How to Limit Wi-Fi Sharing: A Complete Guide for Home and Office

Have you noticed your internet has slowed down, even though your plan hasn't changed? Or do you suspect your neighbors are accessing your network without permission? Share Limits Wi-Fi — this isn't just a way to save traffic, but also an important security measure. In this article, we'll cover all possible methods: from basic password changes to advanced settings. QoS (Quality of Service) on routers from different manufacturers.

We will consider solutions for popular router models (TP-Link, ASUS, Keenetic, MikroTik), and we will also explain how to limit distribution from a smartphone Android And iPhoneWe'll pay special attention to hidden functions that are rarely mentioned in standard instructions, such as: binding devices by MAC address or setting guest network with speed limit.

If you're a landlord and want to limit internet access for tenants, or simply want to prevent children from surfing the web at night, you'll find working solutions here. All methods have been tested on the latest firmware versions from 2026, but interfaces may vary depending on the model.

1. Changing your Wi-Fi password is basic protection against prying eyes.

The easiest way to restrict network access is change password and use a strong encryption standard. Many still use outdated ones. WEP or weak passwords like 12345678, which can be hacked in seconds.

How to do it:

• 🔒 Go to the router's web interface (usually at 192.168.0.1 or 192.168.1.1). The default login and password are indicated on the device sticker.
• 🔄 Find the section Wireless network (or Wi-Fi) → Security settings.
• 🔐 Select encryption type WPA2-PSK (or WPA3-PSK, if supported) and create a password that is at least 12 characters long and includes numbers, letters, and special characters.
• 📱 Don't forget to update your password on all your devices after changing it.

⚠️ Attention: If you use Keenetic, in new firmware the security section may be called Access point → ProtectionOn . ASUS look for Wireless network → tab General.

2. Blocking devices by MAC address (filtering)

Each device has a unique MAC address — it can be used to create a "whitelist" or "blacklist." In the first case, only approved devices will be able to connect to the network; in the second, specific devices will be blocked.

Instructions for TP-Link:

1. Open Wireless mode → MAC address filtering.
2. Select mode Allow (white list) or Ban (black list).
3. Add the MAC addresses of the devices (you can find them in the network settings on your smartphone or in DHCP clients on the router).
4. Save the settings and reboot the router.

On MikroTik the path will be different: Wireless → Security Profiles → MAC FilterHere you can set up more flexible rules, such as time-based blocking.

Where to find the MAC address on different devices

On Android: Settings → About phone → General information → Wi-Fi MAC address.

On iPhone: Settings → General → About → Wi-Fi Address.

On Windows: run the command ipconfig /all V CMD and find the line Physical address.

⚠️ Attention: MAC addresses can be spoofed, so this method doesn't provide 100% protection. It's best to combine it with other methods, such as hiding the network name (SSID).

3. Speed ​​limiting (QoS) for individual devices

If someone in your household is using up all your bandwidth with torrents or online games, you can set speed limits. This is done using technology QoS (Quality of Service), which allows for the distribution of channel bandwidth.

Example setup for ASUS RT-AX88U:

• 📊 Go to Adaptive QoS → Bandwidth Configuration.
• 📈 Specify the actual speed of your Internet connection (you can check it on speedtest.net).
• 🎯 In the section MAC/IP priority Add a device and set a limit (for example, 5 Mbps for download).

On Keenetic the path will be: Internet → QoS → Rules for local devicesHere you can limit the speed both manually and according to a schedule.

⚠️ Attention: On some routers (for example, budget models D-Link) QoS functionality may be limited. In this case, installing third-party software like DD-WRT or OpenWRT, but this requires experience.

Find out your actual internet speed|Enable QoS in settings|Add devices to rules|Set speed limits|Save and reboot the router

-->

4. Setting up a Wi-Fi access schedule

If you want the Internet to be turned off at night (for example, for children) or during working hours (for employees), use access scheduleThis feature is available on almost all modern routers.

Instructions for TP-Link TL-WR841N:

1. Open Wireless mode → Access schedule.
2. Activate the feature and add a rule (for example, access is prohibited from 11:00 PM to 7:00 AM).
3. Apply the rule to all devices or select specific ones by MAC address.

On Keenetic The schedule is configured in the section Home network → Devices → select a gadget → Time limitsHere you can set multiple time intervals.

Important: Some routers (eg. Zyxel Keenetic) allow you to create "exceptions" for individual devices that will work even during blocked times.

