When your home internet starts to slow down and the speed drops to unacceptable levels, it often indicates that your neighbors have connected to your network. Access restriction Connecting to a wireless network isn't just a way to restore comfortable surfing, but also a necessary security measure. If an unauthorized user gains access to your router, they can intercept transmitted data or use your connection for illegal activities.
In this article, we'll take a detailed look at all available security methods: from a simple password change to advanced MAC address filtering and guest zone creation. Administrative panel Any modern router allows for flexible management of connected devices, but the tools for this are often hidden in different sections of the interface. We'll help you find them and configure them correctly.
Correct setting wireless module Using a router requires careful attention, as one wrong move can block network access for all your devices, including smartphones and Smart TVs. Below are proven methods that work on most equipment models, whether TP-Link, Keenetic or MikroTik.
Analysis of connected devices and identification of intruders
Before resorting to strict blocking measures, you need to make sure that the problem is truly caused by intruders, and not by hardware failures or bandwidth congestion. Access your router's web interface, usually accessible at 192.168.0.1 or 192.168.1.1, and find the section with the client list. It may be called Client List, Connected Devices or Client list.
Review the list carefully. Manufacturers often include the device name (for example, "Ivan's iPhone" or "Samsung TV"), making identification easier. If you see an unfamiliar name or a device with more connections than you have, this is cause for concern. MAC address — is a unique identifier of the network card, which cannot be changed programmatically on most devices, so it is a key parameter for filtering.
For a more accurate diagnosis, you can temporarily disable Wi-Fi on all your devices and see if the "ghost" remains listed. If the router's activity lights continue to flash when the devices are turned off, the channel is being used by unauthorized users. In this case, you should immediately change your wireless network security key to a more complex one.
⚠️ Attention: Some smart devices, such as plugs, lamps, or vacuum cleaners, may appear in the list under strange names or MAC addresses from chip manufacturers (for example, Espressif or Tuya). Don't rush to block them until you've verified the physical address with the sticker on the device.
Basic protection: changing the password and encryption type
The simplest and most effective way to restrict your user base is to set a strong password that cannot be brute-forced. Attackers often use automated password dictionaries, so your task is to create a combination that goes beyond the standard sets. WPA2/WPA3 encryption is a modern standard, and using the outdated WEP protocol makes the network vulnerable even with a complex password.
Go to wireless settings (Wireless Settings) and find the field for entering the security key. It is recommended to use a password of at least 12 characters, combining uppercase and lowercase letters, numbers, and special characters. After applying the settings, all devices will be disabled, and you will need to re-enter the new key on each one.
Don't forget to update your router firmware regularly. Manufacturers patch software vulnerabilities that could allow hackers to access network settings. The update check is usually located in the "Updates" section. System Tools or Administration.
MAC address filtering: whitelists and blacklists
MAC filtering technology allows you to create strict rules for device access to the network. You can choose between two operating modes: "Whitelist" (allow only selected devices) or "Blacklist" (deny selected devices). The first option provides maximum security, as even with the password, an intruder won't be able to connect without registering the device's MAC address in the router settings.
To configure a whitelist, you'll need to manually enter the MAC addresses of all your trusted devices. This is a time-consuming process, especially if you have many devices or frequent guests. However, for stationary devices like computers and TVs, this is an ideal solution. In the router interface, this usually appears as a table where you need to add a new entry.
| Filtering Type | Description | Security Level | Ease of Use |
| :--- | :--- | :--- | :--- |
| Disabled | Access is open to everyone who knows the password | Low | High |
| Blacklist | Block specific addresses | Medium | Medium |
| Whitelist | Access only for authorized addresses | Maximum | Low (labor-intensive) |
| Guest network | Isolated Guest Access | High | High |
If you've selected "Blacklist" mode, you can simply add the intruder's MAC address to it. This is a temporary solution, as an experienced user can clone their network card's MAC address to an authorized one. Therefore, whitelisting is considered a more secure method. access control.
