Many people are familiar with the situation when their home network suddenly slows down, and video calls turn into slideshows. Often, the cause isn't a provider outage, but rather unauthorized devices connecting to your router. These could be neighbors who've discovered a simple password, or even guests whose phones automatically search for a familiar network. In any case, the channel becomes clogged, and speeds drop to critical levels.
You can solve this problem without purchasing new equipment. Modern routers have built-in tools that allow for strict access control. You can either completely block connections from strangers or set a limit on the number of active clients. This will give you back control over your traffic and improve the security of your personal data.
In this article, we'll cover all available methods: from a simple password change to setting up advanced MAC address filters. You'll learn to see who's using your network and quickly disable unwanted access. The key is to act consistently to avoid blocking your own devices.
Diagnostics: Who's Connected to Your Network Right Now
Before installing any blocks, you need to conduct an audit of the current situation. You need to know exactly how many devices are currently connected to the network and which of them belong to you. To do this, simply log into the router's administrative panel. The login address is usually located on a sticker on the bottom of the router's housing, most often on 192.168.0.1 or 192.168.1.1.
After logging in (the default login and password are often written on the sticker if you haven't changed them), find the network status section. It may be called Wireless Status, Client List, Client list or DHCP Server ListThis menu displays a table with IP addresses, MAC addresses, and sometimes names of connected devices.
Compare the list in the panel with the gadgets you have. Smartphones, tablets, smart TVs, set-top boxes, and computers all take up one line. If you count 5 lines and only have 3 gadgets, then there are uninvited guests. Pay attention to the MAC addresses: the first 6 characters (e.g., AA:BB:CC) indicate the manufacturer of the device, which will help identify the “outsider”.
It's important not to confuse active connections with reserved addresses in the DHCP pool. The router may show 10 addresses allocated, but only three are actually functional. Look specifically at the "Connected" status or the "Last Connected Time."
⚠️ Caution: If you discover an unknown device, don't rush to change its security settings. First, make sure it's not a smart plug, light bulb, or vacuum cleaner, which may have obscure names in the system.
Basic Method: Change Password and Hide SSID
The most radical and effective way to get rid of all connected users is to change your Wi-Fi password. After this, all devices will be automatically disconnected, and you'll have to re-enter the new key on each device. This ensures that no one from your old "neighbors" connections will be able to access your network again.
To enhance security, it is recommended to change not only the password, but also the encryption type. Make sure the standard is selected. WPA2-PSK or newer WPA3Older WEP or WPA protocols can be easily cracked in minutes with specialized tools. The password should be complex: use a combination of upper- and lower-case letters, numbers, and special characters, at least 12 characters long.
An additional measure is to hide the network name (SSID). If the function Hide SSID or Enable Hidden Wireless Once activated, your network will no longer appear in your neighbors' list of available networks. To connect to it, you'll need to manually enter the network name and password in the device settings. This doesn't provide 100% protection from hackers, but it will deter 99% of regular users.
Please note that after changing the password, smart home devices (lamps, robotic vacuums) may lose connection to the router. They often need to be reconfigured using the manufacturer's mobile app.
Fine-grained customization: Max Clients limit
If you don't want to change your password and reset all connections, you can use the maximum number of users limit. This option is available in many modern routers, especially small business models or advanced home series (e.g., MikroTik, Keenetic, TP-Link with OpenWrt firmware).
The setting is in the wireless network section (Wireless or Wi-Fi). Look for the parameter Max Clients, Maximum Associated Stations or User limitBy default, this value is often set to 0 (unlimited) or the maximum supported by the hardware (e.g., 32 or 64). Set the number to match the number of your devices plus 1-2 spare devices for guests.
Once the limit is reached, the router will simply stop issuing IP addresses to new devices or refuse association. Existing connections will remain stable and unaffected. This is the ideal way to ensure that even if neighbors learn your password, they won't be able to disrupt your network.
☑️ Setting up user limits
It's worth keeping in mind that some low-cost router models may not have such flexible settings in their default firmware. In this case, you'll have to rely on MAC address filtering, which we'll discuss below.
MAC address filtering: whitelists and blacklists
The most flexible control tool is MAC address filtering. Every network interface in the world has a unique identifier—a MAC address. A router allows you to create a list of allowed addresses (White List) or a list of blocked addresses (Black List).
The "Blacklist" mode (Deny/Block) is convenient for temporarily blocking specific intruders. You see a client device in the list, copy its MAC address, add it to the Rules, and select "Deny." The device immediately loses access, but other new devices can connect freely (if they know the password).
