MAC addresses and restricting guest Wi-Fi access on your home network

A MAC address is a unique 48-bit identifier assigned to the network adapter of every Wi-Fi and Ethernet-capable gadget, written as six pairs of hexadecimal characters separated by colons or hyphens. The first half points to the manufacturer of the chipset, while the second half is unique to each piece of hardware. Learn more about Edge Computing In Retail Personalizing Customer Experiences In Real Time 218576.

For most users the address stays invisible until they start digging into router settings, yet it underpins many everyday tasks. Knowing what the string means makes it easier to manage a busy household network without calling a technician.

Australia has seen an explosion of connected devices thanks to the National Broadband Network rolling out fibre across suburbs in Sydney, Melbourne, Brisbane, Perth, and Adelaide. A typical household now juggles phones, tablets, smart TVs, and gaming consoles all hitting the same Wi-Fi, turning access control into something that affects everyday comfort.

The simplest way to give visitors internet without exposing your private gadgets is a guest network, paired with MAC filtering. Together, these features turn your home router into a bouncer that only lets approved hardware past the velvet rope.

How a MAC address actually works

Every network-capable device contains a chip with a globally unique identifier programmed by its maker. The Institute of Electrical and Electronics Engineers hands out blocks of addresses to each manufacturer, so the first six characters reveal the brand of the Wi-Fi or Ethernet card inside. Apple's iPhones, Samsung's Galaxy range, and TP-Link extenders all come from different allocation pools.

Because the identifier lives in the hardware itself, it does not change when you move networks, reset the operating system, or travel overseas. That persistence is what routers rely on to recognise a returning laptop or reject an unfamiliar one. The public IP handed to you by Telstra, Optus, or TPG has nothing to do with the MAC identifier on your Wi-Fi card.

Where to find the MAC address on your gadgets

Locating the identifier is straightforward once you know where to look. On Windows 10 or 11, open Settings, head to Network and Internet, select Wi-Fi, then click Hardware Properties to read the Physical Address field. On macOS, the same information lives under System Settings, Network, and the Advanced tab.

Phones hide the address in different menus. iOS users find it under General, About, then Wi-Fi Address, while Android owners usually navigate to About Phone and then Status. Many Telstra and Optus-supplied modems also print the MAC on a sticker on the back of the unit alongside the serial number and default Wi-Fi password.

What MAC filtering really does

Filtering works by comparing each device's identifier against a list stored inside the modem or router. An allow-list lets through only those MAC addresses you have explicitly entered, while a block-list starts with everyone permitted and only rejects the addresses you have flagged.

A stranger with a brand-new phone cannot simply join the guest SSID unless you have already added their hardware. For Australian households running on NBN FTTP or HFC through a retailer-supplied gateway, this layer sits on top of standard WPA2 or WPA3 password protection.

Filtering is not encryption. Anyone sniffing your wireless traffic can see which MACs you send, and a moderately technical user can spoof an allowed address using free software. Treat filtering as one layer in a stack, useful for casual guests, but never the only defence against a determined attacker.

Setting up a guest network on Australian broadband hardware

Most modern routers ship with a guest network feature ready to enable. On a Telstra Smart Modem Gen 3, the option sits under Wi-Fi, then Guest Network, and you can give it a separate name and password. The same general layout applies to Netgear Nighthawk, ASUS, and TP-Link units sold through JB Hi-Fi and Officeworks across the country.

Once enabled, the guest network runs in isolation from your main Wi-Fi. A visitor joining the guest SSID cannot reach your NAS, smart home hub, or printer, even if they try. Combined with MAC filtering, you decide exactly which devices those visitors can bring along.

Enable the feature, then return to the connected devices list to capture the MAC addresses of any hardware you intend to allow. The router displays them as strings you can copy straight into the filter table.

Adding devices to the guest allow-list step by step

Connect to the router's admin interface, usually through 192.168.0.1 or 192.168.1.1 in a browser. Log in with the credentials printed on the device or set during installation, then navigate to the wireless or access control menu, where you should see a list of currently connected gadgets with their MAC addresses alongside.

Tick or add the addresses you want to permit on the guest network, save the configuration, and reboot if the router prompts you. Test by asking your guest to join with the new SSID and password. If their device connects, the filter is working. If it does not, double-check that you copied all six pairs and used the format your router expects.

Some routers let you create profiles or schedule access windows, which helps in share houses across Melbourne and Adelaide where flatmates come and go at irregular hours and you want to avoid handing out the main Wi-Fi password to every casual visitor.

When MAC filtering is worth it and when it isn't

For a quiet household with one or two regular guests, MAC filtering on a guest network adds a small but useful shield. It also helps parents keep an eye on which devices are talking to the home network, since every addition is an item you actively approved. Combined with a strong WPA3 password, it is a sensible baseline for most suburban Australian homes.

It becomes less useful in dense apartment blocks in Brisbane or Perth where neighbour interference already forces frequent reconnects. Spoofing is also trivial, so do not rely on filtering to protect confidential data. For anything sensitive, run a VPN and keep work devices on a separate VLAN if your router supports it.

Retailers and venues take device tracking much further than home users ever need to. Some use MAC-style identifiers combined with edge computing in retail to personalise in-store experiences in real time, gathering location data as customers move between departments. Home filtering operates on the same principle at a much smaller scale.

Other tools that complement MAC filtering

The Australian Communications and Media Authority recommends keeping router firmware up to date as the most effective baseline for any home network. Pair that with a unique, long Wi-Fi password rather than the default one on the sticker, and you have already removed most casual threats.

Gamers running PCs and consoles on the main network may want to look into display features that affect how smooth games feel on screen. The guide on what is adaptive sync and does it matter for casual gamers explains variable refresh rate technology in plain language. That is a separate concern from network access, but it often comes up when households optimise their gaming setups.

If your router supports it, schedule firmware updates overnight, turn off Universal Plug and Play if you do not need it, and consider placing IoT devices on their own SSID. The most practical first move is to open your router's admin page tonight and write down the MAC of one guest device you intend to allow this week.