Open your router’s admin page and you will find a list of connected devices, each tagged with a string like 3C:5A:B4:1F:88:0D. That string is a MAC address, the hardware identity of the network chip inside a phone, laptop, or smart plug. People often meet it while trying to block a device or tighten security, then wonder how much protection it really offers. Here you will learn what a MAC address identifies, how it differs from an IP address, why filtering by it is weak, and why modern phones deliberately change theirs.
What the address identifies
A MAC address, short for media access control address, belongs to a specific network interface rather than to a whole device. It is a 48-bit number, written as six pairs of hexadecimal digits, and it is set at the factory. The first half identifies the maker of the chip, and the second half is a serial number that maker assigns. A phone with both Wi-Fi and Bluetooth actually carries more than one, because each radio is a separate interface.
This identity operates on the local link, the single hop between your device and the router or switch it plugs into. Whether that device joins over old or recent wireless, a distinction the guide on the Wi-Fi generations lays out, its adapter still presents the same hardware address to the network. The address is how the local network tells one connected interface from another.
MAC and IP are different jobs
A MAC address and an IP address answer different questions. The MAC address is fixed to the hardware and only has meaning on your local network segment. The IP address is assigned by the network and can change, and it is what lets traffic travel across routers to reach the wider internet. Think of the MAC as the label on a specific mailbox and the IP as the postal address that gets a letter to the building.
When a packet crosses the internet, routers read IP addresses to decide the route, while the MAC address is rewritten at each hop to point at the next piece of local hardware. Newer addressing schemes change how those IPs look and behave, which the overview in the newer internet addressing system introduces, yet the MAC layer underneath keeps doing the same local job.
The two addresses compared
The short table below lines up the traits that most often cause confusion.
| Trait | MAC address | IP address |
|---|---|---|
| Assigned by | Chip maker, at the factory | The network or provider |
| Scope | Local link only | Across the whole internet |
| Changes | Fixed, though it can be spoofed | Often, as the network reassigns |
| Format | Six hexadecimal pairs | Four numbers, or IPv6 groups |
| Used to | Identify local hardware | Route traffic between networks |
The limits of MAC filtering
Many routers let you allow or block specific MAC addresses, a feature sold as a way to keep unwanted devices off your Wi-Fi. The idea sounds reasonable: list the addresses you trust and refuse the rest. In practice the protection is thin, because a MAC address is not secret. It travels in the clear at the start of every wireless frame, so anyone nearby with ordinary monitoring tools can read the addresses already using your network.
Once an attacker sees an allowed address, they can set their own adapter to present the same one, a trick called spoofing that takes seconds with free software. The filter then waves them through as if they were your laptop. MAC filtering can still stop a casual neighbor or a child’s device, but it is a convenience control, not a real barrier, and it should never stand in for a strong Wi-Fi password.
Why phones now randomize the address
Because a MAC address is broadcast as devices look for networks, shops and public spaces once used it to track shoppers between visits and around a building. A phone probing for known networks was effectively announcing a stable serial number everywhere it went. To stop this, current versions of iOS and Android generate a random MAC address, often a different one for each network they join.
For you at home, this mostly means the address you see for a phone may not match what it shows elsewhere, and it can change after an update or a settings reset. If you rely on the address to recognize a device, you may need to switch randomization off for your own network in the phone’s Wi-Fi settings, which most systems allow on a per-network basis.
When the address genuinely matters
Despite its weakness as a security tool, the MAC address is useful for organizing a network. You can reserve a fixed IP for a device by its MAC, so your printer or home server always answers at the same number. It also helps you identify which gadget is which, handy when a crowded band is full of similar smart devices, a situation the piece on the crowded 2.4 gigahertz band examines.
Network administrators also use the address for legitimate access control paired with stronger systems, and internet providers occasionally tie a service to the MAC of your modem. For most home users, though, the practical value is naming and reserving devices rather than defending the network from outsiders.
What to take from this
A MAC address is a permanent-looking hardware label that matters only on the local hop, while the IP address is the changeable, routable number that carries your traffic across the internet. The two work together, one identifying nearby hardware and the other steering packets between networks. Understanding the split makes router settings far less mysterious, from address reservations to the device list itself.
Treat MAC filtering as a light convenience rather than security, and expect phone addresses to shift as randomization does its job. When a device keeps dropping and you are hunting the culprit, its MAC helps you pin down exactly which one before you weigh other causes such as the radio problems covered in common sources of wireless interference. Used that way, the address is a practical tool, not a lock.
Frequently asked questions
What is a MAC address?
A MAC address is the hardware identifier built into a network interface, such as a Wi-Fi or Ethernet adapter. It is a 48-bit value shown as six pairs of hexadecimal digits, set by the chip maker at the factory. It identifies one interface on the local network, letting a router or switch tell connected devices apart. A single device can hold several, one per radio or port.
Is MAC filtering good security?
Not really. MAC addresses travel unencrypted in every wireless frame, so anyone nearby can read the ones already permitted and copy one onto their own adapter in seconds. That spoofing defeats the filter entirely. It may deter a casual neighbor, but it offers no real defense against a determined intruder. A strong WPA2 or WPA3 password protects your network far more effectively than any MAC list.
Why does my phone’s MAC address change?
Modern iOS and Android generate a random MAC address for privacy, often a distinct one per network. This stops shops and public networks from tracking your phone by a fixed hardware serial as you move between places. The address can also change after an update or reset. For your home network, you can usually turn randomization off per network so the phone keeps a steady address you recognize.
