Understanding the Structure of a MAC Address
A Media Access Control (MAC) address consists of 48 bits, represented as 12 hexadecimal characters separated by colons or hyphens (e.g., 00:1A:2B:3C:4D:5E). These 48 bits are divided into two equal parts:
- Organizationally Unique Identifier (OUI): The first 24 bits (first 6 characters) represent the manufacturer ID. OUIs are formally assigned and registered by the IEEE. Looking up this prefix reveals the brand of the network card (e.g., Intel, Apple, Cisco).
- Network Interface Controller (NIC) Specific: The remaining 24 bits (last 6 characters) are assigned by the manufacturer to uniquely identify that specific physical chip. No two chips from the same manufacturer share this suffix.
MAC Address Randomization and Locally Administered Addresses (LAA)
To protect user privacy and prevent tracking across public Wi-Fi access points, modern operating systems like iOS, Android, and Windows implement **MAC Randomization**. When randomization is active, your device does not broadcast its real burned-in MAC address (BIA). Instead, it generates a randomized locally administered MAC address.
You can verify if a MAC address is randomized by checking the first octet. If the second hexadecimal character of the address is **2, 6, A, or E** (representing bit values 10 in binary for the local administration bit), the address was generated dynamically in software. Randomized MACs will show up as "Unknown Vendor" because they do not have a registered OUI in the IEEE registry.
How to Find Your MAC Address on Different Systems
Follow these instructions to locate the physical hardware address of your device:
| Operating System | Navigation Command / Path | Key Identifier |
|---|---|---|
| Windows 10 / 11 | cmd → ipconfig /all (or getmac) | Physical Address |
| macOS | Terminal → ifconfig (or System Settings → Network → Details) | ether (or MAC Address) |
| Linux | Terminal → ip link show | link/ether |
| Android | Settings → About Phone → Status Information | Wi-Fi MAC Address |
| iOS (iPhone/iPad) | Settings → General → About | Wi-Fi Address |
Why Do Network Engineers Use MAC Lookups?
MAC address analysis is a core part of network security, device auditing, and troubleshooting:
- Intruder Detection: When auditing your router's connected client list, running MAC lookups helps identify unrecognized devices (e.g. distinguishing an IoT smart bulb from an intruder's laptop).
- Static DHCP Reservations: Binding a local IP address to a device's MAC address ensures it always receives the same IP, which is crucial for port forwarding.
- Hardware Spoofing Verification: Verification of MAC structures helps identify legacy devices or spoofed hardware trying to bypass network restrictions.
- If you need to configure static mappings, read our DHCP Address Allocation Guide.
- Verify your primary router access gateway address at the 192.168.1.1 Gateway Portal.
- Learn how to resolve gateway dropouts at the Default Gateway Diagnostics Guide.
- Analyze double translation layers in our Double NAT Troubleshooting Walkthrough.
- Find the fastest DNS configs using the Best DNS Servers Guide.
- Configure manual settings for consoles with the Best DNS for PS5 Walkthrough.
- Isolate packet drops on Wi-Fi or Ethernet using our Packet Loss Test Tool.