MAC Address Formats and Randomized Addresses
A MAC address is a link-layer identifier used on a local network. A vendor lookup compares part of that address with public IEEE registration data. It can help with network troubleshooting, but it cannot prove the exact device model, owner, or person.
Use the MAC Address Vendor Identifier to check a complete address against Tech Tycoon’s local copy of public IEEE assignments.
MAC address formats
A conventional MAC address contains 48 bits, usually written as six hexadecimal pairs. These formats represent the same value:
00:1A:2B:3C:4D:5E— colon-separated00-1A-2B-3C-4D-5E— hyphen-separated001A.2B3C.4D5E— dotted notation001A2B3C4D5E— plain hexadecimal
Uppercase or lowercase letters do not change the address. The first octet contains two important flags: the individual/group bit and the universal/local bit. In a typical vendor lookup, a universally administered unicast address can be compared with an IEEE-assigned prefix. A locally administered address may have been set by software or randomized, so a manufacturer match may be unavailable or misleading. See IETF RFC 9542 for IEEE 802 address terminology.
Why a lookup may not show a vendor
- Private or randomized address: Phones and computers may use a private Wi-Fi address instead of a factory address. Apple says its devices can use a different address for each network and may rotate it. Android’s documentation describes randomized Wi-Fi addresses, enabled by default for client mode on Android 10 and later.
- Local address: A virtual adapter, manually configured interface, or privacy feature can set the local bit. The public vendor registry may not apply.
- Multicast address: A group address is not an individual device identifier, so it cannot be treated as a normal vendor match.
- Registry or prefix limits: A company may hold several assignments, and a lookup database may be missing a recent or less common allocation.
Official platform references: Apple: Use private Wi-Fi addresses and Android Open Source Project: MAC randomization.
How network technicians use MAC vendor data
When a device appears in a router, switch, access point, or DHCP lease table, its MAC prefix can offer a clue about the network-interface manufacturer. Compare the result with the device’s hostname, IP address, switch port, access point, and connection history. Treat the vendor as one clue: an adapter manufacturer may differ from the laptop, phone, access point, or product brand.
Privacy and security limits
A MAC address is normally useful only on the local network segment; routers do not forward the original Ethernet source MAC across the public internet. Do not rely on a vendor prefix as authentication. MAC addresses can be copied or changed, and randomized addresses can change over time. Use access controls designed for your network and keep inventory records tied to other verified device details.
Try the lookup
Paste a complete MAC address into the MAC Address Vendor Identifier. The result reports the registered organization for a matching prefix, or explains when the address bits or available registry data prevent a reliable match. It does not identify an exact model.