How to Disable Unwanted Users from Your Wi-Fi Router: A Complete Guide

Slow internet, suspicious devices on the network, or sudden data depletion—all of these could signal that someone else has connected to your Wi-Fi. Even if you're confident in the strength of your password, risks remain: from random "neighbors" connecting by mistake to targeted attacks aimed at stealing traffic or data.

There are several ways to disconnect unwanted users from your router, from simply changing the password to fine-tuning filtering. MAC addressesIn this article, we will examine all the current methods, including hidden functions of popular router brands (TP-Link, ASUS, Keenetic, MikroTik), and we will also explain how to identify "extra" devices and prevent reconnection.

⚠️ Important: before starting any manipulations with the router settings fix the current parameters (Take photos of the admin panel screens or export the configuration.) This will help restore network operation if something goes wrong.

📊 How often do you check the list of devices connected to Wi-Fi?
Never
Once a month
Only if I notice problems
After every suspicious slowdown

1. How to detect foreign devices on your Wi-Fi network

Before blocking users, you need to make sure they really aren't allowed on your network. Many routers display a list of connected devices directly in the web interface, but this isn't always convenient—especially if you have dozens of devices.

Here 3 reliable ways identify "extra" devices:

  • 📊 Via the router admin panel: go to the type section DHCP Clients List, Connected Devices or Local area network. All active connections will be displayed here with an indication IP, MAC addresses and the device name (if it is broadcast).
  • 🔍 Using mobile applications: utilities like Fing (Android/iOS) or WiFi Analyzer scan the network and show all devices, including hidden ones. Apps often recognize gadget models by MAC, which simplifies identification.
  • 💻 Via command line (for advanced users): On Windows, run the command 
    arp -a
    to see the table ARP with binding IP To MAC addressesOn . Linux/macOS use 
    nmap -sn 192.168.1.0/24
    (replace the subnet with your own).

Please pay attention to devices with unfamiliar names (For example, android-123456 or esp_abcdef), as well as those that are connected at unusual times (at night, when everyone is asleep). Some routers (for example, Keenetic) allow you to track your connection history—this will help identify "guests" who appear periodically.

⚠️ Attention: Some smart devices (lamps, sockets, cameras) may appear on the network under non-obvious names. Before blocking, make sure it's not yours. smart home or IoT gadget.

2. Method 1: Changing the Wi-Fi password is the fastest method

If you have found a foreign device and want to instantly disconnect all users, including legitimate ones, simply change your Wi-Fi password. This will force everyone to reconnect and block any "uninvited guests" permanently (until they learn the new password).

Instructions for most routers:

  1. Open the router's web interface (usually at 192.168.1.1 or 192.168.0.1). The default login and password can be found on the device sticker (usually admin/admin).
  2. Go to the section Wireless (or Wi-Fi, Wireless network).
  3. Find the field Password, Wireless Key or Security key.
  4. Create a new password (we recommend using at least 12 characters with letters, numbers and special characters).
  5. Save the settings and reboot the router.

After changing the password, all devices will be disconnected. You'll have to manually reconnect your devices, but you're guaranteed to be free of unwanted access.

3. Method 2: Blocking by MAC address – reliable filtering

If you don't want to change your password (for example, to avoid setting up all your devices again), you can block specific gadgets by their MAC addressThis method works even if the attacker knows the Wi-Fi password.

MAC address — is a unique identifier for a network device, which looks like six pairs of characters separated by colons (for example, 00:1A:2B:3C:4D:5E). It can be found in the list of connected devices in the router's admin panel or through applications like Fing.

How to block a device by MAC:

☑️ MAC address blocking

Completed: 0 / 4
  • 🔗 For TP-Link: Advanced → Security → Access ControlTurn on filtering, select the mode Blacklist and add MAC addresses blocked devices.
  • 🔗 For ASUS: Wireless → MAC Filter. Install Filter MAC Address V Enable, select Deny and enter the addresses.
  • 🔗 For Keenetic: Home Network → DevicesClick on the desired device and select Block.

Some routers (eg. MikroTik) allow you to customize white list (Whitelist), where only the specified ones are allowed to connect MAC addressesThis is the most secure option, but requires manually adding all your devices.