☑️ Setting up a whitelist
Organizing guest access and isolating clients
To avoid sharing your main network password with friends and acquaintances, modern routers allow you to create a guest profile (Guest Network). This is a virtual access point with its own name (SSID) and password. The main advantage of this configuration is isolation: devices on the guest network cannot see your computers, NAS storage, or printers, significantly increasing the security of your local infrastructure.
Guest network settings often allow you to set limits. For example, you can limit the maximum speed for guests to prevent them from downloading torrents and disrupting your work. Automatically disabling guest Wi-Fi based on a schedule or timer is also useful. This ensures that access is automatically disabled after guests leave.
⚠️ Attention: The "Client Isolation" feature prevents devices from seeing each other within a guest network. If you need to transfer files between guest phones or use Chromecast/AirPlay, you should disable this option, leaving only isolation from the main LAN.
To configure, go to the section Guest Network and activate the desired profile (2.4 GHz or 5 GHz). Set a network name that will be understandable to guests, and set a time interval or traffic limit if your plan has restrictions.
Parental controls and time limits
Limiting Wi-Fi distribution is often required not to protect against neighbors, but to control the time children spend online. Function Parental control (Parental Control) allows you to create rules for specific devices. You can block access to certain categories of websites (for example, gambling or adult content) or completely disable the internet on your child's device at a specified time.
The schedule is configured through a user-friendly calendar interface. You select the days of the week and time intervals when internet access should be blocked. For example, you can block internet access from 10:00 PM to 7:00 AM on weekdays to ensure your child gets a good night's sleep. However, access to educational resources can remain open.
What to do if a child knows the Wi-Fi password?
If a child knows the master password, they can simply reconnect after the authorized time expires. Solution: Create a separate network for children's devices, apply strict parental controls, and hide the network name (SSID). Use the main network with a different password on your devices.
Some advanced systems such as Keenetic or routers with support Yandex.DNS, allow you to flexibly configure security profiles. You can select the "Safe Search" mode, which automatically filters out websites containing fraudulent content and malware.
Hiding the network name (SSID) as a security method
Hiding the wireless network name (Hide SSID or Disable SSID Broadcast) makes your hotspot invisible to regular users. It won't appear in the list of available networks on a phone or laptop. To connect, the user must manually enter the network name and password in the device's Wi-Fi settings.
This method isn't a complete defense, as experienced professionals can easily detect hidden networks using traffic analyzers. Furthermore, hiding the SSID can cause connection issues with some smart devices (light bulbs, robot vacuums) that don't support hidden access points. Use this method as a complementary measure to other measures.
To activate, find the checkbox in the wireless settings Enable SSID Broadcast and uncheck it. After saving the settings, the network will disappear from the list. To connect a new device, you will need to manually create a new connection profile, entering the exact network name (case-sensitive).
Frequently Asked Questions (FAQ)
Can my neighbor hack my Wi-Fi if I have a strong password?
The probability is extremely low. Modern WPA2/WPA3 encryption protocols, when using a long password (more than 12 characters), are virtually impossible to crack by brute-force in a reasonable amount of time. However, vulnerabilities may exist in the router itself (for example, the WPS function), so it is recommended to disable it in the settings.
How to limit speed for a specific device?
This feature is called QoS (Quality of Service) or "Bandwidth Control." Find the QoS section in the router menu, enable it, and add a rule specifying the device's MAC address and the maximum speed (in kbps or Mbps) for download and upload.
What should I do if I forgot my router admin password?
If the default login and password (often admin/admin) don't work, you'll need to perform a factory reset. To do this, press and hold the button Reset on the router body for about 10-15 seconds. After this, the device will return to its original state, and you will need to configure it again.
Does the number of connected devices affect internet speed?
Yes, directly. The Wi-Fi channel is shared among all active users. If one of your neighbors or family members starts downloading large files or watching 4K videos, the available bandwidth for other devices is reduced, causing lag and buffering.