What Is a MAC Address and When Do You Need It?
Short answer
A MAC address is a 12-character hardware identifier for a network adapter, used only on your local network, and it never travels across the internet. You need it for router device filters, campus or office Wi-Fi registration, and assigning a fixed local IP. Find it under Wi-Fi details on any device.
On this page
A MAC address is a twelve-character identifier burned into a network adapter at the factory. Media Access Control, if you want the expansion, though the name tells you nothing useful.
It exists to let devices on the same local network address each other. Ethernet and Wi-Fi both operate at a layer below IP, and at that layer, the MAC address is the only identity there is. Once a packet leaves your router for the wider internet, the MAC address is discarded and replaced.
That last point matters more than any other: a MAC address does not travel. The websites you visit cannot see it, and nor can your internet provider.
What it looks like
Six pairs of hexadecimal digits, written with colons or hyphens:
A4:83:E7:2C:9B:14The first three pairs identify the manufacturer of the chip, drawn from a public registry. The last three are that manufacturer’s serial allocation. This is why a router’s connected-device list can tell you that an unlabelled device is made by Apple or Espressif without knowing anything else about it.
Each adapter gets its own. A laptop with Wi-Fi, Ethernet and Bluetooth has three different MAC addresses, and the one your router shows depends on how you are connected at the time. People regularly register the Ethernet address with an office network and then wonder why Wi-Fi is refused.
Where to find yours
| Device | Path |
|---|---|
| Windows 11 | Settings → Network & internet → Wi-Fi → Hardware properties → Physical address |
| macOS | System Settings → Network → Wi-Fi → Details → Hardware |
| iPhone | Settings → General → About → Wi-Fi Address |
| Android | Settings → About phone → Status → Wi-Fi MAC address |
| Any OS, command line | ipconfig /all on Windows, ifconfig on macOS and Linux |
Be aware of which address a device is reporting. On iPhone, the Wi-Fi Address under About is the hardware one. The address actually in use on a given network is shown under Settings → Wi-Fi → the i next to the network, and on modern iOS these differ by design.
The four times you genuinely need it
Registering on a managed network. Universities, offices, hotels and conference venues often require devices to be enrolled by MAC address before they get an address. This is the most common reason anyone looks one up.
Assigning a fixed local IP. A DHCP reservation in your router ties a specific local IP to a specific MAC, so your printer or NAS is always at the same address. More reliable than configuring a static IP on the device itself, because the router then knows not to hand that address to anyone else.
Wake-on-LAN. The magic packet that powers on a sleeping machine is addressed to its MAC.
Identifying an unknown device on your network. The router’s device list shows MAC addresses, and the manufacturer prefix often reveals what the mystery entry is. Useful when something is consuming bandwidth and you cannot work out what, which is a different problem from Wi-Fi that is slow despite a strong signal.
Why your phone randomises it
Until a few years ago, a phone broadcast its hardware MAC address whenever it scanned for Wi-Fi, continuously, in every shopping centre, airport and high street. Retail analytics companies built businesses on collecting those broadcasts to track footfall and repeat visits, without consent and without the phone ever joining a network.
iOS and Android now generate a private address per network: a random MAC, different for each saved network, and stable for that network so your reservations and filters keep working. Scanning uses randomised addresses too.
It is on by default. Where you might need to turn it off for a specific network:
- iPhone: Settings → Wi-Fi → the i → Private Wi-Fi Address → Fixed. (On iOS 18 and later this appears as Rotating / Fixed / Off.)
- Android: Settings → Network & internet → Internet → the gear next to the network → Privacy → Use device MAC.
The only real reason to switch it off is a network that filters by MAC or ties your registration to the hardware address. Leave it on everywhere else.
Why MAC filtering is not security
Routers offer a MAC allowlist and it reliably gets described as a security feature. It is not, and the reason is structural rather than a flaw in any implementation.
MAC addresses appear in the unencrypted header of every Wi-Fi frame. They have to, because devices need to read them before any encryption is negotiated. So anyone within range can observe the MAC addresses of every connected device using freely available software, and every operating system allows setting an arbitrary MAC address on an adapter.
An attacker therefore watches, copies an allowed address, waits for that device to leave, and connects. The allowlist has cost them a few minutes.
What does work: WPA3, or WPA2 with a long random passphrase, and disabling WPS. That is the actual boundary. Treat MAC filtering as an inventory tool for knowing which devices are on your network, not as a lock.
Realistic expectations
For most people a MAC address is something you look up once, paste into a form, and never think about again. Nothing on your home network needs it configured.
If you are chasing an unrecognised device on your router’s list, the manufacturer prefix usually identifies it within a minute, and smart plugs, televisions and doorbells account for the majority of unfamiliar entries. If after that you genuinely cannot account for a device, change the Wi-Fi password — that removes everything and forces each legitimate device to reconnect, which is both the fix and the audit.