How to restrict Wi-Fi access to one user on your phone: step-by-step instructions

Have you noticed someone connecting to your Wi-Fi without permission? Or do you want to restrict your child's internet access on a specific phone? In this article, we'll cover the topic. 5 working methodsHow to block a Wi-Fi connection for one device—either through the router settings or using a mobile phone. These methods are suitable for most modern routers (TP-Link, ASUS, Keenetic, MikroTik) and smartphones on Android And iOS.

It's important to understand that access restrictions can work in different ways. For example, you can completely block a device by MAC address, limit the speed, set an access schedule or use the function Parental ControlWe'll cover all options, from simple to advanced, taking into account the specific needs of different manufacturers.

If you're unsure which device is stealing your Wi-Fi, first check the list of connected devices in your router's admin panel. To do this, enter the address in your browser. 192.168.1.1 or 192.168.0.1 (default logins and passwords are usually admin/admin or indicated on the router sticker).

1. Blocking by MAC address via a router

The most reliable way to restrict access is block a device by MAC addressThis unique identifier is assigned to each network adapter and does not change (unless manually forged). This method works on all routers, but the settings interface may differ.

How to find the MAC address of the phone you want to block:

• 📱 Android: Settings → About phone → General information → Wi-Fi MAC address
• 🍎 iPhone: Settings → General → About → Wi-Fi Address
• 🖥️ Via a router: View the list of connected devices in the admin panel (section DHCP or Wireless mode).

Now let's add the MAC address to the blacklist:

1. Open the router's admin panel (for example, 192.168.1.1).
2. Go to the section Wireless Mode → MAC Filter (or Wireless → MAC Filtering (on English firmware).
3. Select mode "Ban" (Deny) and add the MAC address of the phone.
4. Save the settings and reboot the router.

Make sure the address is copied correctly (no spaces or dashes)

Make sure your router is not using a whitelist (Allow mode)

Disconnect your device from Wi-Fi before locking it.

Reboot your router after making changes

-->

⚠️ Attention: Some modern phones (especially on Android 10+) are used MAC address randomization to protect your privacy. In this case, blocking may not work, as the address will change with each connection. To disable randomization, go to Wi-Fi Settings → Advanced → Use Random MAC and deactivate the option.

2. Scheduled access restrictions

If you don't want to lock your device forever, but only at certain times (for example, at night or during school), use scheduling functionIt's available in most routers and allows for flexible access control.

Example setup for TP-Link:

1. Login to the admin panel and go to Additional settings → Parental controls.
2. Add a new rule by selecting the phone's MAC address.
3. Specify days of the week and time intervals (for example, from 10:00 PM to 7:00 AM).
4. Save and apply the settings.

On routers ASUS a similar function is called AiProtection → Parental Control, and on Keenetic — Home Network → Devices → RestrictionsIf your router doesn't support scheduling, you can use an alternative method - Wi-Fi shutdown by timer (see section 4).

TP-Link

ASUS

Keenetic

MikroTik

D-Link

Other-->

3. Using the Parental Control feature

Parental Controls not only offer time limits but also the ability to block access to specific websites or content types. For example, you can restrict social media, games, or video hosting services for a specific device.

How to set up on Keenetic:

1. Go to Home Network → Access Profiles.
2. Create a new profile and bind it to the phone's MAC address.
3. In the section Restrictions Select categories of websites to block (for example, "Social Networks" or "Games").
4. Activate the profile and save the changes.

On routers TP-Link with firmware Archer the path will be like this: Additional settings → Parental controls → Add deviceHere you can not only block websites but also set traffic limits.

What to do if parental controls don't work?

If after setup your device still has access to blocked websites, check:

1. DNS serversSome applications (such as VPNs) bypass restrictions by using alternative DNS. Set the DNS in your router to Cloudflare (1.1.1.3 for family filter) or Google (8.8.8.8).

2. Browser cache: Clear history and cookies on your phone.

3. VPN/Proxy: Make sure that you do not have any apps installed on your phone that bypass blocking (for example, Psiphon or 1.1.1.1).

⚠️ Attention: The "Parental Control" function on budget routers (for example, Tenda or Mercusys) is often implemented in a simplified manner and may block traffic incorrectly. If you need flexible settings, consider purchasing a router with support OpenWRT or installing alternative firmware.

4. Disabling Wi-Fi by timer (alternative to scheduling)

If your router does not support access schedule, you can use automatic Wi-Fi shutdown functionFor example, on Xiaomi Mi Router This is done through the app Mi Wi-Fi:

1. Open the app and select your router.
2. Go to Settings → Wi-Fi Schedule.
3. Specify the shutdown time and days of the week.
4. Save the settings.

On routers TP-Link with firmware Tether a similar function is called Night modeThe main disadvantage of this method is that Wi-Fi will be disabled for all devices, not just for one phone. If you need selective disabling, combine this method with MAC address filter (section 1).

