I recently received an alert that I was close to reaching my internet data cap, which has never happened during my years of working from home. My usage history shows roughly 100 GB per day on weekdays, compared with my usual 20–30 GB. Usage drops back down on weekends when I am not using my work laptop. My internet provider suggested that one of my devices might be downloading or uploading updates, but my employer's IT department says there are no unusually large updates happening right now. I also tried changing my Wi-Fi password through the provider's app. Although the app says the change worked, my devices still connect using the original password. What should I check to identify the device responsible and properly secure the network?
2 Answers
The weekday-only pattern makes the work laptop a reasonable suspect, but it could also be another device that is only active while you are home. Check network usage by application in the operating system, and ask IT to review cloud-sync, backup, update, or security-software activity. Setting the connection as metered can temporarily reduce background traffic while you investigate.
Look through the router’s connected-device list during the workweek and compare it with the devices you recognize. A new phone, streaming box, game console, camera, or guest device could be downloading large files. Also check whether anyone recently downloaded movies, games, or other large content.

A metered connection is useful as a temporary control, but it is better to identify the process or device first. The router’s usage statistics should help distinguish the laptop from everything else on the network.