How to change the MAC address from Device Manager

Your network card's MAC address is one of those technical details we almost never look at… until one day our connection stops working, we get blocked on a network, or we want to improve our privacy. That's when the questions start: what exactly is it, what's it for, what happens if I change it, and, above all, how do I modify it without messing things up and losing my internet connection?

Modifying the MAC address from Device Manager in Windows is simpler than it seems , but there's much more to it than that: legal risks, Wi-Fi network security, MAC filtering on routers, spoofing, random addresses, external tools, and more. Let's look at everything carefully with clear examples, so you know exactly what you're doing and when it's in your best interest to do so.

What is a MAC address and how is it identified on your computer?

The MAC (Media Access Control) address is the physical "ID" of your network card . Every network adapter, whether Ethernet, Wi-Fi, Bluetooth, or a virtual interface, has a unique 48-bit identifier printed at the factory, represented as 12 hexadecimal characters grouped into six pairs (for example, 3C-4A-92-1F-2B-0D).

These 12 digits are not randomly assigned : the first six identify the network card manufacturer, known as the OUI (Organizationally Unique Identifier), and are assigned by the IEEE; the last six correspond to a specific model or controller number, chosen by the manufacturer. The first three bytes (24 bits) identify the vendor; the next three distinguish each specific card.

To view the MAC address of your network interfaces in Windows , the most direct way is to open a command prompt ( cmd ) and run the command `ipconfig /all` . Unlike the classic `ipconfig` command , this variant displays very detailed information about all available network interfaces: physical adapters, Wi-Fi, Bluetooth, virtual tunnels, etc., provided they exist on the computer.

In the output of ipconfig /all, you'll need to locate your actual adapter (usually "Ethernet Adapter" for wired connections, or "Wireless LAN Adapter" for Wi-Fi). In the corresponding block, you'll see a field called Physical Address ; this value is the MAC address of that adapter. At a glance, you can also see if DHCP is enabled, the assigned IP address, the gateway, DNS servers, and the connection status.

Keep in mind that if you use virtualization software (virtual machines with VMware, VirtualBox, Hyper-V, etc.), virtual adapters with their own MAC addresses will appear. When changing the IP address from Windows, you'll usually need the physical adapter you use to connect to the internet.

How a MAC address works and how it is constructed

A MAC address consists of 6 bytes (48 bits) expressed in hexadecimal . It is still a relatively short binary number, but the hexadecimal notation makes it more manageable for humans. For example, a MAC address like 00-1A-2B-3C-4D-5E is internally equivalent to a sequence of bits that the hardware interprets at the data link layer.

The first 6 digits (3 bytes) are the manufacturer's OUI . This code is assigned by the IEEE to each company that manufactures network cards or devices with connectivity. Thanks to this, networking tools can infer which brand is behind a MAC address simply by looking at its first few bytes.

The remaining six digits are chosen by the manufacturer to identify each interface . By combining the OUI with this suffix, the aim is to ensure that no two cards in the world have the same MAC address. In practice, duplicates can occur in specific environments (virtualization, manual spoofing, configuration errors), but the original design prioritizes uniqueness.

In Ethernet and Wi-Fi networks, the MAC address is used to send packets to the correct device within the same local network. Without a valid MAC address, a network card "doesn't exist" for communication purposes on the LAN, which is why it's such critical hardware information.

MAC filtering: whitelists, blacklists and their limits

MAC filtering is a feature of many routers and managed switches that allows you to decide which devices can connect based on their MAC address. It's a type of basic access control at Layer 2, which relies on the physical identity of network interface cards (NICs).

On a home router, this is usually implemented as a "whitelist" : you enter the MAC addresses you want to allow, and any other MAC address that tries to connect to the Wi-Fi will be blocked. This is useful, for example, to prevent the TV, a child's tablet, or any other device from connecting to the network at certain times.

There is also the reverse option, the "blacklist ," where only the MAC addresses included on the list are blocked, and all others can connect. On managed switches, this is combined with Port Security features: if an unauthorized MAC address appears on a specific port, traffic can be blocked or the port can even be automatically shut down.

