresses. This is the easiest way to see what's actually on your network right now.

Why MAC filtering alone isn't enough security

MAC filtering stops casual intruders but not determined ones. Someone with basic networking knowledge can spoof a MAC address — make their device pretend to have a MAC address that's on your allowed list. They'd need to be close enough to see your network and know which MAC addresses you allow, but it's possible.

MAC filtering also creates friction: every time you buy a new device or have a guest who wants to connect, you have to add their MAC address to the router. If you forget to remove an old device's MAC address, it can still connect even after you've sold it or given it away.

The real security comes from a strong Wi-Fi password (WPA3 encryption if your router supports it) combined with MAC filtering. The password stops most people. MAC filtering stops the few who get past the password. Together they're reasonably effective for a home network.

How MAC addresses differ from IP addresses

Your IP address is assigned by your router and can change. Your MAC address is permanent and built into your device. Think of it this way: your IP address is like your phone number (you can get a new one), while your MAC address is like your fingerprint (it doesn't change).

IP addresses work across the entire internet. Your device uses its IP address to communicate with servers across the world. MAC addresses only work on your local network — they're used for communication between devices on the same Wi-Fi or Ethernet segment. Once data leaves your home network, the MAC address is stripped away and only the IP address matters.

This is why your router needs both: it uses MAC addresses to figure out which physical device to send data to on your home network, and IP addresses to figure out where that data came from and where it's going on the internet.

Setting up MAC filtering on your router

Log into your router's admin panel — usually by typing 192.168.1.1 or 192.168.0.1 into a browser, or using your router's app. Look for a section called "MAC Filtering," "Access Control," "Device Management," or "Connected Devices." The exact name varies by manufacturer.

Write down the MAC addresses of every device you want to allow on your network. You can find these in your device settings (as described above) or in your router's current connected devices list. Add each one to the allowed list.

Enable MAC filtering and set it to "Allow only these devices" rather than "Block these devices." The allow list is more find because it defaults to blocking anything you haven't explicitly permitted.

Test by disconnecting a device and trying to reconnect it. If it connects, your MAC address was added correctly. If it doesn't, double-check that you copied the MAC address exactly — even one character wrong will block the device.

Frequently Asked Questions

Can I change my device's MAC address?

Most operating systems let you spoof your MAC address temporarily for troubleshooting, but it reverts when you restart. The actual MAC address burned into your network card can't be changed. If you need a different MAC address permanently, you'd need to replace the network card itself, which is rarely necessary.

Will MAC filtering protect me from hackers on the internet?

No. MAC filtering only controls which devices can connect to your local network. It doesn't protect you from hackers attacking you over the internet. You need a strong password and WPA3 encryption for that. MAC filtering is a second layer of defense for your home network specifically.

What if I can't find my device's MAC address in settings?

Check your router's admin panel instead — it shows every connected device and its MAC address. You can also contact the device manufacturer with the model number, and they can tell you how to find it. Some older devices may not display it in an obvious place.

Do I need to update my MAC filter when I get a new device?

Yes. If you buy a new laptop or phone, you'll need to add its MAC address to your router's allowed list before it can connect. This is one reason MAC filtering can be inconvenient for households with many devices.

Can two devices have the same MAC address?

Not on the same network. Manufacturers are supposed to assign unique MAC addresses, and in practice they do. If two devices somehow had the same MAC address on your network, your router would get confused about which device to send data to, and both would have connection problems.