Have you noticed your internet speed has dropped sharply, or your router's indicator light is flashing wildly, even though you're not downloading anything? Chances are, an uninvited guest has connected to your wireless network. This not only slows down your devices but also poses a real risk of personal data leakage. In this article, we'll discuss how to identify the intruder and permanently block their access.
The blocking process doesn't require any advanced programming or networking knowledge. All the necessary tools are built into the interface of any modern router, whether TP-Link, ASUS or KeeneticThe main thing is to access the control panel and act consistently to avoid disrupting your home network.
How to detect a rogue device on the network
The first step should always be a thorough diagnosis. You can't just block devices randomly, relying solely on names or random coincidences. You need to get a complete list of all clients currently using your connection. This can be done using a dedicated app from the router manufacturer or through the web interface.
Log into your router's admin panel, usually accessible at 192.168.0.1 or 192.168.1.1. Find a section that may be called Client list, DHCP Client List or Network mapAll active connections are displayed here. Carefully review the list: compare the MAC addresses and device names with those of your and your household's devices.
Pay attention to devices with names like "Unknown," "Android," or strange alphanumeric codes. If you turn off your phone and the "illegal" device remains in the list, this is a clear sign of hacking. For a more accurate identification, you can temporarily disable WiFi on your devices and see if the suspicious entry disappears from the list.
- 📱 Check the number of connected smartphones and tablets in your family.
- 💻 Make sure smart TVs and set-top boxes match the actual devices.
- 🏠 Don't forget about IoT gadgets: lamps, sockets, vacuum cleaners, and cameras.
- 🔍 Compare the MAC addresses with the stickers on the casings of your devices.
⚠️ Note: Some modern devices may hide their real name for privacy reasons (Random MAC feature). If you see a device named "iPhone" or "Android" but can't identify it, try temporarily disabling WiFi on all your devices.
Access your router settings to manage access
To begin active perimeter security, you'll need to log in to your router's management system. This is the "brain center" of your network, where all security settings are configured. Access to it is password-protected, often set by default to admin/admin or indicated on the sticker on the bottom of the case.
Open any browser on a device connected to the router (preferably via cable to avoid losing connection during setup). Enter the gateway's IP address in the address bar. After entering your username and password, you'll be taken to the main menu. Interfaces vary by brand (Zyxel, Tenda, MikroTik) differ, but the logic of the sections is the same.
You need to find the tab responsible for the wireless mode. It may be called Wireless, Wi-Fi or "Wireless Network." This is where you'll find the traffic filtering tools. If you've previously changed your admin password and forgot it, you'll have to reset it using the "Reset Settings" button. Reset on the router body.
Make sure you have a stable connection. If you're setting up a WiFi network, there's a small risk of losing the connection when changing key security settings. Therefore, experienced users prefer to perform such operations by connecting the computer to the router with a LAN cable.
MAC address blocking: whitelists and blacklists
The most effective method for disabling a specific intruder is MAC address filtering. Every network interface in the world has a unique identifier hardcoded into the hardware. Changing it programmatically is difficult, and for the average user, it's impossible. You can create a "Blacklist" to block specific addresses or a "Whitelist" to allow only trusted devices.
Find the section in the menu MAC address filtering or MAC FilteringEnable this feature. Now you need to copy the MAC address of the offending client from the client list and add it to the rules. If you select "Deny," everyone except those on the list will have access. If you select "Allow," only selected users will have internet access.
Using a whitelist is the ultimate security option. If you enable a mode that allows only specific MAC addresses, no new device (even a guest's phone) will be able to connect without your permission. However, this requires manually registering each new device, which can be inconvenient for a large family.
| Filtration type | Operating principle | Convenience level | Security level |
|---|---|---|---|
| Disabled | Access is open to anyone who knows the password. | High | Short |
| Blacklist (Deny) | Blocking specific violators | Average | Average |
| Whitelist (Allow) | Access only for registered devices | Short | Maximum |
☑️ Check before blocking
⚠️ Important: Be extremely careful when setting up the "Whitelist." If you accidentally enter the incorrect MAC address for your computer or phone, you will lose access to your router settings and internet connection. In this case, the only solution is to reset the device.
