Skip to main content

Disable MAC Randomization on Wi-Fi Connections

Updated over 2 weeks ago

The MAC (Media Access Control) address is a unique identifier assigned to a device's network interface. Starting with Android 10, the system began using randomized MAC addresses by default when connecting to Wi-Fi networks, as a privacy measure. However, in corporate environments, this can make it difficult to identify, authenticate, and track devices on the network. Disabling the use of randomized MAC addresses allows the device to use its real (physical) MAC address, ensuring greater control and security.

Prerequisites

  • Android 13 or higher

  • Device enrolled as Device Owner (DO)

  • Pulsus agent version 5.0.07 or higher

Use Cases

  • Accurate identification of devices on corporate networks

  • Wi-Fi access restriction based on real MAC addresses

  • Traceability and auditing of connections

  • Application of network policies per device

Benefits / Business Impacts

  • Increased Security: Allows only authorized devices to connect to the network.

  • More Effective Network Management: Prevents conflicts caused by randomized MAC addresses.

  • IT Policy Compliance: Improves device traceability and control.

How to Configure

Starting from agent version 5.0.07, Android 13+ devices can be configured to always use the real MAC address when connecting to Wi-Fi networks.

Step-by-step to configure in Pulsus:

  1. Access the Policies > Wi-Fi menu.

  2. Click to add or edit a Wi-Fi network.

  3. Check the 'Disable MAC randomization' option.

  4. Save the policy.

  5. Apply to the desired devices or groups.

Android 12, 11, or 10

On these Android versions, it is not possible to force the use of the real MAC address via MDM. The configuration must be done manually per network on the device itself:

  1. Go to Settings > Network & internet > Wi-Fi.

  2. Tap on the desired network.

  3. Tap on Privacy.

  4. Select 'Use device MAC'.

Did this answer your question?