Have you noticed that unknown devices have connected to your Wi-Fi? Or do you want to restrict network access for certain devices directly from your computer? Windows 10In this article, we'll cover all possible methods—from standard router settings to hidden system commands. It's important to understand: full control over connected devices is only possible through router, but Windows itself can also be used to block unwanted guests.
The problem of unauthorized access to Wi-Fi is relevant for both home networks and small offices. According to KasperskyMore than 30% of users have experienced someone else's device connecting to their router at least once. The reasons vary, from something as simple as "forgotten password" to targeted attacks. We'll show you how. Disconnect devices from Wi-Fi without access to the router (if you are not a network admin) and what to do when you have administrator rights.
Why is it important to control connected devices?
Every extra device on your Wi-Fi network is:
- 🐢 Internet speed drop — even one "extra" device can load the channel with background activity (updates, cloud synchronizations).
- 🔓 Security risks - through vulnerabilities in protocols (for example, WPS or outdated WEP) attackers can gain access to the local network.
- 💰 Traffic overuse — This applies to plans with a limited data plan. A single device downloading torrents can consume tens of gigabytes overnight.
- 📡 Router overload — Cheap models support a limited number of connections (usually 10-20). Exceeding this limit leads to lag.
According to the study Avast (2023), on average, there are 2-3 more devices connected to a home router than the owner realizes. Most often, these are:
- 📱 Old smartphones that were forgotten to be disconnected from the network.
- 💻 Laptops of guests who have been given temporary access.
- 🎮 Neighbors' game consoles (if the password is weak).
- 🔌 Smart devices (IoT), which automatically connect to the nearest Wi-Fi (for example, Amazon Echo or Xiaomi gadgets).
⚠️ Attention: If you're not a network administrator (for example, if you're connected to an office or public Wi-Fi network), most of the methods in this article won't work. You'll need access to your router settings or administrator rights on your PC.
Method 1: Via the router's web interface (the most reliable)
This is the only method that is guaranteed to disconnect the device from the network. forever (until you allow access again). Compatible with most router models: TP-Link, ASUS, Keenetic, Zyxel, MikroTik and others.
Instructions:
- Find out Router IP address. Usually it is
192.168.0.1or192.168.1.1You can check it via the command line:ipconfig | findstr "Default Gateway"Or look at the sticker on the back of the router.
- Enter the address in your browser (for example,
http://192.168.0.1). - Log in. The default login and password are usually
admin/adminoradmin/passwordIf it doesn't fit, look at the router sticker. - Find the section with connected devices. The names vary:
- 🔹 TP-Link:
Wireless → Wireless StatisticsorDHCP → DHCP Clients List - 🔹 ASUS:
Network maporLocal Network → Client List - 🔹 Keenetic:
Devices(in the main menu)
- 🔹 TP-Link:
Block, Block or Disconnect.Wireless MAC Filter or similar).| Router brand | Path to the list of devices | How to block |
|---|---|---|
| TP-Link (Archer, TL-WR) | Wireless → Wireless Statistics |
Button Block near the device |
| ASUS (RT-AC, RT-AX) | Network Map → Clients |
Click on the device → Block |
| Keenetic | Devices (main menu) |
Select device → Deny access |
| Zyxel (Keenetic, NBG) | Wi-Fi Network → Clients |
Button Disconnect + add to blacklist |
| MikroTik | Wireless → Registration Table |
Select device → Remove + rule in Firewall |
⚠️ Attention: On some routers (for example, from providers like Rostelecom or Beeline) The interface could be simplified. If you can't find the sections you need, check the model's documentation or contact support.
Method 2: Via the Windows command line (without access to the router)
If you don't have access to the router settings, but you are an administrator on your PC, you can temporarily disable the device from the network through ARP spoofing or blocking MAC addresses in your local firewall. This method only works while your computer is turned on and connected to the network.
Steps to block by MAC address:
- Find out the MAC address of the target device. To do this:
arp -aIn the list, find the IP address of the device and the corresponding MAC (format
XX-XX-XX-XX-XX-XX). - Create a rule in Windows Firewall:
netsh advfirewall firewall add rule name="Block Device" dir=out action=block remoteip=ANY remoteport=ANY remotemac=XX-XX-XX-XX-XX-XXReplace
XX-XX-XX-XX-XX-XXto the real MAC address. - Check that the rule has been added:
netsh advfirewall firewall show rule name="Block Device" - 🔄 Works only while your PC is on.
- 🖥️ Doesn't block traffic between the device and the router (only between the device and your PC).
- 🛡️ Some devices may ignore blocking (if they use a static IP).
- 🛡️ Wireless Network Watcher (NirSoft) — scans the network and displays all connected devices with details (MAC, manufacturer, IP). Free and portable (no installation required).
- 🔍 GlassWire — monitors network activity and can block suspicious connections at the firewall level.
- 📊 NetCut — allows you to "kick" devices out of the network via ARP spoofing. Carefully: may disrupt network operation if used carelessly.
- 🔒 Fing — a mobile and desktop application for network scanning. It has a device blocking function (requires Fingbox).
To unlock device, remove rule:
netsh advfirewall firewall delete rule name="Block Device"
Find out the router's IP address|Get a list of connected devices (arp -a)|Record the MAC address of the target device|Check administrator rights on the PC-->
Limitations of the method:
What is ARP spoofing?
This is a technique for spoofing ARP tables on a local network, allowing traffic to be rerouted through your computer. Malware often uses it for man-in-the-middle (MitM) attacks. In our case, we're using a legal option: blocking unwanted devices.
