Skip to content

MAC address randomisation

Definition

A privacy mechanism in modern operating systems that substitutes a randomly generated MAC address for the device's globally unique burned-in address during Wi-Fi scanning and connection. Present in Android 8+, iOS 14+, and Windows 10 v1903+. Complicates cross-network tracking but does not eliminate all device-linking artefacts.

Related terms

BSSID
Basic Service Set Identifier. The MAC address of a specific access point radio. Used in association logs and packet captures to uniquely...
Monitor mode
An 802.11 radio mode that captures every wireless frame in range, including management and control frames, without associating to an access point....
Preferred Network List (PNL)
The list of previously joined Wi-Fi networks stored on a client device. The device automatically probes for networks on the PNL when...
Probe request
An 802.11 management frame broadcast by a client device when actively scanning for Wi-Fi networks. Contains the device MAC address and, in...
RSSI
Received Signal Strength Indicator. A value, typically expressed in dBm, recorded in access-point logs and packet captures that indicates how strongly a...

Explained in

  • Wi-Fi ForensicsA privacy mechanism in modern operating systems that substitutes a randomly generated MAC address for the device's globally unique burned-in address during Wi-...

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.