BrowserTools
Home / Networking / MAC Address Lookup

MAC Address Lookup

Find the manufacturer behind a MAC address and check whether it is a random private address.

Loading MAC Address Lookup… If nothing happens, please enable JavaScript.

Every Ethernet, Wi-Fi and Bluetooth interface carries a 48-bit MAC address, usually written as six pairs of hexadecimal digits such as 3C:22:FB:12:34:56. The first part of that address is an Organizationally Unique Identifier (OUI) that the IEEE Registration Authority assigns to a manufacturer, so it tells you who made the network chip. That is exactly what you need when an unknown device shows up in your router's client list, when a network scan returns a dozen addresses with no names, or when you are tidying up DHCP reservations and want to know which entry is the printer and which is the smart TV.

Examples

Input B8:27:EB:12:34:56
Output Raspberry Pi Foundation

The classic Raspberry Pi prefix; newer boards use DC:A6:32 and others.

Input DA:A1:19:00:00:01
Output Locally administered, no vendor

Second hex digit A means the address is random or software-assigned.

Input 01:00:5E:00:00:FB
Output IPv4 multicast

Used by mDNS (224.0.0.251).

Frequently asked questions

What is an OUI?
An Organizationally Unique Identifier is the prefix of a MAC address assigned by the IEEE to one organisation. The classic MA-L block is 24 bits (the first three bytes) and covers about 16.7 million addresses. Smaller MA-M (28-bit) and MA-S (36-bit) blocks exist for companies that need fewer addresses, which is why this tool checks prefixes of different lengths.
Why does my phone's MAC address show no manufacturer?
Modern iOS, Android and Windows devices use a randomized, per-network MAC address on Wi-Fi to stop tracking between networks. These addresses have the locally administered bit set (the second hex digit is 2, 6, A or E) and are not registered to anyone, so there is no vendor to find. The tool labels them as local / random. You can usually see the real hardware address in the device settings.
Is the vendor always the brand of the device?
No. The OUI belongs to whoever made or bought the network interface. A smart plug sold under one brand may contain an Espressif or Tuya Wi-Fi module, and many laptops use Intel or Realtek network chips. The result tells you the chip vendor, which is still a strong hint about what kind of device it is.
Which MAC address formats can I paste?
Colon-separated (00:1A:2B:3C:4D:5E), hyphen-separated as Windows shows it (00-1A-2B-3C-4D-5E), Cisco dotted (001a.2b3c.4d5e), bare hex (001A2B3C4D5E) and macOS style with single digits (0:1a:2b:3c:4d:5e). You can also paste just an OUI such as 00:1A:2B, or whole command output from arp -a or ip neigh.
Are the addresses I enter sent to a server?
No. The page downloads the public IEEE vendor table once and does the matching locally with JavaScript. The addresses you paste stay on your device, which matters because MAC addresses can identify specific hardware.
What do the multicast and locally administered bits mean?
They are the two lowest bits of the first byte. If the lowest bit is 1 the address is a group (multicast) address, used for things like IPv4 multicast (01:00:5E) or IPv6 neighbour discovery (33:33). If the second lowest bit is 1 the address was assigned by software or an administrator rather than burned in by the manufacturer, which is the case for virtual machines, containers and randomized Wi-Fi addresses.
How is the IPv6 link-local address derived from a MAC?
Stateless autoconfiguration using modified EUI-64 splits the MAC in half, inserts FF:FE in the middle and flips the locally administered bit, then prefixes fe80::. So 00:1A:2B:3C:4D:5E becomes fe80::21a:2bff:fe3c:4d5e. Many systems now use random interface identifiers instead (RFC 7217 or privacy extensions), so your actual address may differ.
Can a MAC address be changed or spoofed?
Yes. Most operating systems let you set a different MAC address in software, and virtual machines get generated ones. That is why MAC filtering is weak security on its own and why a vendor lookup should be read as a hint, not proof of what a device is.
How up to date is the vendor list?
The table is built from the IEEE Registration Authority's public MA-L, MA-M, MA-S and IAB listings, and the build date is shown on the page. The IEEE adds new assignments every week, so a very new product can occasionally show as not found until the next update.

About MAC Address Lookup

Paste one address or a whole list. The tool accepts every common notation (colons, hyphens, Cisco-style dots, bare hex, and the single-digit groups macOS prints) and you can paste raw output from arp -a, ip neigh or a router export: it picks out the addresses by itself. Each one is matched against the full IEEE public registry, including the large MA-L blocks, the medium MA-M and small MA-S blocks and the legacy IAB assignments, always trying the longest prefix first so a subdivided block resolves to the company that actually holds it.

Beyond the vendor name, the tool decodes the two flag bits in the first byte. The multicast bit separates group addresses (such as the 01:00:5E range for IPv4 multicast) from normal unicast hosts. The locally administered bit is the one that matters most today: phones, tablets and laptops now use a random, per-network MAC address for privacy, and those addresses have this bit set. A lookup on a randomized address will never find a vendor, and the tool says so instead of guessing. For a single address you also get it in every common format, as a decimal number, and as the modified EUI-64 and IPv6 link-local address that stateless autoconfiguration (SLAAC) would derive from it.

The vendor database is downloaded once from this site and searched entirely in your browser, so the addresses you paste never leave your device. A reverse search lets you type a company name, for example Raspberry Pi or Espressif, and list all the prefixes it owns, which helps when writing firewall rules or filtering a capture. Keep in mind that the OUI names the maker of the network interface, not necessarily the brand on the box: many devices use modules from Espressif, Realtek, MediaTek or similar suppliers.

Xerox owns 00:00:00

MAC addresses come from Ethernet, which Bob Metcalfe and colleagues developed at Xerox PARC in 1973. Xerox initially handed out the address blocks itself, which is why the very first OUI in the registry, 00:00:00, still belongs to Xerox Corporation. Administration later passed to the IEEE when Ethernet became the IEEE 802.3 standard, and the IEEE Registration Authority has run the registry ever since.

The 48-bit address space was designed to be large enough that no manufacturer would ever need to reuse an address, and it still holds about 281 trillion values. The pressure came from elsewhere: as phones started broadcasting Wi-Fi probe requests everywhere, shops and advertisers began tracking people by their fixed MAC addresses. Apple introduced random addresses for Wi-Fi scanning in iOS 8 in 2014, and later per-network private addresses in iOS 14; Android and Windows followed with similar features.

Some companies pay the IEEE extra to keep their name out of the public listing. Their blocks appear simply as "Private", and more than two hundred such entries exist.

Support