How to restrict Wi-Fi access for other users on a TP-Link router: 5 working methods

Have you noticed that your Wi-Fi has become slower and unfamiliar devices are appearing in the list of connected devices? Or do you simply want to protect your network from strangers? Restricting access to Wi-Fi on TP-Link routers — a task even a beginner can handle. In this article, we'll cover all the relevant methods: from basic password changes to advanced settings like MAC address filtering and creation guest network.

It is important to understand that each method has its own nuances. For example, MAC blocking It's effective against random connections, but won't protect you from experienced hackers who can spoof the address. guest network It's convenient for access control, but it's not always supported on older router models. We'll explain in detail which method to choose depending on your situation—whether it's a home network or a small office.

All instructions in the article are relevant for modern routers. TP-Link (series Archer, Deco, TL-WR etc.) with firmware based on TP-Link Omada or the standard web interface. If you have an older model (manufactured before 2018), some menu items may differ—we'll warn you about this separately.

1. Changing your Wi-Fi password is the first step to security.

The simplest, but often overlooked, way to restrict access is change your Wi-Fi passwordMany users don't update it for years, which is a shame: even a complex password can be cracked by brute-force attacks if it's not changed regularly. On routers TP-Link it's done in 2 minutes:

1. Open your browser and type in the address bar 192.168.0.1 or 192.168.1.1 (standard IP for TP-Link).
2. Enter your login and password (usually by default admin/admin, if you haven't changed it).
3. Go to the section Wireless → Wireless Settings (or Wireless → Wireless Settings (in the English version).
4. In the field PSK password (Wireless Password) Enter a new password of at least 12 characters, using letters, numbers, and special characters.
5. Save the changes by clicking the button Save (Save).

After changing the password, all devices will be disconnected from the network and must be reconnected. This method doesn't require advanced security knowledge, but it does have a downside: if someone else discovers the password, access will become uncontrolled again. Therefore, it's best combined with other methods.

2. MAC Address Filtering: How to Block Specific Devices

If you want to allow connection only certain devices (for example, your smartphones and laptops), set up MAC address filteringThis method is more secure than a password, as each gadget has a unique MAC address that's difficult to forge without specialized knowledge. Here's how to do it on a TP-Link:

1. Go to your router's control panel (see step 1 of the previous section).
2. Go to Advanced Settings → Wireless Mode → MAC Filter (Advanced → Wireless → Wireless MAC Filtering).
3. Activate filtering by checking the box next to Enable MAC address filtering.
4. Select mode Allow the stations specified in the list to access the network (or Allow (in the English version).
5. Add the MAC addresses of your devices. You can find them here:
   • 📱 On Android: Settings → About phone → General information → Wi-Fi MAC address.
   • 💻 On Windows: run the command ipconfig /all in the command line and find the line Physical address.
   • 🍎 On iPhone/iPad: Settings → Wi-Fi → (click the "i" next to the network) → MAC address.

Save the settings.

Important: MAC addresses can be spoofed, so this method does not provide 100% protection, but it does make life much more difficult for most "freeloaders."

Make sure all your devices are connected to the router|Collect the MAC addresses of all your gadgets in advance|Check if your TP-Link model supports MAC filtering (very old ones may not have this option)|Save your settings in case you reset your router-->

3. Guest network: access control without blocking

If you don't want to completely block other people's devices, but you're not ready to give them full access to your network, set up guest networkThis is a separate Wi-Fi network with its own name and password, which:

• 🔒 Isolates guest devices from your main network (they won't see your printers, NAS, or other gadgets).
• 📶 Limits internet speed (optional).
• ⏰ Can work on a schedule (for example, only during the day).

Instructions for TP-Link:

1. Go to your router control panel.
2. Go to Guest network (Guest Network) - this item is usually located in the section Wireless mode.
3. Enable the guest network by checking the box next to Enable guest network.
4. Set the network name (SSID) and password. We recommend using the "Guest" prefix in the name to distinguish it from the main network.
5. In the section Insulation (AP Isolation) enable the option to prevent guest devices from seeing each other.
6. If necessary, limit the speed or set a network schedule.
7. Save the settings.

A guest network is convenient for use with friends, renters, or co-workers. The downside of this method is that not all TP-Link models support this feature (for example, on budget routers of the series TL-WR740N it may not exist).

4. Scheduled Wi-Fi shutdown: Automatic blocking

If you want Wi-Fi to be available only during certain hours (for example, from 8:00 AM to 11:00 PM), set wireless network scheduleThis is useful for:

• 🏠 Homes with children (limited night access).
• 🏢 Offices (the network operates only during business hours).
• 🏨 Hotels or rental housing (control of tenants' access time).

