How to Limit Wi-Fi Connections: A Complete Guide to Setting Up Your Router

Controlling who connects to your Wi-Fi network isn't just a security issue, it's also a way to avoid bandwidth congestion. Unauthorized devices can slow down your internet, consume bandwidth, or even pose a threat to your personal data. Fortunately, modern routers offer several effective methods for restricting access—from a simple password change to advanced filtering. MAC addresses and network operating schedules.

In this article, we'll cover all the current ways to restrict Wi-Fi connections, including hidden features that are often overlooked. You'll learn how to block specific devices, set up a guest network with limited permissions, or even completely disable Wi-Fi on a schedule—for example, at night. These instructions are suitable for popular router models: TP-Link Archer C6, ASUS RT-AX55, Keenetic Giga, Zyxel Keenetic Ultra and others.

1. Changing your Wi-Fi password: a simple yet effective method

The most obvious way to restrict access is change your Wi-Fi passwordThis will immediately disconnect all previously connected devices and allow you to manually grant access only to the devices you need. This method works on 100% of routers, but has a drawback: you'll have to re-enter the new password on all your devices.

How to do it:

• 🔧 Open the router's web interface (usually at 192.168.1.1 or 192.168.0.1). The login and password for entry are indicated on the device sticker.
• 🔒 Go to the section Wireless Network (Wi-Fi) → Security Settings (the name may differ).
• 📝 In the field PSK password or Network key Enter a new password (recommended length: at least 12 characters with numbers and special characters).
• 🔄 Save the settings and reboot the router.

If you use WPA3 (the most secure protocol today), then no additional settings are required. WPA2 Make sure the encryption type is set AES, and not TKIP - the latter is outdated and less secure.

2. MAC filtering: targeted device blocking

Each device connected to the network has a unique MAC address — it can be used to create a "whitelist" or "blacklist." In the first case, only devices on the list will be able to connect to Wi-Fi; in the second case, all devices except those blocked will be able to connect.

How to set up filtering using an example TP-Link:

1. Go to Advanced Settings → Wireless → MAC Filtering.
2. Select mode: Allow (white list) or Ban (black list).
3. Add the MAC addresses of your devices. You can find them here:
   • 📱 On Android: Settings → About phone → Status → Wi-Fi MAC address.
   • 💻 On Windows: Run the command ipconfig /all V CMD and find the line Physical address.

Save the settings and reboot the router.

Important: MAC addresses can be spoofed using special programs (for example, Technitium MAC Address Changer), so this method does not provide 100% protection, but it significantly complicates unauthorized access.

How to bypass MAC address filtering?

An attacker can eavesdrop on network traffic (for example, using Wireshark), identify authorized MAC addresses and spoof your own. To avoid this, combine filtering with other methods, such as hiding the SSID or setting a schedule.

3. Hiding the network name (SSID): making Wi-Fi invisible

If you disable network name broadcasting (SSID), your Wi-Fi network won't appear in the list of available networks on your devices. Only those who know the exact name and enter it manually will be able to connect. This isn't a panacea (experienced users can find hidden networks using scanners), but it will reduce the number of accidental connections.

Instructions for ASUS:

• 🔧 Go to Wireless Network → Basic Settings.
• 🔄 Find the option Hide SSID (or Hide SSID) and turn it on.
• 💾 Save the changes.

To connect to a hidden network on a smartphone or laptop, select "Add network manually" in the Wi-Fi settings and enter the name (SSID) and password.

4. Setting up a guest network with limited rights

If you need to provide Internet access to guests, but without the ability to interact with the local network (for example, printers or network drives), use guest networkIt works in parallel with the main one, but has a separate password and restrictions.

Example setup for Keenetic:

• 🔧 Open Home Network → Segments → Guest Wi-Fi.
• 🔒 Enable the guest network and set a unique name (for example, Guest_WiFi).
• 📡 Set a separate password (preferably different from the main one).
• ⏱️ If necessary, limit the speed or time of the network operation.