⚠️ Attention: MAC addresses It can be counterfeited (spoofed), so this method doesn't provide 100% protection. However, for most everyday situations, it's sufficient.

4. Method 3: IP address restriction (DHCP binding)

Another way to control is IP address binding to MAC in the settings DHCPThis will not disconnect the device immediately, but will prevent it from connecting automatically in the future.

Algorithm of actions:

  1. Find the section in the router admin panel DHCP (or Local Network → DHCP Server).
  2. Activate the option Static DHCP or IP to MAC Binding.
  3. Add a rule where you specify MAC address the device to be blocked and assign it IP from an unused range (eg 192.168.1.250).
  4. In the firewall settings (Firewall) block traffic for this IP.

This method is more complicated than the previous ones, but it is useful if you want restrict access to the Internet for a specific device without blocking it completely (for example, leaving access only to the local network).

Router brand Path to DHCP settings Does it support MAC-IP binding?
TP-Link Advanced → Network → DHCP Server Yes
ASUS LAN → DHCP Server Yes (in "Manual Assignment" mode)
Keenetic Home Network → Segments → DHCP Yes (Reserved Addresses option)
Zyxel Network → LAN → DHCP Server Yes (section "Static Leases")

5. Method 4: Hiding the Wi-Fi network (SSID) and other additional measures

If you want to make your network less visible to outsiders, you can hide its name (SSID)This won't protect against targeted attacks, but it will reduce the number of accidental connections.

How to hide SSID:

  • 📡 In the router admin panel, find the section Wireless Settings (or Wi-Fi settings).
  • 🔄 Disable the option Enable SSID Broadcast (or Broadcast SSID).
  • 🔐 Save the settings. Now the network will not appear in the list of available networks, and you can only connect to it manually if you know its name.

Other useful measures:

  • 🔄 Disable WPS: This feature simplifies connection, but is vulnerable to hacking. In your router settings, find WPS and deactivate it.
  • 🛡️ Enable guest network: If you need to share Wi-Fi with guests, create a separate network with limited access to local resources.
  • ⏱️ Set up a schedule: some routers (for example, ASUS) allow you to turn off Wi-Fi at a certain time (for example, at night), which will reduce the risk of unauthorized access.
⚠️ Attention: concealment SSID This can create inconvenience for legitimate users, as they will have to manually enter the network name each time they connect. Furthermore, experienced attackers can detect the hidden network using specialized software.
How to connect to a hidden Wi-Fi network?

To connect to a network with a hidden SSID, select "Add network manually" (or "Connect to a hidden network") in your device's Wi-Fi settings. Enter the network name (SSID) and password. On Android, navigate to Settings → Wi-Fi → Advanced → Add network.

6. Method 5: Using third-party software for monitoring and blocking

If the standard router tools are not enough, you can use specialized programs for network monitoring. They not only detect rogue devices but also automatically block them.

Popular tools:

  • 🖥️ Wireless Network Watcher (Windows): scans the network and displays all connected devices with details MAC, IP and the manufacturer. You can export the list to CSV for analysis.
  • 📱 NetCut (Android/Windows): allows you to not only monitor the network, but also force shutdown devices by MAC or IP (works through ARP-spoofing).
  • 🌐 GlassWire (Windows/macOS): analyzes traffic and detects suspicious activity, including unauthorized connections.

Example of use NetCut:

  1. Install the program and run a network scan.
  2. Select the device you want to disconnect.
  3. Click Cut Off — the gadget will be immediately disconnected from Wi-Fi.

These tools are useful if your router has limited functionality or you want remotely monitor the network (for example, from a phone). However, please remember that forcibly disconnecting devices may violate the rules of some internet service providers.

7. What to do if a foreign device continues to connect

If after all the manipulations the “uninvited guest” still appears on the network, it is possible that he is using advanced blocking bypass methods (for example, substitution MAC or traffic interception). In this case, more radical measures will be required:

  • 🔄 Reset your router to factory settings: This will delete all saved configurations, including any possible "backdoors" left by the attacker. After the reset, configure the router again from scratch.
  • 🛡️ Update your router firmware: Vulnerabilities in older software versions may allow blocking to be bypassed. Download the latest firmware from the manufacturer's website and install it.
  • 🔐 Change your admin panel login and password: If an attacker has gained access to your router settings, they can override your blocks. Use complex credentials (not admin/admin!).
  • 📡 Change Wi-Fi channel: Sometimes connection problems are due to channel congestion. In your router settings, select a different channel (for example, 6 or 11 for 2.4 GHz).

