Quick Links
Summary
You can set a permanent new MAC address in the terminal using the macchanger utility and a systemctl unit file. Or in GNOME, go to Settings > Wi-Fi [or Network] > Identity, and enter a custom MAC address.
Every network interface has a unique MAC address, set by the manufacturer. It’s how network connections identify connection endpoints. On Linux, you can permanently change a MAC address if you want.
What Is a MAC Address?
A MAC addressis a unique code used to identify by networks to identify devices as connection endpoints. It answers the critical question of “who’s who” among network interfaces.
Every piece of network equipment has at least one network interface built into it. A desktop computer or a server may have multiple network cards installed in them. Many laptops are supplied with a CAT5 network socket and a Wi-Fi card, giving you two network interfaces straight out of the box.
Every network interface has a unique, baked-in identifier. Regardless of the network protocol that is used to communicate with that device, at the lowest level, the connection is identified by itsmedia access control, or MAC, address. That’s why they have to be unique. Making your network interface use a different MAC address is called spoofing.
A MAC address is made up of six hexadecimal numbers. They’re written with a colon “:” or a hyphen “-” between each of the six numbers. Here’s a MAC address from one of our test computers.
Most often, the first three numbers are anorganizationally unique identifier, representing the hardware manufacturer. you may decode the OUI using theWireshark Manufacturer Lookup page. Note that this may be the manufacturer of your computer’s motherboard, network card, or Wi-Fi card. Manufacturers buy in many of the components of their computers and assemble them into the finished item, so don’t be surprised if it is different than the manufacturer of your computer.
Because MAC addresses are built-in, you can’t really change them. What you can do is configure your Linux system so that it pretends to have a different MAC address. As far as any other device on the network is concerned, the MAC address of your computer is the one it broadcasts, so the end result is the same.
Finding Your MAC Address
To find out your current MAC Address, you’re able to usetheipcommandwith thelinkobject. This will list your network interfaces, whether they are in use or disconnected the network.
This computer is a laptop with an active Wi-Fi connection,wlan0, anda wired Ethernet connection,enp3s0. The wired connection isn’t plugged in, so it is inactive. The laptop also has the default loopback connection,lo, configured.
Related:How to Use the ip Command on Linux
Use macchanger to Change Your Linux MAC Address
Themacchangerutility allows you to change the MAC address of a network interface with flexible options. You can set a specific MAC address or use a random MAC address. You can also get a new MAC address that uses the same three OUI bytes as your hardware, so that the network interface manufacturer stays the same.
On Manjaro, the command is:
Depending on the version ofmacchangerthat is in your distribution’s repositories, you may see a screen asking you whether you want to have a new MAC address created every time a network connection is brought online. That is, when you connect anEthernet cableor enable Wi-Fi.
Use the arrow keys to move the highlight to the option you wish to use, and press “Enter.”
There is some convenience to this method, but we’re going to select “No”. We want to have some control over the MAC addresses we’re using. Also, you may not want to change the MAC address on every network interface that your computer has. Perhaps you only want to change it on your Wi-Fi card, for example.
Using macchanger to Temporarily Change a MAC Address
You can’t reset the MAC address on a network interface that is in use. We can change the MAC address of our Ethernet connection because it isn’t connected, so it is inactive.
The-r(random) option generates a completely random MAC address. We need to pass the name of the network interface we want to set the MAC address on.
The MAC address that was in use was the same as the underlying hardware MAC address, or permanent MAC address. The new MAC address is shown at the bottom.
We can change the Wi-Fi card’s MAC address too, if we bring down theWi-Fi adapter, change the MAC address, then enable the Wi-Fi adapter.
If you don’t want a random MAC address, you may use the-m(MAC address option) and specify a MAC address in colon “:” format, in lowercase hexadecimal.
Related:How to Set a Static IP Address in Ubuntu
How to Permanently Change a MAC Address
That’s all nice and simple, but it doesn’t survive a reboot.
We can achieve that however, by using asystemdunit file. We’ll getmacchangerto give our laptop new MAC addresses for itsEthernetand Wi-Fi interfaces each time it boots.
We’re going to use the-e(ending) option so that the MAC address is changed but the three OUI bytes remain the same.
That means ourspoofed MAC addresswill appear to belong to hardware manufactured by the same companies that made our actual Ethernet and Wi-Fi hardware. This will avoid problems with anyrouters,firewalls, orswitchesthat rejectpacketsthat don’t come from hardware with a recognized manufacturer.
We’re going to create two services. There’ll be one for the Ethernet connection, and one for the Wi-Fi connection. A single unit file will act as a template for each service.
Related:How to List Linux Services With systemctl
To create our unit file, we need tousesudoand edit a file with the base name we want our services to have. The at sign “@” sign in the file name is replaced by the name of the network connection when the service is launched, as we’ll see.
We’re calling our unit file “macspoof@.service” because it spoofs MAC addresses.
Copy this text into your unit file, save your file, and close your editor.
We need to create a service for each of our connections. We do this by adding the name of the network interface behind the at sign “@” in the unit name. We’ll do our Ethernet connection first:
And we’ll do the same thing for our Wi-Fi connection.
After rebooting our laptop, we can usemacchangerto see what our current MAC addresses are. Note we don’t need to usesudobecause we’re only usingmacchangerto report on the MAC address settings, and not to change them.
This shows us the currently active, spoofed, MAC addresses on our two network interfaces, and their original MAC addresses.
Because we used the-e(ending) option in our unit file, the first three bytes of the spoofed addresses are the same as the first three bytes of the original MAC addresses.
Permanently Changing a MAC Address with GNOME
Most desktop environments allow you to set a new MAC address. InGNOMEyou can do this by opening “Settings” and selecting either “Wi-Fi” or “Network” from the sidebar.
Click the cogged wheel icon next to the connection you wish to set a MAC address for, and select the “Identity” tab.
You can enter a new MAC address in the “MAC Address” field, or select the genuine MAC address from the drop-down menu.
The “Cloned Address” drop-down menu lets you select from:
Your changes will take place when you reboot, or turn the connection off and on again.
Be Careful!
Changing your MAC address isn’t illegal, so long as you don’t do it to impersonate someone else’s network device. Your jurisdiction will probably have laws in place to deal with unlawfully receiving network traffic. For example, the UK has theComputer Misuse Actand the U.S. has theComputer Fraud and Abuse Act.
Become anonymous by all means, but don’t pretend to be someone else.
