What Is a MAC Address, Explained Simply

May 7, 2026

If you’ve ever opened your router settings, read a Wi-Fi setup guide, or tried to see who’s connected to your network, you’ve probably run into a mysterious string like 00:1A:2B:3C:4D:5E. That’s a MAC address. It sounds technical, but it’s actually simple. In this article we’ll explain what a MAC address is in plain language: how it looks, the difference between MAC and IP, where it’s used — and we’ll give you an honest answer to the big question: can you be tracked by your MAC address over the internet? Spoiler: no, and we’ll explain exactly why.

A simple definition: the serial number of your network card

To understand what a MAC address is, picture a serial number stamped onto your device’s network card at the factory. Every device that can go online — a laptop, phone, TV, smart speaker, router — has a special component responsible for connecting: a network card (for cable) or a Wi-Fi module (for wireless). Each of these components has its own unique number. That number is the MAC address (MAC stands for Media Access Control).

The key thing to remember: a MAC address is the physical, hardware address of a network device. It’s tied not to a network, not to your provider, and not to your location, but to a specific piece of hardware. The manufacturer “bakes” it into the equipment during production, and in the classic sense it stays the same for the entire life of the device.

Here’s an analogy: a MAC address is like a car’s VIN number or an engine’s serial number. It doesn’t tell you where the car is right now or which roads it’s driving on. It only uniquely identifies that one specific piece of hardware among millions of identical ones.

Why is such an address needed at all? When several devices are connected to the same network — say, your home Wi-Fi — they need some way to tell each other apart at the most basic level. When data travels inside a local network, the equipment looks at the MAC address to decide: “this chunk of data is meant for this device, not that one.” A MAC address is a name tag on every network device within a single network.

What a MAC address looks like

A MAC address is six pairs of characters separated by colons or hyphens. For example:

00:1A:2B:3C:4D:5E
00-1A-2B-3C-4D-5E
001A.2B3C.4D5E

All three notations mean the same thing — they’re just different ways of writing it. The colon version is the one you’ll see most often.

Each pair uses hexadecimal characters: digits 0 through 9 and letters A through F. Don’t let the word “hexadecimal” scare you — it’s just a way of writing numbers where letters follow after nine. A MAC address has 12 such characters grouped into 6 pairs. That’s enough to give a unique number to hundreds of trillions of devices.

An interesting detail: a MAC address splits into two halves. The first three pairs are the manufacturer code. From them you can tell which company made the network card: Apple, Samsung, Intel, TP-Link, and so on. These codes are public, and there are databases that identify the brand from the opening characters. The last three pairs are the unique serial number of that specific device, assigned by the manufacturer so two units never collide.

So if you see an unfamiliar MAC in your router’s device list, the first half can sometimes hint at what the gadget is — for example, that it’s an Apple device or a camera from a particular brand.

How MAC differs from an IP address

This is the most common question, and it’s where a lot of people get confused. Your device has both a MAC address and an IP address at the same time, but they’re completely different things that work at different levels. Let’s go through it.

A MAC address is permanent and tied to the hardware. The factory assigns it to the network card. In its classic form it doesn’t change: wherever you take your laptop — home, a café, the office — its Wi-Fi module’s MAC stays the same. It’s the device’s own “passport.”

An IP address is assigned by the network and can change. When you connect to Wi-Fi, the router gives your device an IP address from its range. Connect to a different network and you get a different IP. An IP address tells you where a device is on the network right now, not what hardware it is. If you want to understand IP in more depth, we have a separate article: What Is an IP Address, Explained Simply.

The clearest postal analogy:

An IP address is a mailing address that letters travel to from across the world. Move to a different city and the address changes.
A MAC address is the resident’s name written on the apartment door. The name stays with the person wherever they move, but outside the building the mail carrier works with the address, not the name.

And there’s one more crucial difference, the very reason we’re writing this article: scope. An IP address works globally — data uses it to find its way across the entire internet. A MAC address works only within your local network — it never travels past the nearest router. More on that below in the privacy section, because that’s exactly where the biggest myth is born.

In short:

Property	MAC address	IP address
Tied to	Hardware (network card)	Network
Permanence	Permanent	Can change
Assigned by	Manufacturer	Network/router/provider
Scope	Local network only	The whole internet
Looks like	`00:1A:2B:3C:4D:5E`	`192.168.1.5`

Where a MAC address is used

Since a MAC address works inside the local network, that’s exactly where all its usefulness lives. Here are the main scenarios.