5. Creating a guest network with restrictions

A guest network is a separate access point with its own name (SSID) and a password. Its main advantage: devices on the guest network are invisible to your main local network and cannot access shared folders or printers.

How to set up on ASUS RT-AC66U_B1:

• 🔄 Go to Guest network (tab on the left).
• 🔒 Turn on the guest network, set a name (for example, Guest_WiFi) and password.
• ⏱ Set a time limit (for example, 2 hours of connection per day).
• 📛 Limit the speed to 10 Mbps to prevent guests from hogging your connection.

On MikroTik the guest network is created through Wireless → Security Profiles → adding a new profile with restrictions. Here you can also configure isolation of clients (so that devices on the guest network cannot see each other).

⚠️ Attention: On some routers (for example, Tenda) The guest network has access to the local network by default. Disable this option in the settings!

6. Limit Wi-Fi sharing from your phone (Android/iPhone)

If you're sharing internet from your smartphone, you can restrict access only through basic methods: changing the password or disabling the hotspot. However, there are workarounds.

For Android (for example Samsung Galaxy S23):

• 📱 Open Settings → Connections → Mobile hotspot & tethering.
• 🔄 Click Mobile hotspot → Tune.
• 🔒 Change your password and select a security type WPA2 PSK.
• ⏱ Install Auto power off after 5-10 minutes of inactivity.

On iPhone (iOS 17+):

• 📱 Go to Settings → Tethering.
• 🔑 Click Wi-Fi password and install a complex code.
• 🔄 Turn on the option Max. number of devices and limit to 1-2 gadgets.

⚠️ Attention: On Android some manufacturers (for example, Xiaomi) hide the access point settings in Additional functionsIf you can't find the section, search for "access point" in the settings.

7. Advanced Methods: VLAN and Firewall

For experienced users and office networks, more complex solutions are suitable:

• 🌐 VLAN (Virtual LAN): Allows you to divide your network into virtual segments. For example, create a separate network for employees and guests with different access rights. Configurable on routers of the level MikroTik, Ubiquiti or via managed switches.
• 🛡 Firewall: Using firewall rules, you can block access to certain websites or services (for example, torrents or social networks). Keenetic this is done in the section Security → Firewall.
• 📡 Radius server: for large networks (hotels, cafes) you can set up authentication through RADIUS, where each user receives a temporary login and password.

Example of a rule Firewall to block torrents on MikroTik:

/ip firewall filter
add chain=forward protocol=tcp dst-port=6881-6889 action=drop comment="Block Torrent" disabled=no

⚠️ Attention: Incorrect settings Firewall They can completely block internet access. Before experimenting, back up your router configuration!

FAQ: Frequently asked questions about Wi-Fi restrictions

Is it possible to restrict Wi-Fi to just a specific website (e.g. TikTok)?

Yes, but not on all routers. Keenetic And ASUS with firmware Asuswrt-Merlin there is a built-in parental control, where you can block access to specific domains. You can also use Firewall or services like OpenDNS.

How do I know who is connected to my Wi-Fi?

Go to the router's web interface and find the section DHCP clients, Connected devices or Wireless ClientsThere will be a list of all gadgets with MAC addresses, IP addresses and names. Android You can use applications like Fing or WiFi Analyzer.

Why did the Internet start lagging after limiting the speed via QoS?

You may have specified a speed higher than your plan's actual speed in your QoS settings. Check your current speed at speedtest.net and set the QoS value 10-15% lower (for example, if the tariff is 100 Mbps, specify 85-90 Mbps). Also, make sure that QoS is enabled only for downloads (Download), and not for giving (Upload).

Is it possible to restrict Wi-Fi without access to the router (for example, in a rented apartment)?

If you don't have access to your router settings, there are only workarounds left:

1. Use VPN with traffic limits on their devices.
2. Set up parental control at the operating system level (e.g. Screen Time on iPhone or Digital Wellbeing on Android).
3. Buy an inexpensive router (for example, TP-Link TL-WR840N), connect it to the main network and set up restrictions on it.

How to restrict Wi-Fi for smart devices (cameras, light bulbs)?

Smart devices (e.g. cameras Xiaomi or light bulbs Yeelight) often do not support QoS configuration or MAC filtering. Solutions:

• Create a separate network for them IoT on the router and limit its speed.
• Use Firewallto block their access to external servers (for example, for cameras you can leave only the connection to the local server).
• Set a schedule - many smart devices don't need to be connected all the time.