In practice, MAC filtering is a very weak security measure . Once an attacker obtains the MAC address of an authorized device—for example, by sniffing traffic with tools like Wireshark—they can change their own MAC address to impersonate that device and easily bypass the whitelist.

In professional environments, it is complemented by more robust mechanisms , such as IP-MAC Binding (associating IP, MAC, port and VLAN on the switch) or 802.1X authentication, which forces each client to authenticate before having access to the network, making it much more difficult for a simple copy of the MAC address to be sufficient to gain entry.

Advantages and disadvantages of MAC filtering

The main advantage of MAC filtering is fine-grained access control : the administrator can define exactly which devices are allowed to connect. This adds a small extra layer of security, especially useful in home Wi-Fi networks to block very basic unwanted connections.

It also helps protect shared resources within the network , as only devices with authorized MAC addresses can access them. This can reduce certain types of unauthorized access and, in limited scenarios, minimize some less sophisticated intrusion attempts.

Another benefit is the reduction of certain simple spoofing attacks , provided the attacker doesn't know the authorized MAC addresses. It's not foolproof, but it forces the intruder to take an extra step, such as capturing traffic first, instead of simply connecting without authorization.

However, MAC filtering is very easy to bypass . Any MAC spoofing tool allows you to change the address in seconds. On blacklists, simply replace the MAC address; on whitelists, capture a valid MAC address and clone the address of the authorized device.

Furthermore, it's extremely tedious to manage in medium or large networks : you have to constantly add or remove devices, deal with mobile phones that change their MAC addresses for privacy reasons, and keep dozens or even hundreds of entries up to date. In these scenarios, it becomes an operational nightmare with little real benefit.

Impact of MAC filtering on network performance

Enabling MAC filtering forces the router or switch to check each connection against its table of allowed or blocked addresses. In small networks, this is barely noticeable, but as the number of devices grows, this management can introduce some latency in establishing connections.

When a device attempts to connect, the network equipment checks the MAC address and decides whether or not to authorize data exchange. This process, while quick, adds processing load and, under critical conditions, can slightly increase response times, especially on heavily loaded, low-end equipment.

Managing MAC lists in environments with high device turnover —such as public networks, offices with many visitors, or heavily used Wi-Fi networks—is impractical. Besides the administrative burden, configuration errors are more likely and can lead to connection drops or exclude legitimate users.

In large networks, MAC filtering is generally discouraged as a sole measure , precisely because of the combination of potential performance loss, complex maintenance, and modest protection. Efforts are preferably focused on strong authentication, network segmentation, and robust encryption policies.

Why might someone want to change their MAC address?

Changing your MAC address isn't just a technical whim . There are very specific scenarios where it can make sense, both for security reasons and due to access problems or limitations imposed by third parties.

One of the most common reasons is privacy . The MAC address uniquely identifies your device on each local network. On public Wi-Fi networks, a malicious operator could record your movements or associate your device with certain activities, especially if you always use the same address.

Another common reason is to bypass MAC-based access restrictions . Some routers or Internet Service Provider (ISP) systems only allow connections from devices whose MAC address is in their database. If you change your network card or router without the ISP updating its lists, you could lose service until they update the registry, or until you clone your old MAC address onto the new device.

In the world of online gaming, MAC address bans are not uncommon . If a game blocks a specific address, the user cannot log in again from that computer, even if they switch accounts. Changing the address might allow them to regain access, but this raises serious legal and terms of service implications.

It can also be used to resolve network conflicts in the rare cases where two devices with the same MAC address are on the same LAN (something relatively common in poorly managed virtualization environments). Changing one of the MAC addresses usually resolves dropouts and misdirected packets.

Finally, there's its use in testing, auditing, and laboratory environments . Administrators and security specialists change the MAC address to simulate different clients, reproduce failures, measure security system reactions, or validate filtering configurations without exposing the real MAC address of their devices.

Risks, legality and drawbacks of modifying the MAC address

Although changing the MAC address is technically simple, it's not always harmless . There are several drawbacks and risks to consider before attempting to change it, especially if you intend to circumvent restrictions imposed by third parties.

The first problem is incompatibility with some networks and services . If a server, captive portal, or authentication system expects to see your original MAC address and suddenly finds a different one, it may deny access or cause strange errors that are difficult to diagnose.

