Many router owners are familiar with the situation when unauthorized devices connect to their home network. Internet speeds drop, ping in games becomes critical, and confidential data is at risk. It's precisely in moments like these that the urgent need to know arises. How to restrict WiFi users on a TP-Link router and regain control of your network.
Modern routers from this brand offer flexible tools for managing connected clients. You can not only completely block uninvited guests, but also set up an access schedule or limit the speed for specific devices. This is especially useful for families with children or small offices that need to segment traffic.
In this article, we'll cover all available protection methods in detail: from a simple password change to advanced MAC address filtering. You'll learn how to use the web interface and mobile app to effectively manage your list of approved devices.
Primary diagnostics of connected devices
Before applying strict blocking measures, you need to make sure that unauthorized users are actually connected to the network. Low speeds are often caused by background updates on your own smartphones or Smart TVs. Log in to the router's admin panel by entering [name] in the browser's address bar. tplinkwifi.net or IP address 192.168.0.1.
After logging in, find a section that might be called "Wireless Statistics," "Client List," or "Status." This displays a complete list of all active connections. Review the list carefully: if you see unfamiliar device names or if there are more devices than you own, access is open to unauthorized users.
⚠️ Note: Some devices may appear with the name "Unknown" or a random string of characters. Don't rush to block them—first check if it's your smart light bulb, printer, or security camera.
For precise identification, compare MAC addresses. These are unique identifiers for network cards and can be found in the settings of each of your personal devices. If there are no matches and the device is actively consuming traffic, this is cause for concern.
Basic protection: changing the password and network name
The most radical but effective way restrict WiFi access — This is a security key change. After changing the password, all connected devices will be disconnected, and you'll have to re-enter the new code on each one. This ensures that anyone with the old password will no longer be able to log in.
Go to the menu Wireless (Wireless Mode) and select Wireless SecurityIt is recommended to set the encryption type here. WPA2-PSK or WPA3, as they provide the best protection against hacking. Avoid using the outdated WEP protocol, which breaks within minutes.
Create a complex password using a combination of letters, numbers, and special characters. It's also a good idea to change the network name (SSID) to remove personal information, such as your last name or apartment number. This will make it more difficult for hackers using default password dictionaries.
MAC address filtering: creating white and black lists
A more sophisticated management tool is MAC address filtering. It allows you to create a list of allowed devices (White List) or, conversely, a list of prohibited devices (Black List). This method operates at the hardware address level, so it cannot be changed simply by reconnecting.
To configure, find the section Wireless MAC FilteringHere you'll need to add the MAC addresses of all trusted devices. After activating the "Allow the stations specified by any enabled entries to access" rule, everyone else, even with the password, will be unable to connect.
If your goal is to kick out a specific "neighbor," use block mode. Add their MAC address to the list and select the "deny" option. This is convenient when you don't want to reconfigure all your devices, but need urgent access to the intruder.
☑️ Configuring MAC address filtering
This means the phone may generate a random MAC address for each network. In this case, filtering may stop working if the device changes its identifier.
Using Guest Mode for Temporary Access
If you frequently have guests or rent out your property, there is no need to give them access to the main network. Guest Network (Guest Network) creates an isolated WiFi segment. Guest network users can access the internet but cannot see your computers, printers, or NAS storage.
You can set up a guest network in the section Guest NetworkYou can set a separate network name and password. The main advantage is the ability to set an access timer or limit the number of connections. For example, the network can only be active for 4 hours a day.
This is an ideal option for situations where you need restrict WiFi users over time, without blocking them completely. You're safe because your local network is protected, and your guests are happy with their internet connection.
What is the difference between client isolation and guest networking?
AP Isolation prevents devices within the same network from communicating with each other. A guest network is a separate logical segment (VLAN) completely separated from the main home network, but devices within the guest network can see each other unless isolation is enabled.
Parental controls and speed limits
Often, user restrictions don't mean complete blocking, but rather time or speed controls. In TP-Link routers with firmware Archer or Tether There's a built-in parental control module. It allows you to create profiles for children with strict time limits.
You can set up a rule to close internet access at 10:00 PM or restrict it on weekdays. Content filtering is also available: block adult websites, gambling, or social media sites based on keywords.
To limit the speed (Bandwidth Control), go to the corresponding section of the menu. Here you can set the maximum download and upload speed for each IP address. This will prevent a single user from hogging your entire bandwidth downloading torrents.
Setting up a schedule requires accurate system time. Make sure that in the section System Tools -> Time Settings The correct time zone and internet synchronization (NTP server) are set. Otherwise, blocking will occur at the wrong time.
Settings via the TP-Link Tether mobile app
The most convenient way to manage access is via a smartphone. The app TP-Link Tether (or Deco (for mesh systems) allows you to do this remotely, from anywhere in the world. The app's interface is more intuitive for beginners than the web version.
In the "Clients" section, you can see a list of all connected devices in real time. By tapping on any device, you can instantly block access, rename it for convenience, or check the connection speed. The app will also notify you of new connections.
| Function | Web interface | Tether app | Complexity |
|---|---|---|---|
| MAC blocking | Full | Basic | Average |
| Parental control | Extended | Simplified | Low |
| Guest network | Eat | Eat | Low |
| Speed Limit | Eat | Partially | High |
Frequently Asked Questions (FAQ)
Can a blocked user bypass the restriction?
If you used a simple password change, then yes, if they know it. If you used MAC address filtering, bypassing it is more difficult, but possible by changing the MAC address on your device (spoofing). However, for the average user of your neighbor's WiFi, this is too complex a procedure. The combination of a complex WPA3 password and a MAC address whitelist provides maximum protection.
Will the router reset when the power goes out?
No, all settings, including block lists and passwords, are saved in non-volatile memory. User restriction rules will remain in effect after a reboot or power surge. A reset is only possible by pressing the Reset button on the device.
How can I find out who is online if the device name is "Android-123"?
Look at the uptime and bandwidth consumption in the client list. Try disabling WiFi on your devices one by one and see which one disappears from the list. You can also use network scanners on your PC, such as Advanced IP Scanner, to get more detailed device information.
Does the number of blocked devices affect the router speed?
The mere presence of a device on the "blacklist" has virtually no impact on performance, as the router simply discards packets from it. However, if you have hundreds of devices on the whitelist, the ARP table may become overloaded, which is typical for very cheap models, but rare in home environments.
⚠️ Note: The interface of TP-Link routers may differ depending on the firmware version and model (green or blue interface). If you don't see the described options, try updating your router's firmware to the latest version or refer to the manual for your specific model.