How to set up on TP-Link:

1. Log in to your router's control panel.
2. Go to Advanced Settings → Wireless → Wireless Schedule.
3. Activate the schedule by checking the box next to Enable wireless schedule.
4. Specify the days of the week and time intervals when Wi-Fi should be available. For example, from 8:00 AM to 11:00 PM daily.
5. Save the settings.

After this, the router will automatically turn off Wi-Fi at the specified time. Please note that this does not block cable (Ethernet) access—only wireless connections.

What to do if the schedule doesn't work?

If your router doesn't turn off Wi-Fi on schedule, check:

1. The time on the router (it must match the real time, otherwise the schedule will shift).

2. Availability of firmware updates (bugs in older versions may break this function).

3. Reboot the router after saving the settings.

5. Blocking devices via the client list

If you already have suspicious devices on your network, you can block them directly through list of clientsThis method is useful when you see unfamiliar devices online but don't know their MAC addresses. Instructions:

1. Go to the TP-Link control panel.
2. Go to Wireless Mode → Wireless Mode Statistics (Wireless → Wireless Statistics).
3. In the list of connected devices, find unfamiliar ones and copy their MAC addresses.
4. Return to section MAC address filter (see section 2) and add these addresses to the block list by selecting the mode Deny the stations specified in the list access to the network.
5. Save the settings.

Also some TP-Link models (for example, Archer C6 or Deco M5) allow you to block devices directly from the client list with a button BlockIf this option is not available, use MAC filtering.

6. Additional safety measures: what else can you do?

In addition to the basic methods discussed above, there are several additional measuresthat will strengthen the security of your network:

Hiding your SSID is a controversial method. On the one hand, your network won't be visible in the public list. On the other hand, its name can still be found using specialized programs (for example, Wireshark), and the connection will become less convenient for legitimate users.

7. What to do if nothing helps?

If, despite all measures, third-party devices continue to connect to your network, it is possible:

• 🔄 Someone you know (or neighbors) is intentionally bypassing blocking devices. Check if anyone has given out their Wi-Fi password.
• 🕵️‍♂️ Your router has been hacked. In this case, the only solution is a full factory reset (System Tools → Factory Reset).
• 📡 The issue is a firmware vulnerability. Update your router firmware to the latest version.
• 🏢 Your internet provider uses a shared network (for example, in apartment buildings). Check with support.

In extreme cases it is possible temporarily disable Wi-Fi and use only a cable connection until the problem is resolved. To do this, find the section in the TP-Link control panel Wireless → Wireless Settings and uncheck Enable wireless broadcasting.

FAQ: Frequently asked questions about restricting Wi-Fi access on TP-Link

Is it possible to limit internet speed for specific devices?

Yes, most TP-Link routers (except budget models) have this function. QoS (Quality of Service)It allows you to limit the speed of individual devices by MAC address or IP. You can find it in the section Additional settings → QoS or Bandwidth Control.

Example: If you want to prevent guest devices from consuming more than 5 Mbps, create a QoS rule with a limit for their MAC addresses.

How do I know who is connected to my Wi-Fi?

In your TP-Link control panel, go to Wireless Mode → Wireless Mode Statistics. A list of all connected devices will be displayed there, along with their MAC addresses, IP addresses, and names (if they are broadcast).

To identify an unknown device, you can:

• Talk to your family - it might be their new gadget.
• Use apps like Fing (for Android/iOS), which show the device manufacturer by MAC address.

Why does the device still connect after blocking the MAC address?

Possible reasons:

1. The device has changed its MAC address (this can be done programmatically on many smartphones and PCs).
2. You have added the MAC address to the allowed list, not the blocked list (check the filtering mode).
3. The router settings were lost after an update or reboot.
4. The device connects via the guest network (if configured).

Solution: Refresh the MAC address list, check the filtering mode and reboot the router.

Is it possible to limit Wi-Fi access by time for a specific device?

On most TP-Link routers There is no built-in time limit feature for individual devices.However, there are workarounds:

• Use guest network with the schedule (see section 3).
• Tune parental control (if supported by your model) in the section Additional settings → Parental controls.
• Install third-party firmware (for example, DD-WRT), if your router supports it.

How do I reset my TP-Link router if I forgot my password?

If you forgot the password for your router control panel, follow these steps: hard reset:

1. Find the button on the back of the router. Reset (usually it is recessed into the body).
2. Take a paper clip or toothpick, press and hold the button for 10-15 seconds until the indicators start flashing.
3. After rebooting, the router will return to factory settings (login/password - admin/admin).

⚠️ Attention: After resetting, all settings (including the Wi-Fi password, MAC filtering, and guest network) will be deleted. You'll need to set them up again.