Slow page loading speeds and constant lag in online games often indicate that someone has accessed your wireless network. Modern routers have powerful access control tools that allow you to instantly kick out intruders. Blocking someone else's Wi-Fi — this is not just a way to regain full channel capacity, but also a necessary digital hygiene measure.
In this guide, we'll cover proven security methods, from simply changing your password to setting up advanced MAC address filters. You'll learn how to recognize devices in your client list and configure your router to make it technically impossible for new devices to connect without your knowledge. The only 100% reliable security method is a combination of WPA3 encryption and strict MAC address filtering.
Before you begin configuring your router, you'll need to log into your router's web interface. To do this, enter the device's IP address in the browser's address bar, usually 192.168.0.1 or 192.168.1.1If the default addresses don't work, turn the router over: the sticker on the bottom always indicates the exact IP address, as well as the username and password for accessing the control panel.
Analysis of connected devices and search for violators
The first step in keeping your internet connection clean is a detailed audit of your current situation. You need to know exactly who's using your access point to avoid accidentally blocking your smart kettle or TV. In the router interface, this section is often called Client List, Wireless Statistics or "Client List".
Review the list carefully. Network card manufacturers often encode device brand information in the MAC address. For example, addresses starting with certain prefixes may belong to a company. Apple, Samsung or XiaomiIf you see a device you can't identify, try temporarily turning off Wi-Fi on all your devices and see if the suspicious entry disappears from the list.
Pay attention to data transfer activity. Some advanced firmware, such as Keenetic or MikroTik, show your traffic volume in real time. If an unknown device is downloading gigabytes of data while you're simply reading a text, it's a clear sign that your bandwidth is being used illegally.
⚠️ Note: Some smart devices (lamps, sockets) may not display with a clear name, but instead be labeled "Unknown" or a series of numbers. Don't block them immediately; test your smart home after disabling them.
For accurate identification, you can use third-party network scanning utilities on your smartphone, such as Fing or Network ScannerThey will help you match the MAC address on your router to the specific device model in your apartment.
Changing your password and strengthening your cryptography
The most radical and effective method is to change the wireless network access key. This will forcefully disconnect all connected devices, including your own, which will then have to be reconnected with the new password. Go to Wireless or Wi-Fi Settings and find the field WPA Pre-Shared Key.
When creating a new password, avoid obvious combinations like your date of birth or phone number. Use a combination of uppercase and lowercase letters, numbers, and special characters. The password should be at least 12 characters long. Choosing the right encryption algorithm is also critical.
From the list of security methods, select WPA2-PSK (AES) or, if your hardware supports it, WPA3-Personal. Obsolete protocols WEP And WPA/TKIP They can be hacked in minutes even by beginners using automated scripts.
After saving the settings, the router will reboot the wireless module. All devices will lose connection, and access will only be possible after entering a new key.
Setting up MAC address filtering
MAC address filtering creates a "whitelist" of devices that are allowed to connect. Even if an attacker learns your password, they won't be able to access the network because their physical address isn't listed as an allowed address. This feature is located in the "Security" section. Wireless MAC Filtering or Access Control.
The setup process requires careful consideration. First, you need to collect the MAC addresses of all your trusted devices (phones, laptops, TVs). Then, in the router interface, you add them to a table and enable "Allow" or "Whitelist" mode.
In some router models, for example TP-Link or Asus, you can simply click the "Add" button next to the device's name in the client list, instantly whitelisting it. This greatly simplifies the process.
☑️ Setting up a whitelist
Keep in mind that MAC addresses can be spoofed (cloned), but this method is sufficient for protection against a novice neighbor. For professionals, this barrier won't be a serious obstacle, but it will raise the barrier to entry.
Hiding the network name (SSID) as a security method
Hiding the SSID (Service Set Identifier) makes your network invisible to standard searches on smartphones and laptops. It won't appear in the list of available connections until the user manually enters the network name. This setting is available in the "Settings" section. Wireless Settings by unchecking the item Enable SSID Broadcast.
This method is often called "invisibility protection." It's convenient because random passersby with Wi-Fi turned on won't see your network listed. However, it doesn't provide full encryption.
Specialized software easily detects hidden networks based on the service data packets that devices transmit. Therefore, hiding the SSID only makes sense in conjunction with a strong password.
Why is hiding the SSID not enough?
Hiding the network name only creates the illusion of security. Traffic between the device and the router continues to flow, and can be intercepted and analyzed if desired.
The downside of this method is the inconvenience of connecting new guest devices: each time you have to manually enter the full network name, taking care to ensure proper case.
Disabling WPS and remote access
Technology WPS (Wi-Fi Protected Setup) was created to simplify connection, but it's one of the biggest security holes in home routers. It allows connection using a PIN code, which can often be brute-forced within a few hours. We recommend finding this section immediately. WPS and switch it to the state Disable.
Also check your remote control settings (Remote Management). If this feature is enabled, you can theoretically manage your router from anywhere in the world, provided you know its IP address. For a home network, this feature is typically unnecessary and should be disabled.
Don't forget to change the default password for logging into your router's admin panel (admin/admin). This will prevent anyone who accidentally or intentionally connects to your network from changing your security settings.
⚠️ Note: After disabling WPS, the quick connect button on the router will no longer work. New devices will need to be connected by entering the password.
Comparison of network security methods
Different protection methods vary in effectiveness and ease of use. Below is a table to help you choose the optimal strategy or combination of strategies for your situation.
| Method of protection | Efficiency | Convenience | Difficulty of setup |
|---|---|---|---|
| Change password (WPA3) | High | Average | Low |
| MAC address filtering | Average | Low | Average |
| Hiding the SSID | Low | Low | Low |
| Disabling WPS | Critical | High | Low |
As the table shows, no single method is perfect. Changing the password provides high security, but requires entering the data on all devices. MAC filtering is reliable, but requires time-consuming maintenance when purchasing new equipment.
A comprehensive approach yields the best results: enabling WPA3, disabling WPS, and regularly changing the password. MAC filtering makes sense in homes with children to limit their access at certain times, or in offices.
Frequently Asked Questions (FAQ)
Can my neighbor see that I blocked him?
They won't receive a direct notification. The network will simply appear unavailable (with a status of "Obtaining IP address" or "Authentication error"), or they won't be able to connect at all if MAC filtering is enabled.
Will internet speed decrease after blocking?
On the contrary, speed should increase as the channel is cleared of extraneous traffic. However, the filtering process itself may create minimal CPU load on very old routers, but this is unnoticeable on modern models.
What should I do if I forgot my router password and can't access the settings?
In this case, the button will help Reset on the back panel. Press it with a paperclip for 10-15 seconds. The router will reset to factory settings, and you can log in using the information on the sticker on the bottom of the device.
Does the number of connected devices affect connection stability?
Yes, each client takes up some of the router's CPU and airtime. If 20-30 devices are connected (especially torrents or 4K streaming), even a powerful router can start to choke and lose connection.