Updated June 22, 2026. Your MAC address is one of the key identifiers anti-cheat systems use. Learn how to change it and why it matters.
4 min read Updated June 22, 2026
Undetected cheats for 18 games, delivered in 60 seconds.
A MAC address is a hardware identifier assigned to a network interface — six bytes, usually written as twelve hex digits, burned into the adapter by its manufacturer. Every network interface has one: the ethernet port on your motherboard, the Wi-Fi card, the Bluetooth radio, and every virtual adapter created by VPN software, Hyper-V or a virtual machine.
Changing the hardware address your network adapter reports, so an anti-cheat building a fingerprint sees a different value. Every adapter has one — ethernet, Wi-Fi, Bluetooth and virtual adapters — and all of them are read.
Anti-cheats read them for two reasons.
They are stable. Unlike an IP address, which changes when you reconnect or move, a MAC address stays with the adapter for its lifetime. That makes it a good anchor for a fingerprint.
MAC address They are stable. They are plural.
They are plural. A typical machine exposes three to six of them, which is a lot of entropy for very little effort. Even if two people happen to share one adapter model, the combination across all adapters is close to unique.
The first three bytes are the manufacturer prefix, which also tells the anti-cheat something about your hardware before it reads anything else.
One common misconception worth correcting: a MAC address does not travel across the internet. Routers replace it at each hop, so a game server never sees yours directly. It is read locally, by the anti-cheat running on your machine, and reported as part of the fingerprint. That is why a VPN does nothing to hide it — the VPN changes your apparent IP, not what the anti-cheat reads from your adapter.
Windows lets you change a MAC address without any third-party software, through the adapter's advanced properties or the registry. It is worth understanding why that is usually not sufficient.
HWID SPOOFER — Universal HWID protection
Manual spoofing covers one adapter. You change the ethernet adapter and forget the Wi-Fi card, the Bluetooth radio and the virtual adapter your VPN created. The anti-cheat reads all of them. A partial change can leave you more identifiable than no change, because the combination is now unique in a new way.
Not every driver honours it. The registry override works for many adapters and is silently ignored by others, particularly some Intel and Realtek drivers. You can set the value, see it in the interface, and have the hardware continue reporting its original address to anything reading at a lower level.
It reverts. Driver updates, Windows feature updates and adapter resets all restore the original. If you spoofed manually months ago, you may well be unspoofed now without knowing.
It is easy to make invalid. A MAC address with the wrong bits set in the first byte marks itself as locally administered or multicast. An anti-cheat reading a multicast address as a hardware identifier knows immediately that it is fake — which is worse than the real value.
Does a VPN hide my MAC address?
No. A MAC address never travels across the internet; routers replace it at every hop. The anti-cheat reads it locally from your adapter, so changing your apparent IP address has no effect on it.
A proper tool changes every adapter, generates addresses with plausible manufacturer prefixes, and does it at a level the driver cannot ignore. The VOIDEX spoofer handles MAC alongside board and disk identifiers, which matters because changing one class of identifier alone rarely helps — see what a spoofer is.
A badly spoofed MAC address is a stronger signal than an unspoofed one. These are the errors that produce that outcome.
Using an obviously fake prefix. The first three bytes identify a manufacturer. Addresses beginning 00:00:00, or with a prefix belonging to no real vendor, stand out immediately. A good tool picks a prefix belonging to an actual network hardware vendor.
Setting the locally-administered bit. The second-least-significant bit of the first byte marks an address as locally assigned rather than manufacturer-burned. Real hardware essentially never has it set. Many manual guides produce addresses that do.
Can anti-cheat detect MAC address spoofing?
It can detect a badly done one. Addresses with the locally-administered bit set, implausible manufacturer prefixes, or a machine where one adapter changed and three did not are all readable signals — sometimes stronger than the original value.
Changing one adapter and leaving the rest. Covered above, and it is the most common error by far.
Forgetting virtual adapters. VPN clients, Hyper-V, WSL and virtual machine software all create adapters with their own addresses. They are read like any other.
Randomising every session in an obvious way. Complete randomness across sessions is itself a pattern, particularly if the prefixes are inconsistent with any real hardware. Stable-but-fake is usually better than differently-fake every day.
Assuming a VPN covers it. It does not, and this misunderstanding is widespread. A VPN changes routing. The anti-cheat is reading your adapter locally, before any of that applies.
What is MAC address spoofing? ▾
Can anti-cheat detect MAC address spoofing? ▾
Does a VPN hide my MAC address? ▾
Can I spoof a MAC address without software? ▾
Windows allows it through adapter properties or the registry, but it covers one adapter at a time, is silently ignored by some drivers, and reverts on driver or Windows updates. Partial coverage can leave you more identifiable, not less.
Should my spoofed MAC change every session? ▾
Not necessarily. Wildly inconsistent addresses across sessions, especially with implausible prefixes, form their own pattern. A stable address using a real vendor prefix generally looks more like hardware than daily randomisation does.