Whitelist mode (Allow/Permit) provides maximum security. In this mode, the router allows connections ONLY to devices whose MAC addresses are listed in the table. All others, even with the correct password, are rejected. This is the most reliable way to limit the number of Wi-Fi users, as the number of spots on the list formally limits the number of clients.
| Filter type | Operating principle | Security level | Convenience |
|---|---|---|---|
| Without filtration | Access to anyone who knows the password | Short | High |
| Blacklist (Deny) | Blocking specific addresses | Average | Average |
| Whitelist (Allow) | Access only for selected addresses | Maximum | Low (difficult to add guests) |
To set up a whitelist, you'll need to know the MAC addresses of all your devices in advance. These are usually listed in the About the phone -> Information or on a sticker under the laptop case. In the router interface, select the mode Allow and enter the addresses manually.
⚠️ Caution: Be careful when setting up a whitelist. If you accidentally forget to specify the MAC address of the device you're configuring the router from (e.g., a laptop), you'll lose access to the admin panel and Wi-Fi. Always leave one device connected via LAN cable for safety.
Speed limit for each device
Sometimes the problem isn't the number of connections, but rather that one device is hogging the entire bandwidth. Bandwidth Control (QoS) allows you to limit the speed for each client or group of clients. This won't reduce the number of users, but it will make their presence more comfortable for you.
Find the section in your router settings Bandwidth Control or QoSHere you can set rules. For example, you can set a rule: for all devices except your PC, the maximum download speed is no more than 2 Mbps. This way, even if 10 neighbors connect, they won't be able to slow down your internet, as they will only use a portion of the bandwidth.
Some routers, for example, MikroTik or Keenetic, allow you to create priority queues. You can assign the highest priority to your gaming computer or Smart TV. The router will automatically reduce the speed of other clients if the channel is overloaded, ensuring smooth operation of your most important tasks.
What is QoS?
Quality of Service (QoS) is a traffic prioritization technology. It allows the router to understand which data is most important (for example, a video call or an online game) and transmit it first, even if the channel is busy downloading files.
The advantage of this method is that you don't have to block anyone. Guests can use the internet, check email, or messaging apps, but they won't be able to watch 4K video, which is blocked by the network.
Guest Network: The Perfect Compromise
If you frequently have guests or rent out your apartment, there's no need to mess with the basic settings. The best solution is to activate Guest network (Guest Network) This is a virtual second Wi-Fi network that runs on the same router but is isolated from your main network.
You can set up separate rules for your guest network: a password, a name (SSID), and, most importantly, restrictions. You can set a speed limit for the guest zone or restrict the number of connections there. Your personal files on the network drive or printer will be inaccessible to guests.
The setup is simple: in the section Guest Network Enable the feature and set a username and password. Often, there's also a timer: you can set the network to only operate from 6:00 PM to 11:00 PM or to turn off automatically after two hours. This is a great way to control access without unnecessary conflicts.
Keep in mind that a guest network also uses up your router's CPU resources. If you have a very old or underpowered model, simultaneously activating both the main and guest networks with a large number of clients may lead to instability.
Frequently asked questions and problems when restricting access
During setup, users often encounter nuances that aren't immediately obvious. Below are answers to the most common questions to help avoid mistakes.
Is it possible to restrict users if I don't know the router password?
No, you need to log in to the admin panel to change access settings (limits, MAC filters). If you don't know the Wi-Fi password, you won't be able to connect to the network, and therefore, you won't be able to configure it. If you forget the password for the router admin panel, you'll have to perform a factory reset, which will delete all current configurations.
Will the restriction work if the user uses a VPN?
Yes, it will work. The restriction occurs at the MAC address and access point connection level. The router sees the device and its unique identifier regardless of the traffic being transmitted or whether the VPN is enabled. A VPN encrypts data but doesn't hide the fact that you're connected to Wi-Fi.
What should I do if my router can't handle the specified number of clients?
Some budget models may freeze or reset when attempting to hard limit if their processor is weak. In this case, try updating your router's firmware to the latest version. If this doesn't help, the model's hardware limitations may prevent it from effectively managing the client list, and you should consider upgrading to a more powerful device.
Do users see that their speed is limited or they are blacklisted?
They won't receive any direct notification. If blocked (Blacklisted), the device will simply display "Obtaining IP address..." or "Failed to connect." If the speed is limited, the internet will simply load very slowly. Standard Wi-Fi protocols don't provide any special "You have been blocked by the administrator" messages.
How often should I change my security settings?
It's recommended to check your client list at least once a month. If you use a strong password and a MAC address whitelist, frequent changes to these settings are unnecessary. However, if you frequently host guests and provide them with a password, periodically changing the access key is a good precaution.