Changing the password and network encryption type
If MAC address blocking seems too complicated or you just want to kick everyone out at once, the easiest way is to change the WiFi network password. This will force the connection to end for all connected clients. They will have to re-enter the new key, but the "neighbor" won't have this option.
Go to Wireless Settings (Wireless Settings). Find the field Wireless Password or "Security Key." Create a complex combination of upper- and lower-case letters, numbers, and special characters. The password should be at least 12 characters long. Avoid obvious combinations like your date of birth or phone number.
It is crucial to check the encryption type. In the field Security Mode or "Protection Method" must be selected WPA2-PSK or modern WPA3Never use an outdated standard. WEP — it can be hacked in a couple of minutes even by a novice with a phone. WPA2 uses an algorithm AES, which provides reliable protection of transmitted data.
What to do if your router doesn't support WPA2?
If your router is more than 10-12 years old, it may not support modern encryption standards. In this case, the only solution is to replace the hardware. Using an open network or WEP in 2026 is like storing your money in a glass jar.
After changing the password, the router may reboot. All your devices will automatically attempt to reconnect, but will receive an authorization error. You'll have to go to each device (TV, phone, laptop), forget the network, and re-enter the new password.
Hiding the network name (SSID) as an additional measure
Another level of stealth is disabling SSID Broadcast. When this feature is enabled, your router stops "broadcasting" its presence. Your WiFi simply won't show up in the list of available networks on your neighbors' phones.
You can find this option in the main WiFi settings, it is often called Hide SSID or "Hide network name." Check the box or toggle the slider to "On." Now you can only connect to the network manually by entering the exact name (SSID) and password in the new device's settings.
However, this shouldn't be considered a panacea. Experienced users with a simple network scanner (for example, Wi-Fi Analyzer) will still see your network, it will just be marked as "Hidden Network." Furthermore, hiding the SSID can cause connection issues with some smart devices (IoT) that don't support invisible networks.
- 🔒 Hides the network from regular users and guests.
- 📉 May slightly reduce the load on the air (fewer service packets).
- ⚙️ Requires manual network name configuration on each new device.
- 📱 Some gadgets (cameras, lamps) may not connect.
WiFi Security Frequently Asked Questions (FAQ)
Can a neighbor steal my traffic if I change my password?
If you've changed your password to a strong one (WPA2/WPA3) and updated your router's firmware, it's virtually impossible to steal your traffic. However, if you have the feature enabled WPSIt's theoretically possible to brute-force the PIN code. For complete security, we recommend disabling WPS in your router settings.
Can a connected neighbor see my files on my computer?
Wi-Fi access alone doesn't grant access to files on your PC. However, if "Network Discovery" and file sharing are enabled on your local network, and your Windows password is weak or missing, an attacker could theoretically attempt to access shared folders. Always use the "Public" network profile for Wi-Fi.
How can I find out who exactly connected if the device name is "Android"?
The device name is often taken from the model or set by the user upon first use. To accurately identify the device, look at the first six characters of the MAC address (OUI). Entering these into an online OUI search will reveal the network card manufacturer (e.g., Samsung, Xiaomi, Apple), which will narrow down the search.
Should I change my WiFi password regularly?
Changing your password every month doesn't make sense if you use strong encryption. It's enough to do this once when installing the router and once if you suspect a hack. The main thing is to avoid using the same passwords for different services and to avoid writing them down on stickers on the router.
Does the number of connected devices affect internet speed?
Yes, the WiFi channel is shared among all active users. If one neighbor starts downloading torrents or watching 4K video, your speed on other devices will inevitably drop, as the radio channel has limited bandwidth.