A drop in internet speed or the appearance of unknown devices in the list of connected clients are the first signs that someone may have accessed your wireless network. In an age where home Wi-Fi is used not only for surfing but also for controlling a smart home, perimeter security becomes critically important. An uninvited guest can not only consume traffic but also intercept transmitted data or attack other devices on the local network.
There are several effective ways to restrict access from unwanted users. The most common methods include using MAC address filtering, changing the security password, or temporarily blocking it through the router's web interface. The specific method you choose depends on your router model and the level of security you want to apply. In some cases, simply changing the encryption key is sufficient, while in others, fine-tuning access rules is required.
In this article, we'll cover step-by-step instructions for popular hardware models. You'll learn how to identify someone else's device and how to configure it. Blacklist (blacklist) and what precautions should be taken to avoid blocking your own devices. Understanding these processes will allow you to fully control your traffic and ensure the stable operation of your home network.
Identifying connected devices
Before taking any blocking action, it's important to determine exactly which device is the offending one. Users often mistake their forgotten gadgets or smart home devices (for example, Roborock or Yeelight) for strangers. First, you should log into the router's administrative panel by entering its IP address (usually 192.168.0.1 or 192.168.1.1) in the browser's address bar.
After logging in, find the section responsible for network status. It may be called Client List, Attached Devices, Client list or DHCP Server. The full connection map is displayed here. Note the columns. IP address, MAC address And Device nameThe MAC address is the unique identifier of a network card, which cannot be forged programmatically by an ordinary user without specialized knowledge.
Compare the list of connected clients with your devices. If you have any doubts, you can temporarily disable Wi-Fi on your phone or laptop and see if the corresponding entry disappears from the list. Active compounds are usually marked as "Active" or have a connection timer. If you see a device named "Unknown" or a manufacturer name you don't have (e.g., Huawei, when you only have Apple), this is a cause for concern.
- 📱 Check all your smartphones, tablets, and laptops for an active Wi-Fi connection.
- 🏠 Don't forget to consider smart home devices: TVs, set-top boxes, robotic vacuum cleaners, and cameras.
- 🔌 Make sure that other family members' or neighbors' computers are not connected to the router's LAN ports.
It's important to understand that some devices may hide their real name, appearing as "Android" or "PC." In this case, you should rely solely on the MAC address. Write down or copy the address of the suspicious device, as you'll need it to configure blocking rules.
How to change your Wi-Fi network password
The most radical, yet most effective, way to disconnect all clients from the network is to change the password. This method ensures that absolutely all devices, including your own, will lose access. After changing the security key, encryption (usually WPA2-PSK or WPA3), the router will terminate all current connections. To reconnect, each device will need to enter a new password.
To implement this method, go to your wireless network settings (Wireless Settings or Wi-Fi Settings). Find the field Wireless Password, WPA Pre-Shared Key or Wireless network passwordCreate a complex password that includes uppercase and lowercase letters, numbers, and special characters. Avoid obvious information like a phone number or date of birth.
⚠️ Attention: After applying the new settings and saving the changes (
Save/Apply) You'll immediately lose connection to the router if you're setting it up via Wi-Fi. You'll have to reconnect to the network with the new password on the device you're using to manage it.
The main drawback of this method is the need to re-enter the password on all your personal devices. If you have many gadgets or devices without screens (smart plugs, lamps), the reconfiguration process can take considerable time. However, if you suspect your password was stolen through a virus on one of your computers, changing the key is a mandatory security measure.
What should you do if you forgot your router admin password?
If you can't access your router settings to change the password, try the default combinations (admin/admin) listed on the sticker on the bottom of the device. If these don't work, you'll need to perform a factory reset by holding the button on the router for 10-15 seconds. After this, the router will be as good as new, and you can set it up again.
Blocking via MAC filtering (Blacklist)
A more flexible access control tool is the use of access control lists. Unlike changing a password, this method allows you to disable a specific client without affecting other users. The technology is based on filtering unique network interface identifiers. You need to find the section MAC Filtering, Access Control or MAC address filtering in the router menu.
There are two filtering modes: "Whitelist" and "Blacklist." For your task—disabling a specific offender—you need the "Whitelist" mode. Deny or BlacklistIn this mode, you specify the MAC addresses of devices that are blocked from accessing the network, while all others can connect freely. This is convenient if you need to temporarily restrict access, for example, for children during school hours.
The process of adding to the blacklist is as follows: activate the filtering function, select the "Deny/Block" mode, add a new item, and enter the MAC address of the offender. Some modern routers, such as Keenetic or MikroTik allows you to do this directly from the client list by clicking the "Block" button next to the desired device. This greatly simplifies the process.
