It can be a real surprise when a smartphone or laptop suddenly stops connecting to your home network. Instead of the expected connection, the device displays a terse but alarming message: "Access Denied." This error means the router received the connection request but blocked it for some reason. The device sees the network and knows the password, but the gateway categorically refuses to allow the device into the local network.
Most often, the problem stems from an IP address conflict or a security protocol glitch, but more complex scenarios are also possible. For example, the router may have simply gotten stuck while allocating addresses, or strict MAC address filtering may have been enabled in the security settings. Understanding the nature of the error is the first step to restoring internet service without calling a technician.
In this article, we'll take a detailed look at all possible causes of blocking and offer step-by-step solutions. You'll learn how to reset network settings, check the list of approved devices, and update drivers. Sometimes, resolving the issue takes just a couple of minutes if you know exactly where to click.
Main reasons for connection blocking
The most common, yet most common, reason is an incorrect password. If you recently changed the router's security key but haven't updated it in your phone's settings, the device will attempt to log in with the old credentials. The router rejects the connection because the password hash doesn't match the one stored in the router's memory.
The second most common reason is address pool overflow. DHCPEach router has a limited range of IP addresses it can assign to clients (usually from 192.168.0.100 to 192.168.0.200). If multiple devices are connected to the network simultaneously or previous sessions haven't been properly closed, there may be no available addresses.
⚠️ Attention: Some budget router models have a limited memory buffer for the ARP table. If more than 15-20 devices are connected to the network, new connections may be blocked even if free IP addresses are available.
Also worth mentioning is filtering by MAC addressThis is a security feature that allows the router owner to create a "whitelist" of devices. If your device isn't on this list, the router will deny access, even if the password is entered correctly. This feature is often enabled as a joke or for protection, and then forgotten.
- 📉 Overload of the communication channel or the router's radio module.
- 🔒 Encryption type mismatch (for example, the device only supports WPA2, but the router is configured for WPA3).
- 📅 Expired DHCP lease or static IP conflict.
- 📡 Problems with the antenna module or firmware failure.
Diagnosis and initial actions
Before delving into complex settings, it's important to perform a basic diagnostic. First, try "forgetting" the network on your device. To do this, go to Wi-Fi settings, select your network, and tap "Delete" or "Forget." Then, re-enter the password. This clears the network settings cache and resolves handshake errors.
If reconnecting doesn't help, check if the internet works on other devices. If the problem only occurs on one device, look for the cause there. If all phones and laptops in the house are displaying "access denied," the problem is almost certainly with the router or internet service provider.
It's important to pay attention to the router's indicators. If only the power light is on and the WAN (Internet) indicator is dim, your ISP may be performing maintenance. In this case, the access error message may be a secondary symptom of a disconnected connection.
For more in-depth diagnostics on Windows computers, you can use the built-in utility. Open the command prompt and enter the command to reset the TCP/IP stack.
netsh int ip resetAfter running the command, be sure to restart your computer. This action resets your network settings to factory defaults, eliminating any software conflicts.
Router Settings: DHCP and Address Pool
If the problem is widespread, it's most likely related to your router's DHCP server settings. You'll need to access the device's web interface. This typically involves entering the address in your browser. 192.168.0.1 or 192.168.1.1 and enter the administrator login/password.
Find the section responsible for the local network (often called LAN or DHCP Server). Check the address pool size. If the range is too narrow (for example, only 10 addresses), expand it. Ideally, set the range between 100 and 200, which will allow up to 100 devices to connect simultaneously.
| Parameter | Recommended value | Description |
|---|---|---|
| Start IP | 192.168.1.100 | Starting address of the range |
| End IP | 192.168.1.200 | End address of the range |
| Lease Time | 120 minutes | Address rental time |
| Gateway | 192.168.1.1 | Gateway (router) address |
It's also a good idea to reduce the lease time. If set too high, the router will consider the address occupied for a long time, even if the device has long since left the coverage area. Reducing this parameter to 1–2 hours will release addresses more quickly.
What should I do if my router's web interface won't open?
If your browser says "Unable to access the site," make sure your device is connected to the router via cable or Wi-Fi. Check if your network card is set to obtain an IP address automatically (DHCP). Also, try a different browser or incognito mode.
MAC Address Filtering and Security
MAC address filtering is a powerful security feature that often causes the "Access Denied" error. A MAC address is a unique identifier for a network interface, hardcoded by the manufacturer. The router can operate in two modes: allowing only listed devices or denying all listed devices.
Check the section Wireless MAC Filtering in your router settings. If the feature is enabled, review the list of rules. Your phone or laptop may have accidentally been added to the Deny list, or it may simply not be included in the Allow list if the appropriate operating mode is selected.
⚠️ Attention: Some modern smartphones (iOS 14+, Android 10+) use the "Private Wi-Fi Address" or "MAC Randomization" feature. The device presents itself to the router with a different address each time, which can disrupt static access lists.
To resolve this issue, you can either disable filtering completely (if security isn't a concern) or whitelist the MAC address of the affected device. You can find the MAC address in your phone's settings under "About Phone" or "Status."
- 🔍 Find the MAC address in the device settings.
- 📝 Copy it exactly, including colons or hyphens.
- ➕ Add the address to the list of allowed addresses in the router interface.
- 💾 Save the settings and reboot the router.
☑️ Wi-Fi Security Check
Compatibility and encryption issues
Modern security standards are evolving faster than the number of user devices being updated. If your router is configured to use the latest protocol WPA3, and the smartphone was released several years ago, it may simply not understand the security requirements and be denied access.
In the wireless network settings (Wireless Settings) Find the "Security Mode" or "Encryption" setting. Try changing it to Mixed Mode. WPA/WPA2-PersonalThis is the most compatible option, supported by almost all devices released over the past 15 years.
It's also worth paying attention to Wi-Fi standards. If the router only operates in wireless mode, 802.11ax (Wi-Fi 6), older devices of the standard 802.11n may not connect. Set the operating mode to "Mixed" or "Auto" so that the router automatically adapts to the client's capabilities.
Resetting and updating the router firmware
If software settings are lost or an error has crept into the router firmware, a hard reset will help. There's a small button on the device's body. Reset, often recessed into the case. Press it with a paperclip for 10-15 seconds until the indicators blink simultaneously.
After resetting, the router will return to factory settings. You'll have to reconfigure the network name and password. This is a drastic step, but often the only way to fix glitches that accumulate over years of use.
Don't forget to update your firmware. Manufacturers regularly release patches that fix security and stability issues. Visit the manufacturer's official website, find your router model, and download the latest firmware version. Download the file through the web interface under "System Tools" → "Firmware Update."
System Tools → Firmware Update → Select File → UpdateIt's important not to interrupt power to the router during the update. This process takes several minutes, and interrupting it could brick the device.
Frequently Asked Questions (FAQ)
Why does it say "Access Denied" even though the password is correct?
The problem most likely isn't with the password, but with the encryption type or a DHCP pool overflow. Try changing the security type to WPA2-PSK (AES) in your router settings or rebooting the router to free up IP addresses.
What does the error mean on Android, but everything works on iPhone?
This indicates a conflict with a specific device. Try selecting "Advanced" in the Android Wi-Fi settings and changing the "MAC Address" setting from "Randomized" to "Device MAC Address."
Can antivirus software block Wi-Fi connections?
Yes, some "Network Protection" or "Firewall" features in third-party antivirus programs may block connections to new or public networks. Try temporarily disabling your antivirus to check.
How do I know if my MAC address is blocked?
The only way is to go to your router settings and check the Wireless MAC Filtering section. If it's set to "Allow" and your device isn't listed, access will be blocked.