For advanced users: on routers with OpenWRT or DD-WRT You can set up automatic Wi-Fi shutdown for a specific device via cron and scripts. Example command for disabling a device with a MAC 00:1A:2B:3C:4D:5E at 10:00 pm:

0 22   * iw dev wlan0 station del 00:1A:2B:3C:4D:5E

5. Device-specific speed limit

If you don't need to completely block access, but you want to limit internet speed for a phone (for example, to prevent a child from downloading large files), use the function QoS (Quality of Service) or Bandwidth Control.

Example setup for ASUS RT-AX88U:

1. Go to Adaptive QoS → Bandwidth Limiter.
2. Add a new rule by specifying the phone's MAC address.
3. Set limits on downloading (Download) and uploading (Upload), for example, 1 Mbps.
4. Save and apply the settings.

On routers TP-Link a similar function is found in Advanced Settings → QoS → Bandwidth ManagementPlease note: speed limiting only applies to traffic passing through the router. If your phone is connected to mobile data (4G/5G), these settings will not apply.

6. Blocking via the router's mobile app

Many modern routers support management via mobile applications, where you can quickly lock your device in a couple of clicks. For example:

• 📱 TP-Link Tether: Chapter Devices → select phone → Block.
• 📱 ASUS Router: Tab Clients → click on the device → Internet blocking.
• 📱 Keenetic: Chapter Home network → select device → Restrict access.
• 📱 Xiaomi Mi Wi-Fi: Tab Devices → swipe left on your phone → Block.

The advantage of this method is instant application Without rebooting the router. However, blocking via the app is usually temporary and resets after rebooting the router. For permanent restrictions, it's better to use the methods in sections 1–3.

⚠️ Attention: In some applications (eg. TP-Link Tether) blocking the device leads to its disconnection from the network, not access restrictions. This means the phone won't be able to connect to Wi-Fi at all until the block is lifted. If you need to maintain access to the local network (for example, for printing), use the MAC address filter in the admin panel.

Common mistakes and how to avoid them

Many users encounter common issues when setting up restrictions. Here are the most common errors and their solutions:

• ❌ Incorrect MAC address: Make sure you copied the address exactly Wi-Fi adapter, not Bluetooth or Ethernet. Android check in Settings → Wi-Fi → Advanced.
• ❌ The router does not save settings: Before changing the settings, make a backup copy of the configuration (section System Tools → Backup). If something goes wrong, you can restore the working settings.
• ❌ The lock doesn't work: Check that the function MAC address filter enabled (on some routers it is disabled by default). Also, make sure that the device is not connecting via guest network (its settings may differ).
• ❌ Resetting settings after updateUpdating your router's firmware may reset your settings. After the upgrade, check your blocking rules and reconfigure them if necessary.

If you block a device by MAC address but it still connects, check if the phone is using the "Random MAC" feature (see section 1). iPhone This option is called "Private Wi-Fi Address" and is located in the settings of a specific network.

FAQ: Answers to frequently asked questions

Is it possible to block Wi-Fi access without a router, just from your phone?

No, completely block the device This is only possible through the router settings. However, on your phone you can:

• Disable Internet sharing (if the phone is used as an access point).
• Install a parental control app (eg. Google Family Link) to restrict access to certain websites.
• Turn on Airplane mode to turn off all wireless connections.

But these methods will not replace blocking at the router level.

How do I know who is connected to my Wi-Fi?

There are several ways:

1. Via the router admin panel: section DHCP clients or Wireless Mode → Statistics.
2. Using mobile applications: Fing, WiFi Guard or NetCut (scan the network and show all devices).
3. Via a command in the terminal (for advanced users):

   arp -a

   Displays a list of IP and MAC addresses of connected devices.

If you see an unfamiliar device, compare its MAC address with the addresses of your gadgets (see section 1).

Will a blocked device be able to see my network?

It depends on the blocking method:

• 🔴 MAC address filter: The network will be visible, but you won't be able to connect.
• 🔴 Hiding the SSID: The network will not be displayed in the list of available ones (but this is not a reliable security method).
• 🟢 Parental control: The network will be visible, but internet access will be limited.

To prevent the network from being displayed at all, disable SSID broadcasting in the router settings (Wireless → Settings → Hide Network). However, this will not protect against targeted attacks—an experienced user can connect manually, knowing the network name.

Is it possible to restrict Wi-Fi access using a phone's IMEI?

No, IMEI (unique phone identifier) not used To control Wi-Fi access. Blocking only works for:

• MAC address;
• IP address (changes with each connection);
• Device name (not reliable as it can be changed).

IMEI is used only to identify the phone on mobile networks (3G/4G/5G) and has nothing to do with Wi-Fi.

How to unlock a device if you forgot your router password?

If you have lost access to your router's admin panel, there are two options:

1. Reset settings: Press and hold the button Reset Wait 10-15 seconds on your router. All settings will be reset to factory defaults, including blocking rules.
2. Password recovery: On some routers (for example, Keenetic) You can reset your password through an application linked to your cloud account.

After the reset, you will need to reconfigure your network and blocking rules.