DHCP assigns an IP address to each device on your network automatically, so you don't have to set one manually
Dynamic Host Configuration Protocol (DHCP) is the system that gives your phone, laptop, and smart TV their network addresses the moment they connect to your router. Without it, you would have to type in a unique number for each device by hand — and remember not to use the same number twice. DHCP does this work for you, handing out addresses from a pool your router controls, then taking them back when a device disconnects.
Your router runs a DHCP server. When your phone joins the network, it sends out a message asking for an address. The router picks one from its available range, sends it back, and your phone starts using it when ready. The address comes with an expiration date called a lease. Before the lease expires, your phone asks to renew it. If your phone leaves the network, the address goes back into the pool for another device to use.
This matters for security because DHCP is where your router controls which devices can talk to each other and which ones reach the internet. It is also where problems start: if DHCP is misconfigured, devices might get addresses outside the range you intended, or a rogue device might hand out fake addresses and intercept traffic.
Key Takeaways
- DHCP automatically assigns temporary network addresses to devices, eliminating the need to set them manually and preventing address conflicts.
- Your router's DHCP server controls the range of addresses available and how long each device can use one before renewing.
- DHCP leases expire and renew automatically, freeing up addresses when devices disconnect so other devices can use them.
- Disabling DHCP and assigning static addresses manually is useful for devices like printers or servers that need a permanent address, but creates more work.
- A rogue DHCP server on your network can hand out fake addresses and redirect traffic, so limiting which devices can connect is a basic security step.
How a DHCP lease works
When your device connects to your network, it does not when ready have an address. It broadcasts a message to every device on the network asking "Does anyone have an address for me?" Your router's DHCP server answers with an offer: "You can use 192.168.1.105 for the next 24 hours." Your device accepts, and the lease begins.
The lease duration is set by your router — typically 24 hours for home networks, though it can be shorter or longer. Before the lease expires, your device automatically asks to renew it. If the router agrees, the clock resets. If your device leaves the network or shuts down, it stops renewing, and the address becomes available again. This recycling of addresses is why DHCP works: you can have far more devices than permanent addresses because addresses are only in use when the device is actually connected.
If a device does not renew before its lease expires and you try to use it again later, it may get a different address. This is why printers and servers often use static addresses instead — you tell them their address once, and they keep it forever, so other devices and people on your network always know where to find them.
The address range your router controls
Your router does not hand out every possible address on your network. It reserves a range for DHCP — usually something like 192.168.1.100 to 192.168.1.254. Addresses outside that range (like 192.168.1.1 through 192.168.1.99) are left for static assignment. This separation prevents a device you manually assign an address to from conflicting with one DHCP just handed out.
You can change this range in your router's settings. If you have many devices, you might expand the DHCP range. If you have few devices and many servers or printers that need static addresses, you might shrink it. Most home routers come with reasonable defaults, so you rarely need to adjust this unless you are adding many fixed devices.
The router also sets the subnet mask — a number that tells devices which addresses are on the same local network and which ones are far away (on the internet). For home networks, this is almost always 255.255.255.0, which means all addresses starting with 192.168.1 are local, and everything else goes through the router to the internet.
Why DHCP is a security starting point
DHCP is not a security tool by itself, but it is where security begins. Your router's DHCP server only hands out addresses to devices it recognizes — or, in an open network, to any device that asks. This is why the first step in securing a home network is turning on Wi-Fi encryption: it prevents unknown devices from even reaching the point of asking for an address.
If someone connects to your network without permission, they can request an address from DHCP just like any legitimate device. Once they have one, they are on your local network and can see traffic between your other devices. Encryption stops them at the door. DHCP does not.
A more advanced threat is a rogue DHCP server — a device on your network that pretends to be your router and hands out fake addresses pointing to itself. When your devices try to reach the internet, they go through the rogue device instead, which can read or modify their traffic. This is rare in home networks because it requires someone to already be connected to your network, but it is why some routers let you disable DHCP and assign addresses manually: it removes the attack surface entirely.
Static addresses for devices that need them
Some devices should never use DHCP. A printer, network storage, or security camera needs the same address every time so you can reach it reliably. If its address changes, bookmarks break and automations fail. For these devices, you assign a static address manually — either on the device itself or by creating a DHCP reservation in your router.
A DHCP reservation is a compromise: you tell your router "Always give this printer the address 192.168.1.50," and the router never hands that address to any other device. The printer still uses DHCP, but it always gets the same lease. This is simpler than static assignment because the device does not need to be configured manually, and it prevents conflicts automatically.
To create a reservation, you log into your router's settings, find the device in the list of connected devices, and select "Reserve this address" or similar. The exact steps vary by router model, but most routers have this option in the DHCP or LAN settings section.
Disabling DHCP and going fully static
Some people disable DHCP entirely and assign every device a static address by hand. This is more find in theory — no DHCP server means no rogue DHCP attack — but it is also much more work. Every device needs configuration, and you have to track which addresses you have used so you do not create conflicts.
For a home network with a phone, laptop, tablet, printer, and a few smart devices, the work is not worth the security gain. For a small office or a network where you control every device, it might be. Most home routers let you disable DHCP in the settings, usually under LAN or DHCP options. If you do, make sure you write down the addresses you assign to each device, or you will not be able to find them later.
What happens when DHCP goes wrong
If DHCP is misconfigured, devices may not connect to the network at all, or they may get addresses that do not work. Common problems include a DHCP range that is too small (so new devices cannot get addresses), a lease time that is too short (so devices lose connection frequently), or a subnet mask that is wrong (so devices cannot reach each other).
If your devices suddenly cannot connect or keep dropping off the network, DHCP is often the culprit. Restarting your router usually fixes it by resetting DHCP to its defaults. If the problem persists, log into your router's settings and check that DHCP is enabled, the range includes enough addresses for your devices, and the lease time is reasonable (24 hours is standard).
Another sign of DHCP trouble is devices getting addresses that start with 169.254 instead of 192.168. This is a fallback address that devices use when DHCP fails to respond. If you see this, your router's DHCP server is not working, and you should restart the router or check its settings.
Frequently Asked Questions
Can I see which devices have which DHCP addresses?
Yes. Log into your router's settings (usually 192.168.1.1 or 192.168.0.1 in your browser) and look for a section called "Connected Devices," "DHCP Clients," or "LAN." You will see a list of every device currently using an address, its name, and its IP address. This is useful for finding a device on your network or checking if something unexpected is connected.
What is the difference between DHCP and DNS?
DHCP assigns IP addresses (numbers that identify devices). DNS translates domain names (like google.com) into IP addresses. They work together: DHCP gets your device on the network, and DNS helps it find websites. Your router usually runs both, though you can change your DNS settings separately.
If I restart my router, will my devices get new addresses?
Usually not. Most routers hand out the same address to the same device each time it reconnects, even after a restart. However, if a device has been disconnected for a long time, its lease may have expired, and it could get a different address. This is why DHCP reservations are useful for devices you need to find reliably.
Is DHCP required for a home network?
No, but it is much more convenient than the alternative. You can disable DHCP and assign every device a static address manually. For most home networks, DHCP saves time and prevents conflicts, so it is worth keeping on. Disabling it only makes sense if you have very few devices or specific security requirements.
Can a guest on my Wi-Fi see my DHCP addresses?
They can see their own address and the router's address, but not the addresses of other devices — unless your network is set up to allow it. By default, devices on a home network can see each other. If you want to hide devices from guests, most routers have a "guest network" feature that isolates guest traffic from your main network.