MAC Address Lookup: Find the Vendor Behind Any Hardware Address
Look up the manufacturer (OUI) of any MAC address from an offline IEEE dataset, detect unicast, multicast, and randomized MACs, convert between colon, hyphen, dot, and bare formats, and derive EUI-64 and IPv6 link-local addresses β free and fully browser-based.
Free Interactive Tool
MAC Address Vendor Lookup
Look up the vendor/manufacturer (OUI) of any MAC address from a bundled offline IEEE dataset - unicast/multicast detection, format conversion, and EUI-64 derivation, fully in-browser
Table of Contents
Every network interface in the world β the WiFi card in your laptop, the radio in your phone, the NIC in a rack server β carries a hardware address assigned at the factory. When an unknown device shows up on your network or a log displays an address you don't recognize, the first question worth asking is simple: who makes this network card? The MAC Address Lookup tool answers it instantly, resolving any MAC address to its registered manufacturer through an IEEE OUI database.
Unlike most online lookup services, the tool never sends your input to a server. The full IEEE dataset is bundled with the page, so every lookup runs 100% client-side in your browser. That matters when you're inspecting addresses copied from production logs, DHCP leases, or router client lists and would rather not paste them into a random third-party website. It's free, needs no signup, and does much more than plain vendor resolution: paste an address in any common notation and you get the manufacturer, decoded control bits, four output formats, and the EUI-64 identifier with its derived IPv6 link-local address.
Why Use MAC Address Lookup?
- Instant vendor identification: the first three bytes of a MAC address are an Organizationally Unique Identifier (OUI) registered with the IEEE. The tool matches them against its bundled database and names the manufacturer in milliseconds.
- Privacy by design: the OUI dataset ships with the page. No lookup request leaves your machine, and no address from your corporate network ends up in someone else's logs.
- Randomized MAC detection: iOS, Android, and Windows generate per-network random addresses for privacy. The tool reads the universal/local bit and flags them, so you never trust a vendor result that isn't real.
- Four output formats: colon (AA:BB:CC:DD:EE:FF), hyphen (AA-BB-CC-DD-EE-FF), Cisco dotted (AABB.CCDD.EEFF), and bare hex β match whatever dialect the system in front of you prints.
- IPv6 derivations included: flips the U/L bit, inserts FF-FE per RFC 4291, and shows both the EUI-64 interface identifier and the resulting fe80:: link-local address.
- Zero friction: no account, no install, no API key. Open the page and type.
Key Features
| Feature | What it does |
|---|---|
| Vendor (OUI) lookup | Resolves the first 6 hex digits against a bundled offline IEEE registry |
| Unicast/multicast detection | Reads the I/G bit (0x01) in the first octet |
| Universal/local detection | Reads the U/L bit (0x02) and flags randomized, locally administered addresses |
| Format conversion | Outputs colon, hyphen, Cisco dotted, and bare 12-hex-digit forms |
| EUI-64 derivation | Flips the U/L bit and inserts FF-FE in the middle per RFC 4291 |
| IPv6 link-local address | Builds the fe80::/10 address from the modified EUI-64 identifier |
- Tolerant input parsing: a leading 0x is stripped, colons, hyphens, dots, and spaces are removed, and the remainder must be exactly 12 hex digits β anything else is rejected as invalid instead of being silently misread.
- Fully client-side: the IEEE data ships with the page, so the tool works on locked-down machines and never leaks your input anywhere.
- One address, four dialects: vendors and operating systems print MAC addresses differently; the tool saves you from hand-editing them into each system's expected format.
How to Use
- Open the MAC Address Lookup tool.
- Paste or type the address in any common format β AA:BB:CC:DD:EE:FF, AA-BB-CC-DD-EE-FF, AABB.CCDD.EEFF, bare AABBCCDDEEFF, with or without a 0x prefix.
- The tool normalizes the input to 12 hex digits and immediately rejects anything that isn't a valid MAC address.
- Read the result: the vendor from the IEEE OUI registry, whether the address is unicast or multicast, and whether it's universal (burned-in) or local (randomized).
- Copy the address in whichever of the four formats your target system expects, along with the EUI-64 identifier and IPv6 link-local address if you need them.
Understanding MAC Address Structure
A MAC address is 48 bits, written as six two-digit hex octets. The first three octets (the first 6 hex digits) form the OUI β a prefix the IEEE assigns to each manufacturer. The remaining three octets are chosen by that manufacturer and act as a device serial, which is what makes every burned-in address globally unique.
Two control bits live in the first octet, and the tool decodes both:
- Bit 0 β the I/G (Individual/Group) bit, value 0x01. Clear means unicast: the address identifies a single interface. Set means multicast, which is why the low bit of a real hardware address is never 1.
