Three Wi‑Fi warnings that mean a stranger’s inside

three signs – Slowdowns, unknown devices, or sudden loss of Wi‑Fi can point to unauthorized access. The fix starts with confirming activity in your router gateway or using scanners, then locking things down by changing passwords and upgrading security.
The first time your home internet drags its feet, it’s easy to blame the provider. The second time, you start watching the little lights on the router—almost like you’re waiting for proof.
Then the pattern shows up: unfamiliar behavior in your own home network. If someone is using your Wi‑Fi without permission, the damage isn’t limited to stolen bandwidth. It can also spill into your privacy and security. expose your data. and even connect your network to illegal activity someone else commits.
Here are three warning signs to watch for—and what to do next.
Your internet feels slow
A sudden shift from fast to sluggish. or unexpected drops and lags. can have plenty of legitimate causes. Faulty router hardware. damage to external cables. weak signal strength. and problems on your internet service provider’s side—including regional blackouts—can all play a role. Speed drops can also happen if you use the wrong VPN or VPN server.
But unwanted visitors can cause the same kind of misery. When more devices connect to a Wi‑Fi point, traffic demand rises. That’s especially noticeable when someone is streaming in high resolution, gaming online, or torrenting large files.
If you’re trying to separate normal issues from suspicious ones, start with your ISP’s service status. You can also check disruptions to online services using downforeveryoneorjustme.com. and then inspect your hardware. including cables and connectors—because loose cabling can create broadband problems too.
Unknown or unrecognized devices on your network
If someone is using your Wi‑Fi without permission, they’ll typically need to connect a device—such as a smartphone, a PC, a speaker, or a smart home device.
The strain can show up in everyday ways: low speeds, high traffic loads, video buffering, and even your own devices disconnecting without warning. When too many devices—authorized or otherwise—fight for the same bandwidth, the whole network starts to creak.
You can also look for activity indicators on the router itself. Flashing lights may point to network activity when you don’t expect it. Still, you should check your router’s manual for other reasons those lights might behave that way before assuming unknown devices are the cause.
Router stops working, or you lose Wi‑Fi access
Wi‑Fi that suddenly stops working can be another sign of tampering. It becomes more suspicious when the network turns off and on at specific times—for example, when you’re playing music.
To keep access to a Wi‑Fi hotspot, someone typically needs to be nearby. If you have tense relationships with neighbors or anyone else in your home. that matters. because there’s always a risk that someone is deliberately messing with the network. For instance, if someone has accessed your Wi‑Fi and its gateway, they can disconnect your connection at any time.
Another red flag is the password changing. If the Wi‑Fi password has changed and you’ve been kicked out, it may mean someone seized control and altered it without your permission.
Of course, not every outage is an intruder. Routers fail over time, ISPs can provide poor service, and weather conditions may impact connectivity. The difference is timing: if interruptions follow a pattern—like happening at the same hour every day—it can look deliberate.
How someone can use your Wi‑Fi without permission
The simplest path in most cases is also the most basic: your password.
A weak, easy‑to‑guess password can be the problem—or the password might have been shared without your consent. Attackers can also use brute‑force or dictionary attacks: automated attempts that test combinations of letters. numbers. phrases. and special characters until the password is guessed and the network is broken into.
Wi‑Fi security standards also matter. Wi‑Fi includes WPA, WPA2, and WPA3. You can find out which protocol your network uses by checking the router’s wireless settings. On macOS, hold down the option key and click your Wi‑Fi icon; on Windows, go to settings, Wi‑Fi, and then the security tab.
Higher standards are harder to break into. but poor passwords and misconfigurations can still make intrusion possible even when the protocol isn’t the newest. Outdated router firmware can also leave vulnerabilities exposed. You can check the firmware version on your router gateway to see whether updates happen automatically or whether you need to update manually through the web.
How to find suspicious devices on your network
The quickest way to confirm your suspicion is to run a network scan.
First, access your router’s gateway through a browser. Your router manufacturer or ISP should provide the address you need, but if you’re unsure, try 192.168.0.1 or 192.168.1.1. Another path is through your smartphone: open your smartphone’s Wi‑Fi settings. tap your home Wi‑Fi hotspot. then go to Settings and choose “Manage router” if that option appears—it should take you straight to the gateway.
When you connect to the gateway, you may see a warning that the connection isn’t private. You’ll still need to sign in with your hub or router password. Once you’re in, depending on your ISP, you may be able to view a list of devices on your network.
If you’d rather use a dedicated tool, you can also use a network scanner to display devices and IP addresses, then look for anything unfamiliar. Network scanner options mentioned include Fing, Nmap, and WiFi Analyzer.
What else can help confirm Wi‑Fi interlopers
A speed check can give you clues. especially if you run it at different times of day. If your connection starts low and you later notice an immediate drop—like when someone is streaming Netflix in 4K after coming home—you may be seeing the effect of extra users on the network. or even trouble loading anything at all.
Connection logs can sharpen the picture. Tools such as Nmap and Fing can generate logs that show what’s connecting, for how long, and when.
Even your surroundings can matter. If a neighbor is blaring their Spotify playlist and the music stops when you disconnect your router, you may have found the cause of intermittent service.
How to stop network intruders
Change your password
If someone is using your Wi‑Fi by guessing the password, changing it is the fastest way to kick them out. Change it by accessing your router’s gateway as described above.
Choose a better password
Don’t rely on default credentials to protect your Wi‑Fi, and avoid something easy to remember or something you’d share with guests. Make it complex. You’ll also have to reconnect every device, because changing your password removes devices logged in with the old credentials.
While you’re not advised to write down passwords for important online accounts, for residential Wi‑Fi there’s little risk in writing it down and keeping it somewhere safe at home.
Check your admin password
The router or ISP gateway usually has an administrator password too. If the admin password is still on default options like admin/admin, change it to something stronger and store it somewhere safe.
Check your Wi‑Fi security and upgrade if necessary
If your network is using an obsolete or legacy protocol—such as WPA—it may be easier for attackers to break into. regardless of other steps. Upgrading involves changing the encryption standard under the router gateway’s security or wireless settings. You may need to set a new password and reconnect your devices afterward. WPA3 is the recommended best choice.
Consider setting up a guest network
If you share Wi‑Fi occasionally, a guest network can help keep control centralized. A guest network creates a separate access point away from your main network and devices. giving you more control over who connects. for how long. and how much bandwidth they can use.
By the time your router lights are flashing and your household devices are dropping off one by one. it can feel personal. But the steps are practical: verify what’s connected. change the credentials. strengthen the security. and separate guests from your main network—so your Wi‑Fi goes back to belonging to you again.
Wi-Fi security network intruders router gateway WPA WPA2 WPA3 Fing Nmap WiFi Analyzer password change guest network