- 🚫 In Blacklist mode, blocked devices can see the network but cannot obtain an IP address.
- ✅ Whitelist mode (allow only listed) is the safest, but time-consuming to set up.
- 🔄 It is possible to change (spoof) a MAC address on a computer, but this is a difficult task for the average user.
Setting up parental controls and scheduling
Many modern routers are equipped with built-in modules Parental control (Parental Control). This feature allows you to not only block access to specific websites but also completely disable the internet for specific devices, either manually or on a schedule. It's ideal for situations where you don't want to permanently kick a user out, but rather limit their online time.
In the settings interface, find the section Parental Control or Access restrictionHere you can create a profile for a device (for example, "Child's Phone" or "Guest Laptop") and assign rules to it. You can set time limits, for example, allowing access only between 6:00 PM and 9:00 PM, or blocking the internet completely on certain days of the week. Changes take effect immediately after applying the settings.
The advantage of using parental controls over simple MAC filtering is flexibility. You can easily enable and disable blocking with a single click, without deleting rules from access lists. Additionally, some systems allow you to send email notifications to the administrator whenever a blocked device attempts to connect.
Instructions for popular router models
Configuration interfaces vary significantly between manufacturers. Below are brief steps for the most common brands. Please note that menu item names may vary depending on the firmware version.
For routers TP-Link: Go to the menu Wireless → Wireless MAC Filtering. Turn on the function (Enable), select the rule Deny (Ban listed MAC addresses) and add the offender's address. In the new interfaces (blue design), this is located in the section Advanced → Wireless → MAC Filtering.
For devices Asus: Find the section Wireless → MAC Address Filter. Set the switch to the position Reject (Reject). In the field MAC Address List Enter the device address and click AddDon't forget to click Apply to save.
For routers Keenetic: In the web configurator, go to My Networks and Wi-Fi → Client listFind the device you need, click on it and select the option BlockThe device will be automatically blacklisted. Blocking is also available via Internet filter.
| Manufacturer | Menu section | Rule type | Action |
|---|---|---|---|
| TP-Link | Wireless / MAC Filtering | Deny | Add New |
| Asus | Wireless / MAC Filter | Reject | Add |
| D-Link | Wi-Fi / MAC filter | Ban | Add |
| Keenetic | Client list | Blocking | Click on the device |
☑️ Check before blocking
Additional network security measures
Once you've disconnected an unwanted client, it's important to prevent it from reconnecting. Simply blocking it by MAC address may not be enough if the attacker is sophisticated. A comprehensive approach is recommended. security your infrastructure.
First of all, make sure that the function is disabled on your router. WPS (Wi-Fi Protected Setup). This technology allows you to connect to a network without entering a password (for example, using a PIN or a push-button), but it contains vulnerabilities that make it easy to crack the encryption key. You can disable WPS in the section Wireless Settings.
It's also worth checking if encryption is enabled. WPA2-PSK (AES) or WPA3Using an outdated protocol WEP or TKIP makes your network vulnerable to hacking in minutes. If your router supports WPA3, upgrade to it, as this standard provides better protection against password guessing.
⚠️ Attention: Interfaces and function names may change after updating your router's firmware. If you can't find the described options, consult the manufacturer's official documentation for your model or contact technical support.
Don't forget to update your firmware regularly (firmware) of your router. Manufacturers frequently release patches to close security holes. Automatic updates are the best way to keep your protection up to date without user intervention.
Is it possible to completely hide your Wi-Fi network?
Yes, this is called a "Hide SSID." The network won't appear in the list of available networks on phones and laptops. However, you can connect to it by manually entering the network name and password. This doesn't provide 100% protection, as your traffic can still be intercepted, but it does reduce the risk of being noticed by passersby.
Does blocking one device affect the speed of others?
Immediately after blocking, speed may not change unless the intruder was downloading large amounts of data. However, freeing up the communication channel and reducing the load on the router's processor (fewer clients to poll) will stabilize ping and overall network throughput in the long term.
What to do if you blocked your device?
If you have blocked yourself by MAC address, you will have to connect to the router via LAN cable (Ethernet) or reset the router settings using the button Reset on the case. After the reset, you'll need to reconfigure your internet connection and Wi-Fi network name.
How to find the exact MAC address on Android?
Go to Settings → About the phone → General information (or Status). The Wi-Fi MAC address will be listed there. Please note that newer versions of Android may use a randomized MAC address for each network to protect privacy.