Benefits of a guest network:

• 🛡️ Isolation from the main local network (guests will not see your devices).
• 📉 Possibility to limit speed or traffic.
• ⏰ Easily disable access at any time.

5. Scheduled Restriction: Automatic Wi-Fi Disable

Many routers allow you to set a Wi-Fi schedule—for example, turning it off at night or when you're away. This not only saves energy but also blocks access during non-working hours.

Setting up on Zyxel Keenetic:

• 🔧 Go to System → Schedule.
• ⏰ Create a new rule by specifying the days of the week and time (for example, from 11:00 PM to 7:00 AM).
• 📡 In the section Wireless network Link the created schedule to Wi-Fi shutdown.

An alternative option is to use the "Parental Controls" feature, if your router has one. This will allow you to limit internet access for specific devices based on time.

Check if your router supports scheduling | Check the current time on the router (it should match the actual time) | Create a rule with a time reserve (for example, turning off 5 minutes earlier) | Test the schedule manually -->

6. Limitation on the number of connected devices

Some routers (eg. Huawei or Xiaomi) allow you to set a limit on the number of simultaneously connected devices. If the limit is exceeded, new devices will be unable to connect until one disconnects.

How to activate on Xiaomi Mi Router 4A:

• 🔧 Open the app Mi Wi-Fi and go to Settings → Advanced → Device Restriction.
• 📊 Set the maximum number of devices (for example, 10).
• 🔒 Enable the "Block new connections when limit is exceeded" option.

This method is useful for offices or cafes where network congestion needs to be limited. It's less common at home—MAC or password filtering is usually sufficient.

7. Advanced Techniques: VLANs and Radio Silence

For experienced users, there are more complex ways to restrict access:

• 🌐 VLAN (Virtual LAN): dividing the network into virtual segments. For example, you can create a separate VLAN for a smart TV so it doesn't have access to computers on the network.
• 📡 Radio silence: Disables Wi-Fi signal broadcasting on certain frequencies (e.g., only 5 GHz). This doesn't block connections, but it does make them more difficult.
• 🔐 802.1X authentication: corporate method using RADIUS server (suitable for offices).

These methods require in-depth knowledge of networking technologies and are not supported by all routers. For example, VLAN is available on MikroTik, Ubiquiti, or routers with firmware DD-WRT.

⚠️ Warning: Incorrect VLAN configuration may result in loss of access to the router. Before experimenting, create a backup copy of the configuration in the section System → Backup.

FAQ: Frequently asked questions about Wi-Fi restrictions

Is it possible to limit the internet speed for a specific device?

Yes, many routers support this feature. QoS (Quality of Service) or "Bandwidth Control". For example, on TP-Link This is configured in Additional settings → QoSYou can set a speed limit for an individual MAC address or IP.

How do I know who is connected to my Wi-Fi?

In the router's web interface, find the section Wireless Mode → Connection Statistics or DHCP → Client List. All devices will be displayed there with their MAC addresses, IP addresses, and names. You can also use mobile apps, for example Fing (Android/iOS).

What should I do if my neighbor hacked my Wi-Fi?

First, change your password to a more complex one (at least 15 characters, mixed case). Then check the list of connected devices and block unknown MAC addresses. If the problem persists, enable MAC filtering in "whitelist" mode and add only your devices.

Is it possible to restrict access to certain websites?

Yes, you can use the "Parental Control" or "URL Filtering" feature for this. For example, on ASUS This is configured in Administration → Parental ControlsYou can block access to social networks, torrents, or other resources using keywords or URLs.

Why don't some devices connect after changing the password?

Possible reasons:

• The device retains old network settings. Try "forgetting" the network in the Wi-Fi settings and reconnecting.
• The new password contains special characters that are not supported by the device (for example, some printers do not work with passwords containing # or !).
• The device has a VPN or proxy enabled that conflicts with the router settings.