Delivering data inside the local network. This is the main job. When your laptop and phone exchange data over home Wi-Fi, or when the router sends a page to your specific device, at a low level the equipment addresses packets by MAC. It happens automatically and you never have to think about it — but without MAC, the local network simply wouldn’t work.

Wi-Fi and device identification. When a device connects to a Wi-Fi access point, it “introduces itself” with its MAC address. That’s why your router’s panel shows a list of connected clients with their MAC addresses. It helps you see how many devices are on the network and which ones. If you’d like to check who’s on your network, see our article Who Is Connected to My Wi-Fi.

Handing out IP addresses (DHCP). The router gives devices IP addresses and remembers which MAC got which IP. This lets you “reserve” a fixed local IP for a specific device — the router recognizes it by MAC and always hands it the same address.

MAC filtering. Routers have a feature that lets you allow or block specific MAC addresses from connecting. At first glance it looks like handy protection, but in practice it’s weak — we’ll explain why in a separate section below.

Access control in organizations. In offices and enterprises, MAC addresses are sometimes used to bind devices to a network, track inventory, or apply network policies. But all of this happens inside the local infrastructure, not over the internet.

Notice that in every scenario, MAC works within a single network. That’s not a coincidence — it’s a fundamental property we’ll come back to.

How to find your MAC address

Finding your device’s MAC takes about a minute. Here are quick instructions for the most popular systems.

On Windows:

Press Win + R, type cmd, and press Enter — the command prompt opens.
Type ipconfig /all and press Enter.
Find your network adapter (Wi-Fi or Ethernet) and the line “Physical Address” — that’s the MAC address.

An alternative path is through Settings → Network & Internet → properties of your connection, where the physical (MAC) address is also listed.

On Android:

Open Settings → About phone → Status (or Details) → find the “Wi-Fi MAC address” line. The exact location depends on the manufacturer and Android version, but look for the section with status or device information.

On iPhone:

Open Settings → General → About → find the “Wi-Fi Address” line. That’s the MAC address of your phone’s Wi-Fi module.

One important note: on modern phones, the MAC you see when connected to a specific network may not be the “real” hardware one — it may be random. Why this is done is the most interesting part, and it’s the subject of the next section.

Privacy: MAC randomization and whether you can be tracked

Here we reach the most important part of the article — the part worth reading to the end. A lot of fear swirls around MAC addresses, and most of it is based on a misunderstanding.

Why phones “invent” a random MAC

In the past, a MAC address was permanent and unique, and that created a privacy problem — but not on the internet, in the physical world. Imagine walking through a mall with Wi-Fi turned on. Your phone constantly “looks around” for known networks and announces its MAC address as it does. Stores and ad systems installed Wi-Fi sensors and used that unchanging MAC to track which departments you visited, how often you came to the mall, how long you lingered at a display. The result was physical tracking of your movements through the store — without your knowledge.

To stop this, phone makers (both Apple and Google) introduced MAC randomization. Now, when scanning for networks and often when connecting to them, the phone uses a randomly generated MAC instead of the real hardware one. What’s more, the phone usually creates a separate “private” MAC for each Wi-Fi network. As a result, the sensors in stores see a different, meaningless address every time — and end-to-end tracking breaks.

This is a good feature that benefits you. On most phones it’s on by default, and you usually don’t need to touch it. Occasionally randomization gets in the way in specific cases (for example, if an office has strict MAC-based device binding) — in which case you can disable it for that particular network in Wi-Fi settings. But for your home network and public hotspots, it’s best left on.

Can a person be tracked by their MAC address

And now — the honest answer this whole article was written for. You cannot be tracked over the internet by your MAC address. This is a widespread myth, and it’s time to put it to rest for good.

The reason is simple and fundamental: a MAC address never leaves your local network. By the time your traffic heads out to the internet through the router, your device’s MAC address has already been “dropped.” The router talks to the outside world on its own behalf, and the websites you open see only your public IP address — not your MAC. Technically, a MAC address only “lives” on the segment between your device and the nearest network node (the router). Beyond that, it simply isn’t transmitted.

This means:

The website you open does not know your MAC address. It physically never reaches it.
Ad networks do not track you by MAC over the internet. They have no access to it.
Your identity cannot be “traced by MAC” across the network. That address simply isn’t in the data that goes outward.

So where is a MAC actually visible? Only to those on the same local network as you: your router, the Wi-Fi administrator at a café or office, other devices on the same network. It’s local information. Compare that to an IP address, which is visible to websites — though even from it, as we covered in our IP article, no one can learn your exact address or name.