If suspicions of router hacking are confirmed (for example, you see unfamiliar rules in Firewall or changed settings DNS), consider the possibility purchasing a new device - especially if your router is older than 5 years and does not support modern security protocols (WPA3).

⚠️ Attention: If after a reset the foreign device appears on the network again, this may indicate physical access to the router (for example, someone connects via cable or via a button WPS). Check the location of the router and restrict access to it.

8. How to prevent reconnection of foreign devices

To minimize future risks, follow these guidelines:

  • 🔒 Use WPA3 instead of WPA2: The new encryption standard is harder to crack. If your router doesn't support it, WPA3, update the firmware or consider replacing the device.
  • 📡 Disable remote control: deactivate the option in the router settings Remote Management (or Remote access) to prevent attackers from changing the configuration via the Internet.
  • 🔄 Change your password regularly: Even if your network is secure, update your password every 3-6 months. Use password generators to create complex combinations.
  • 📊 Keep a log of your devices: fix it MAC addresses all your gadgets. This will help you quickly identify unwanted connections.

If you suspect your Wi-Fi has been hacked to steal data (not just traffic), immediately disconnect your router from the internet and scan all connected devices for viruses. Attackers could use your network to attack other resources, which could lead to problems with your ISP or the law.

For added protection, consider installing firewall (For example, pfSense) or use VPN for all traffic. This will make things more difficult for potential hackers.

FAQ: Frequently asked questions about disconnecting users from Wi-Fi

Is it possible to disconnect a device from Wi-Fi without going into the router settings?

Yes, with the help of programs like NetCut or Angry IP ScannerThey allow you to forcefully terminate the connection by MAC or IP, but they only work within your local network. Restarting your router or device will reset the block.

Why does the device reappear online after being blocked by MAC?

The attacker is probably substituting MAC address (spoofing). In this case, the only solution is to change the Wi-Fi password or bind IP To MAC followed by blocking of unwanted IP in the firewall.

How do I block a device on a provider's router (for example, Rostelecom)?

Routers from ISPs often have limited functionality. Try this:

  1. Go to the web interface (the address is usually indicated on the sticker).
  2. Find a section Device management or Access control.
  3. If there is no blocking option, contact your provider's technical support—sometimes they can set up filtering remotely.

As a last resort, replace your provider's router with your own (check with your provider first to see if this is allowed under your plan).

Can my provider block my actions to disconnect users?

No, your ISP cannot restrict your right to manage your local network. However, if you use public IP If you're sharing Wi-Fi (for example, in an office) or distributing it under a contract (like in a hotel), additional rules may apply. Check your agreement with your provider for details.

What should I do if I accidentally locked my device?

If you have blocked your gadget MAC or IP:

  1. Connect to the router from another device (or via cable).
  2. Go to filtering settings and remove the blocking rule.
  3. If access is lost completely, reset the router to factory settings (using the button Reset on the back panel).

📖 Read also

Keenetic router not distributing Wi-Fi: causes and solutions Keenetic is not distributing Wi-Fi: step-by-step instructions for troubleshooting, setting up ranges and How to access TP-Link router settings from your phone: full instructions A detailed guide: how to access TP-Link router settings from your phone via Wi-Fi. Troubleshooting access issues Why do routers need multiple antennas? Wi-Fi signal myths We'll explore why a router needs multiple antennas. Do they affect network range, speed, and stability? Wi-Fi network SSID on a router: what it is and how to set it up The SSID is the key identifier of your Wi-Fi network. Find out what it is, how to find it, change it, or How to change your Dom.ru Wi-Fi password: 2026 instructions Step-by-step instructions: how to change your Dom.ru Wi-Fi password. Configuring TP-Link, D-Link, and Zyxel routers. How to change the WiFi network name on a Beeline router: step-by-step instructions A detailed guide on changing the WiFi network name on a Beeline router. Accessing settings and SSI parameters