- Bit 1 β the U/L (Universal/Local) bit, value 0x02. Clear means universal β assigned by the manufacturer. Set means locally administered β software made it up.
That second bit is what device privacy features exploit. iOS, Android, and Windows can generate a different randomized MAC for every WiFi network, setting the U/L bit in the process. The consequence for lookups is important: a randomized MAC's "OUI" doesn't belong to the device's actual manufacturer, so vendor results for locally administered addresses are meaningless β which is exactly why the tool flags them rather than letting you misidentify a device.
Practical Use Cases
Identifying Unknown Devices on Your WiFi
Router client lists show bare MAC addresses next to unhelpful hostnames like android-3f9a2c. Resolve the OUI and the picture sharpens instantly: a prefix registered to Apple is someone's iPhone, one from Espressif is almost certainly a smart-home gadget, and a Raspberry Pi prefix points to a hobbyist box on your LAN. It's the fastest way to answer "what is this thing?" without walking around the house.
Network Debugging and Asset Inventory
MAC addresses surface everywhere in operations: ARP tables, DHCP lease files, switch CAM tables, firewall logs, and wireless dashboards. Annotating each with a vendor turns a wall of hex into a readable inventory β and an unexpected vendor in a server VLAN, say a consumer TV manufacturer, is often the first visible symptom of a device someone plugged in without telling IT.
Auditing MAC Randomization
Randomization breaks everything keyed to a stable hardware address: DHCP reservations, 802.1X MAC authentication bypass, MAC-based ACLs, and per-device usage analytics. If a device seems to keep "disappearing and reappearing," check whether its address has the U/L bit set. The tool flags randomized addresses explicitly, so you can steer the fix toward device configuration β disabling randomization on trusted SSIDs β instead of chasing phantom devices.
IPv6 Migration and EUI-64
IPv6 autoconfiguration (SLAAC) classically derives a 64-bit interface identifier from the MAC address by flipping the U/L bit and inserting FF-FE in the middle, then builds a fe80::/10 link-local address on top. When you're staring at an fe80:: neighbor entry from ndp or show ipv6 neighbors, paste the underlying MAC into the tool: it shows exactly which interface identifier and link-local address that hardware produces, tying the IPv6 host back to a physical interface and a vendor.
Best Practices
- Check the U/L bit before trusting a vendor result. If the address is locally administered, the OUI is fiction β don't build device identifications on it.
- Read OUI as "manufacturer," not "device model." Apple's prefix covers iPhones, Macs, and AirPorts alike; treat the vendor as a narrowing signal, not a definitive label.
- Normalize before comparing. Keep one canonical format in your notes and scripts, and use the tool's four output forms to match whatever a given system prints.
- Pair it with other lookups. Resolve the hostname with DNS Lookup and the network location with IP Lookup to see a host from three angles.
- Keep an offline-capable tool handy. On air-gapped lab networks, a bundled-database lookup still works where web OUI services can't load.
- Generate test data deliberately. Use the MAC Address Generator to produce valid sample addresses for testing inventory scripts, ACLs, and parsers.
Put the Tool to Work
The next time an unfamiliar address appears in a lease table or a WiFi survey, don't shrug it off β paste it into the MAC Address Lookup tool and get the vendor, bit flags, format conversions, and IPv6 derivations in one shot. It's free, private, and fast enough to become part of your routine.
Related Tools You Might Like:
- DNS Lookup β resolve a domain name's DNS records
- IP Lookup β look up the details behind an IP address
- MAC Address Generator β generate valid MAC addresses for testing
Happy troubleshooting!
Frequently Asked Questions
Q: Does the MAC Address Lookup tool send my address anywhere? A: No. The IEEE OUI database is bundled with the page, and every step β parsing, vendor matching, bit decoding, EUI-64 derivation β runs entirely in your browser. No network request is made with your input.
Q: Which input formats are accepted? A: Any common notation: colon-separated, hyphenated, Cisco dotted, or bare hex, with or without a leading 0x and stray spaces. The input is stripped of separators and must reduce to exactly 12 hex digits; anything else is rejected as invalid.
Q: Why does my phone's address show as randomized? A: Modern operating systems generate a different MAC per WiFi network for privacy, which sets the U/L bit. When that bit is set, the OUI doesn't correspond to the real hardware vendor β so the tool flags these addresses instead of presenting a misleading manufacturer.
Q: What is EUI-64 and why does the tool compute it? A: EUI-64 stretches a 48-bit MAC into a 64-bit interface identifier by flipping the U/L bit and inserting FF-FE in the middle, per RFC 4291. The tool shows the resulting identifier and its fe80::/10 link-local address so you can match IPv6 neighbor entries back to physical interfaces.