So if someone tells you that “they tracked you by MAC address over the internet,” it’s technical illiteracy. There’s no need to worry about your MAC leaking out into the wider internet: it doesn’t go there.

MAC filtering on a router, and why it’s weak protection

Many people, after learning about MAC addresses, decide to use them to secure their Wi-Fi: “I’ll only allow my own devices by their MAC, and strangers won’t get in.” The idea is logical, but in practice this protection is weak and creates a false sense of security.

Here’s how MAC filtering works: in your router settings you build a “whitelist” of MAC addresses allowed to connect. The router rejects every other device. Sounds solid — but there are two big problems.

Problem one: a MAC address is easy to spoof. Even though the hardware MAC is “baked” into the silicon, it can be overridden in software in just a couple of clicks on almost any device — this is called MAC spoofing. An attacker only needs to “listen in” on your Wi-Fi: the MAC addresses of allowed devices are transmitted in the clear, unencrypted. After intercepting one of the allowed MACs, the attacker assigns it to their own device — and the filter lets them in as “one of yours.” Protection that can be bypassed in a minute isn’t really protection.

Problem two: it’s inconvenient for you. Every time a guest arrives with a new phone, or you buy a new gadget, you have to manually add its MAC to the list. It’s annoying and time-consuming, and it adds almost no real security.

So what actually protects Wi-Fi? Strong encryption and a solid password. The modern WPA3 standard (or at least WPA2) encrypts all traffic, and without knowing the password it’s impossible to connect — unlike the MAC, the password is never sent in the clear. A long, unique passphrase of several words shuts down the threat far more effectively than any MAC filter. We’ve put together a detailed breakdown of what genuinely works versus what only creates the illusion of protection in our big guide How to Secure Your Home Network.

The takeaway: MAC filtering isn’t harmful, but it isn’t real protection either. You can’t rely on it as your main barrier. Think of it as a decorative lock that might stop a random neighbor, but not a determined attacker.

Short FAQ

What is a MAC address in simple terms? It’s a unique hardware number for a network device — something like the serial number of a network card or Wi-Fi module. It’s tied to a specific piece of hardware, assigned by the manufacturer, and used to address data inside the local network.

What’s the difference between MAC and IP? A MAC address is permanent and tied to the device (the hardware), while an IP address is assigned by the network and can change as you connect to different networks. The key point: MAC works only inside the local network and doesn’t go out to the internet, whereas IP is a global address that websites can see.

Can I be tracked by my MAC address over the internet? No. A MAC address never leaves your local network — it isn’t transmitted beyond the nearest router. Websites and ad networks can’t see your MAC. You can only be tracked by MAC within a single local network (for example, by the Wi-Fi administrator at a café), not over the internet.

Why does my phone change (randomize) its MAC address? So you can’t be physically tracked by Wi-Fi sensors in stores and public places. With a permanent MAC, your movements could be followed; a random MAC for each network breaks that tracking. It’s a useful feature and best left on.

Is MAC filtering on a router reliable? No, it’s weak protection. A MAC address is easy to spoof, and allowed addresses are broadcast in the clear, so an attacker can pose as “one of your” devices. Real Wi-Fi protection is WPA3/WPA2 encryption and a strong password.

How do I find my MAC address? On Windows — run ipconfig /all in the command prompt and look at the “Physical Address” line. On Android — Settings → About phone → Status → “Wi-Fi MAC address.” On iPhone — Settings → General → About → “Wi-Fi Address.”

Summary

A MAC address is the physical, hardware address of a network device — essentially the serial number of its network card, in the form 00:1A:2B:3C:4D:5E. It’s permanent, assigned by the manufacturer, and used to address data inside the local network. Unlike an IP address, which is assigned by the network, changes, and is visible to websites across the internet, a MAC stays local and never goes out. That’s exactly why you can’t be tracked by MAC over the internet — it’s a myth. Modern phones additionally randomize the MAC to protect you from physical tracking in public spaces. And MAC filtering on a router, despite popular belief, is weak protection: real Wi-Fi security comes from encryption and a strong password.

If you care about your privacy online, start by understanding what’s actually visible about you. Check your public IP and geolocation with our free What Is My IP tool, and to truly hide your trail on the internet, try GANVAS VPN — fast servers, modern protocols, and support for your own configs. And don’t forget the basics of home network hygiene — that’s the subject of our detailed guide How to Secure Your Home Network.