You may also experience temporary connection interruptions when you change your MAC address: the router, DHCP server, or neighboring devices take a while to "forget" the old MAC address and learn the new one. This is especially annoying if you rely on a stable connection for work or online gaming.

From a legal and security standpoint, things get complicated when MAC spoofing is used to access networks you shouldn't have access to or to bypass bans. In many countries, this can be considered unauthorized access or fraud, and at best, it violates the rules of the affected service.

On a technical level, changing the MAC address is not trivial for everyone . It requires some networking knowledge, an understanding of address formats, and the ability to revert changes if problems arise. An error when entering the MAC address can leave an adapter without connectivity until it is corrected.

Finally, changing the MAC address makes diagnostics more difficult . For both administrators and users, tracking down issues becomes more complicated when devices constantly change their physical identity, because network logs no longer reflect the actual state of the device.

MAC spoofing and malicious use of address change

MAC address spoofing involves altering a network interface card's (NIC) address to make it appear as if it belongs to another device on the network. From a technical standpoint, it's easy, and precisely for this reason, relying solely on MAC address security in a robust infrastructure is not recommended.

An attacker who obtains the list of allowed MAC addresses on a network (for example, by extracting it from the router's control panel or a switch's configuration) has almost everything they need. They simply choose one of those authorized addresses, configure it on their network card, and connect as if they were a legitimate device.

Even without direct access to that list, you can capture network traffic using free tools like Wireshark. By observing the circulating packets, you can easily see which MAC addresses are active and which belong to authorized devices. Then you simply need to copy one of them.

Once inside, they can perform any malicious action attributable to the spoofed MAC address : scan ports, exfiltrate data, launch internal attacks, etc. To anyone reviewing the logs, it will appear that the actions originated from that "innocent" machine.

To mitigate these situations, mechanisms such as ARP Binding or IP-MAC Binding are used , where a specific MAC address is always associated with a particular IP address and, in advanced switches, with a specific physical port and VLAN. If an attacker changes their MAC address but is not on the expected port or VLAN, the system can automatically block them.

Random MAC addresses and random hardware function in Windows

Many modern devices implement random MAC addresses as a privacy measure, especially on mobile phones and recent operating systems . The idea is that the device doesn't always broadcast the same MAC address when scanning Wi-Fi networks, making it harder to track your movements.

Windows 10 has a feature called "random hardware addresses" for Wi-Fi adapters that support it. When enabled, the system generates MAC addresses different from the original and uses them when the computer searches for or connects to certain wireless networks, so your identifier isn't always the same.

To enable it generally, go to Start > Settings > Network & Internet > Wi-Fi , and there you'll find the "Random hardware addresses" option. If you enable it, Windows will start using temporary addresses when interacting with nearby access points, provided the adapter allows it.

You can also configure it specifically for a particular network . In "Manage known networks," select the Wi-Fi network you're interested in, go to "Properties," and there you'll find the setting to enable random addresses only for that network. This is useful in places like shopping malls or businesses where you don't want to leave your real-world fingerprint.

Using random MAC addresses has side effects on MAC filtering : if your router has a whitelist with fixed addresses, devices that constantly change their MAC address may stop connecting unless you disable that randomization or add the new addresses one by one, which is impractical.

How to change the MAC address from Device Manager in Windows

In Windows 10 (and similar versions), you can change the MAC address directly from the system , without using external programs, provided the adapter driver supports it. The change is made at the software level and doesn't overwrite the physical MAC address stored on the chip, but it remains the effective MAC address for the system and network. If you're using Windows 11 , here's a practical guide on how to change your MAC address in Windows 11.

The first step is to open Device Manager . You can do this by pressing Windows + X and selecting “Device Manager,” or by right-clicking the Start button and choosing the same option. You can also search for it from the Start menu.

Inside you'll see a list of all the computer's hardware . Expand the "Network adapters" category; there you'll find your physical network cards (Ethernet, Wi-Fi), Bluetooth adapters, and, if you have them, virtual adapters created by virtualization software or VPNs.

Locate the adapter you actually use to connect (by brand/model or by its description) and double-click on it. A window with several tabs will open; we are interested in the "Advanced Options" tab, where specific controller parameters are displayed.

