@richpriest 

That is the thing, these are named devices with the 'Other' icon and MAC Addresses. They do not appear to have ever logged in again. What is weird is that one of the devices when searched with Google pulls up a link to a MAC Address web search page.

Are there any more extensive logs available to see if they successfully received an IP address? Since that day I have not seen any more weird items joining the network. Every new item has been accounted for as something new in the house being setup, and I relabel them as they pop up in the list.

  @crombinator there are logs in the admin area webpage on the deco.

Browse to your main Deco's IP in a web browser (log in with your TPLink password)

Go to Advanced -> System -> System Log

  @crombinator 

You will only see device in Deco app, Online or Offline, if that device successfully authenticated with your WiFi network. 

Which means, these were connected to your Deco mesh..

Deco X60 does not have whitelist feature, but some other Deco models do. If you have serious concerns about unknown devices connecting to your Deco mesh and can still return X60s, I can recommend you different Deco model with whitelist capability.

I checked firmware versions for X60, the last was released in 2021, which makes it unlikely X60 will be getting whitelist feature. This feature is recent addition.

  @Alexandre. Then that had to have been some kind of a bug because I had just setup a new wifi password, and our house is set back about 40 feet from the road. If they had come close enough to somehow be able to sniff/hack the password my Ring would have notified because there is only one way into our house without climbing a bunch of cliffs.

Which is concerning if there is a bug or security issue that would allow this to happen.

  @crombinator 

It is unlikely that bug of such gravity would have went unnoticed for 2 years since last firmware was released for X60.

You should google "What is MAC address randomization"

  @Alexandre. Sorry, what you are telling me is that a brand new setup allowed non-authorized users to gain access with a new password and only on that day as since then no devices that I do not recognize have connected.

How is that not a bug?

Either the Deco incorrectly recorded devices that didn't connect, or it allowed devices to connect that had no way to authorize whether their MAC address was randomized, or not.

crombinator wrote

  @Alexandre. Sorry, what you are telling me is that a brand new setup allowed non-authorized users to gain access with a new password and only on that day as since then no devices that I do not recognize have connected.

 

 

  @crombinator 

I am telling you exactly the opposite: only devices that you configured with Deco mesh SSID/password were allowed to connect to Deco WiFi and appeared in Deco app. 

  @Alexandre. Yeah, that didn't happen. More likely just another messed up cloud bug where I received notification not meant for my device. There is nothing in my network randomizing its MAC. Since it hasn't happened in 20 days I will just continue to keep watch, and pull logs when necessary.