Method 3: Using third-party programs
If standard methods aren't suitable, specialized software can be used. Popular programs for managing Wi-Fi networks include:
Example of working with Wireless Network Watcher:
- Download the program from the official website NirSoft (check the file hash for viruses!).
- Launch
WNetWatcher.exe(administrator rights are not required). - The program will automatically display all devices on the network. To refresh the list, click
F5. - To block, copy the MAC address of the device and use the method from Method 2 (command line).
⚠️ Attention: Programs like NetCut Antivirus programs can be considered potentially dangerous because they use techniques similar to malware. Download them only from official sources and disable them after use.
Method 4: Changing the Wi-Fi password (radical method)
The easiest, but also the most inconvenient way is change your Wi-Fi passwordThis will disable All devices, including yours, so it's only suitable if:
- 🔄 You're ready to reconnect all your gadgets.
- 🔐 You have few devices (1-2 smartphones, laptop).
- 🛡️ You suspect that there is an intruder on the network.
How to change your password:
- Go to the router's web interface (see Method 1).
- Find the section
WirelessorWi-Fi(the names are different). - In the field
Password,KeyorPasswordEnter a new password. Recommendations:- 🔑 Minimum length is 12 characters.
- 🅰️ Use mixed case letters, numbers, and symbols (
!@#$%). - 🚫 Do not use personal information (dates of birth, names).
After changing your password:
- ✅ Reconnect your devices.
- ❌ Other devices will not be able to connect (if they don’t know the new password).
- 🔄 If you have smart devices (IoT), they will also have to be reconfigured.
Method 5: Configure MAC address filtering
Filter by MAC addresses Allows you to restrict connections to specific devices. This is more secure than a simple password, but requires more effort to set up.
Instructions for most routers:
- Collect the MAC addresses of all your devices. You can find them:
- 🖥️ On Windows:
ipconfig /all(look for the linePhysical address). - 📱 On Android:
Settings → About phone → General information → Wi-Fi MAC address. - 🍎 On iOS:
Settings → General → About → Wi-Fi Address.
- 🖥️ On Windows:
Wireless MAC Filter or MAC address filter.Allow (allow only specified MACs).Advantages of the method:
- 🔒 Maximum security—even if someone finds out your password, they won't be able to connect.
- 📱 Control over every device on the network.
Cons:
- 🔄 When adding a new gadget, you will have to update the list in the router.
- 📱 Some devices (eg. IoT) can change the MAC address when reset.
What to do if nothing helps
If you've tried all the methods, but other people's devices continue to connect:
- 🔍 Check your router for vulnerabilities:
- Turn it off
WPS(chapterWireless → WPS). This function often has a critical vulnerability. - Update your router firmware (section
Administration → Firmware Upgrade). - Change the security standard from
WEPonWPA2-AESorWPA3.
- Turn it off
- 📡 Change the Wi-Fi channel: Sometimes devices connect due to channel overlap with neighboring networks. Manually select the channel in your router settings (for example,
6or11for 2.4 GHz). - 🛡️ Use a guest network: Set up a separate network for guests with limited access to local resources.
- 📞 Contact your provider: if the router is rented (for example, from Rostelecom or MTS), it may have hidden settings that only support can change.
⚠️ Attention: If unknown devices regularly appear on your network, this may be a sign that your router has been hacked. In this case, it is recommended to reset it to factory settings (button Reset on the back panel) and reconfigure with maximum protection.
FAQ: Frequently Asked Questions
Is it possible to disconnect a device from Wi-Fi without access to the router?
Yes, but only temporarily and with limitations. You can:
- Use command line To block the MAC address on your PC (see Method 2).
- Install a program like NetCut to "kick" the device out of the network.
However, these methods only work while your computer is on. Permanently disabling the connection requires access to the router.
How do I know who is connected to my Wi-Fi?
There are several ways:
- Through router web interface (chapter
DHCP Clients Listor similar). - Through command line Windows:
arp -aThen compare the IP addresses to your range (eg.
192.168.0.X). - Using programs: Wireless Network Watcher, Fing, Angry IP Scanner.
To identify the device, please refer to:
- 🏷️ MAC address (the first 3 pairs of characters indicate the manufacturer, for example,
00:1A:79— Samsung). - 📱 Host name (sometimes shown in the list, for example,
iPhone-XorDESKTOP-123).
Is it possible to disable a device by name (eg "iPhone")?
No, you can't disable a device directly by name. The device name (hostname) is simply a label that can be spoofed. To block, you need:
- 🔢 MAC address (unique identifier of the network card).
- 📌 IP address (but it may change when reconnecting).
If the router interface displays device names, their MAC addresses are usually also displayed—use them to block them.
What should I do if I don’t know the router password?
There are several options:
- Reset the router to factory settings: press and hold the button
Reset(usually on the back panel) for 10-15 seconds. After this, the login/password will become default (see the sticker on the router). - View the password on a connected PC:
netsh wlan show profile name="NETWORK_NAME" key=clearIn the section
Key Contentthere will be a password. - Contact the provider: if the router is from an operator (for example, Beeline or MGTS), they can reset the password remotely.
⚠️ Attention: Resetting your router will disconnect all devices from the network, and you will have to set it up again.
How to block a device permanently?
For permanent blocking need to:
- Add the device's MAC address to blacklist router (section
MAC FilterorAccess Control). - Turn on MAC filtering in mode
Deny(prohibit specified addresses). - Save settings and reboot the router.
After this, the device will be unable to connect, even if it knows the password. To unblock it, simply remove its MAC address from the list.