In that list of properties, look for a value called “Network Address” or “Locally Administered Address” (it may also appear as “Network Address” or “Locally Administered Address”). When you select it, you will see two options on the right: usually “Absent” and “Value.” Select “Value” to be able to enter a new address.

In the corresponding field, enter the new MAC address you want to use , with 12 hexadecimal characters (0-9 and AF), without separators or spaces. For example: 001A2B3C4D5E. It's a good idea to note down the original MAC address before changing anything in case you need to revert to the original.

Once entered, click "OK" to apply the changes . The adapter may restart automatically, or you may need to disable and re-enable it, or even restart your computer for the new MAC address to take effect across all network layers.

To confirm that the change was successful , open a command prompt (cmd or PowerShell ) again and run ipconfig /all or the getmac command . Verify that the physical address of the affected adapter matches the one you just configured.

What to do if your card doesn't allow you to change the MAC address from Windows

Not all network adapters display the "Network Address" option in their advanced properties. If it doesn't appear for your adapter, the straightforward method through Device Manager isn't available, and you'll need to use third-party software.

One of the most popular tools is Technitium MAC Address Changer . It's free, easy to install, and when run, it displays a list of all the computer's network interfaces, along with their current MAC address, connection status, and other relevant details. At the bottom, under "Change MAC Address," you can manually enter an address or use the "Random MAC Address" option to generate one randomly.

Technitium also allows you to export a text report with data from all interfaces, which is useful if you want to keep a record of the original configuration or share the information with technical support. After applying the change, the tool usually restarts the adapter automatically so that the new MAC address takes effect.

Another similar option is SMAC MAC Address Changer , which offers several versions, including a free trial edition. This allows you to change the MAC address of a single adapter and try out some advanced features, such as random MAC address generation or automatic network interface restart after the change.

There are also programs like NoVirusThanks MAC Address Changer , which scan the available adapters, display the manufacturer and current MAC address, and allow you to set a new or random address with one or two clicks. They typically have very simple interfaces, designed for users who don't want to struggle with advanced Windows menus.

If at any point you want to return to the original MAC address , most of these tools include an option such as "Restore original" or similar, which undoes the MAC spoofing and returns the adapter to its factory address.

Change the MAC address on other systems: macOS, Linux, and Android

Although we're focusing on Windows here, changing the MAC address is possible on other systems . On macOS and Linux , it's usually done from the command line, while on Android, it typically requires root access and specific applications.

On macOS, you use Terminal and the `ifconfig` command . First, you query the interface (for example, `en0`) to see the current MAC address, then you bring the interface down, assign the new address with something like `sudo ifconfig en0 ether XX:XX:XX:XX:XX:XX` , and finally bring the interface back up. The change persists until the next reboot, unless additional scripts are installed.

In Linux, you can also use `ifconfig` or the `ip` command . The idea is similar: disable the interface (eth0, wlan0, etc.), change the MAC address with a command like ` sudo ifconfig eth0 hw ether XX:XX:XX:XX:XX:XX` or `sudo ip link set dev eth0 address XX:XX:XX:XX:XX:XX` , and then bring it back online. Many desktop environments also include MAC address cloning options in their network managers.

On Android, changing the MAC address usually requires a rooted device and the use of specific "MAC spoofing" apps. These apps request superuser permissions and allow you to change the Wi-Fi interface's MAC address while the radio is active. On non-rooted devices, you typically can't modify the actual MAC address and must resort to privacy solutions such as factory-set random IP addresses, VPNs, or private DNS servers. For specific instructions on mobile devices, see how to change the MAC address on Android.

In all cases, the change is usually temporary (until the next restart or reconnection), except for more advanced configurations. And, as always, you must respect the law and the rules of the services you connect to.

In short, the MAC address is a key identifier in any network, both for device communication and for enforcing access policies, but at the same time it is surprisingly easy to modify from within the system itself or with external tools; therefore, it is important to understand what modifying it entails, when it can help you (resolving conflicts, better protecting your privacy, or adapting to ISP limitations), and when it can get you into trouble, whether due to connection problems, complicating diagnosis, or, if used for dubious purposes, due to possible legal consequences.