# How I look up a MAC address vendor from the first bytes

A beginner-friendly guide to MAC addresses, OUIs, vendor lookup, randomised addresses, and what vendor data can and cannot prove.

- Date: 2026-09-27
- URL: https://ilham.dev/posts/how-to-look-up-a-mac-address-vendor/
- Markdown: https://ilham.dev/posts/how-to-look-up-a-mac-address-vendor/index.md
- Tags: mac-address, networking, hardware, tools
- Reading time: 2 min


A MAC vendor lookup uses the first part of a MAC address to identify the organization that registered that prefix.

The [MAC Address Lookup](/tools/mac-address-lookup/) tool helps me inspect the input and output without writing a one-off script first.

## The simple idea

A MAC vendor lookup uses the first part of a MAC address to identify the organization that registered that prefix.

I use it to answer one focused question at a time, then I review the result before using it anywhere important.

## Step 1: Paste the MAC address

Paste the MAC address.

## Step 2: Normalize separators if needed

Normalize separators if needed.

## Step 3: Read the vendor result

Read the vendor result.

## Step 4: Remember that virtual machines and randomised MACs may not identify real hardware

Remember that virtual machines and randomised MACs may not identify real hardware.

## Step 5: Use vendor data as a hint, not proof of device identity

Use vendor data as a hint, not proof of device identity.

## Step 6: Compare with DHCP or switch logs when troubleshooting

Compare with DHCP or switch logs when troubleshooting.

## Step 7: Do not rely on MAC filtering as strong security

Do not rely on MAC filtering as strong security.

## My checklist

Before I trust the result, I check:

- Paste the MAC address.
- Normalize separators if needed.
- Read the vendor result.
- Remember that virtual machines and randomised MACs may not identify real hardware.
- Use vendor data as a hint, not proof of device identity.
- Compare with DHCP or switch logs when troubleshooting.
- Do not rely on MAC filtering as strong security.

The tool makes the mechanical part faster. The decision still belongs to me: is this result correct, safe, and appropriate for the real task?