Having an unauthorized user connect to your wireless network is one of the most common home cybersecurity issues. Uninvited guests not only steal your bandwidth and slow down your internet speed, but they can also access local files or use your connection for illegal activities. Equipment owners TP-Link Often faced with the need to quickly restrict access, but the settings interface may not be obvious to a beginner.
There are several effective methods for breaking the connection to an unwanted device and preventing it from reconnecting. You can simply change the password, which will force everyone to reconnect, or use more sophisticated settings, such as MAC address filteringThe latter method allows you to create a "blacklist" of devices that will be permanently denied access, even if they know the correct password.
In this guide, we will examine in detail the procedure for different router firmware versions. TP-LinkYou'll learn how to identify connected devices, block them through the web interface, and set up a guest network for visitors. This will help you fully control who exactly is using your internet connection.
Identifying connected devices
Before taking decisive action to block, it's important to determine exactly which device is the offending one. The list of connected clients often displays dozens of devices, and an inexperienced user could accidentally block their own. smartphone or smart speakerTo begin, log into the router's web interface by entering the gateway IP address in the browser's address bar, usually 192.168.0.1 or 192.168.1.1.
After logging in (the standard login and password are often found on a sticker on the bottom of the device), go to the section responsible for network status. In older versions of the interface, this may be called DHCP -> DHCP Client List, and in the new blue interfaces - Basic -> Wireless or Home NetworkHere you will see a table with device names, their IP and MAC addresses.
To avoid making mistakes, it is recommended to first check the WiFi settings on all your devices and match their MAC addresses with those displayed in the router list. MAC address — is a unique identifier of a network interface, which looks like a sequence of six pairs of hexadecimal characters (for example, A4:C3:F0:85:AC:2D). If the list includes a device named "Unknown" or a strange character set that doesn't appear on your device, it's likely the culprit.
Blocking via client list (Blacklist)
The easiest way to disable a user is to use the blocking feature directly in the list of connected devices. This method is convenient because it doesn't require manually entering MAC addresses or creating complex filtering rules. In the interface TP-Link Look for a button with a lock or a blocked icon next to the name of the suspicious device.
Click this button, and the router will immediately disconnect from the selected device. The system will automatically add the MAC address of this device to the blacklist (Blacklist). Now, even if the device owner attempts to connect again, the router will ignore their authorization requests. This action is applied immediately and does not require a hardware reboot.
It's important to understand that some router models may temporarily block a device from the client list or require additional confirmation in the security settings. Make sure that after pressing the block button, the device's status changes to "Blocked" or disappears from the list of active connections. If the device continues to appear in the list, the "Whitelist" mode may be enabled, which allows access only to certain devices.
☑️ Blocking check
Configuring MAC address filtering manually
For more flexible access control, we recommend using manual MAC address filtering configuration. This method allows you to create complex rules, such as allowing access only during certain hours or for specific device types. Go to the section Wireless -> Wireless MAC Filtering in the classic interface or Advanced -> Security -> Access Control in the new one.
Here you need to activate the filtering function and select the operating mode. Mode Deny (Deny) means that you create a blacklist: all devices except those on the list are allowed access, and those on the list are blocked. Mode Allow (Allow) creates a whitelist: only devices whose MAC addresses are included in the table are granted access, all others are blocked by default.
To add a device to the list, click the button Add New or +Enter the MAC address of the intruder you copied earlier and give it a descriptive name, such as "Neighbor Phone." After saving the settings, be sure to click the Save button. Enableto activate the rule. Changes take effect immediately, but to be on the safe side, you can reboot your router.
⚠️ Note: If you selected "Allow" mode and accidentally failed to add your computer's MAC address, you will lose access to the router's settings via WiFi. In this case, the only solution is to connect via a LAN cable or reset the settings using the reset button. Reset.
Changing your wireless network password
A radical yet effective method for disabling all unauthorized users is to completely change your WiFi password. This ensures that all connected devices, including your own, will lose access, requiring re-authorization on each device. To do this, go to Wireless -> Wireless Security or Basic -> Wireless.
In the field Wireless Password Enter a new, complex password consisting of letters and numbers. Encryption is recommended. WPA2-PSK or WPA3, as they provide the best protection against hacking. Older encryption protocols, such as WEP, are easily bypassed by attackers using automated scripts.
After saving the settings, the router will restart the wireless module. All devices will be disconnected. You'll need to re-enter the password on your phone, laptop, and TV. This is a great opportunity to "clean up" the network: simply don't enter the password on guest devices or suspicious gadgets, and they will no longer be able to connect.
What should you do if you forgot your new password?
If you've changed your password and forgotten it, but need to connect urgently, use a LAN cable. Connect your computer to the router via a wire—you'll still have internet access and settings even without knowing the WiFi password. You can view or change the password again in the wireless network settings.
Setting up a guest WiFi network
To avoid constant blocking and password changes when friends come over, use the guest network feature. This feature creates a separate access point with its own name and password, isolated from your main network. Guests will have internet access but won't be able to see your files, printers, or other devices on the local network.
Guest network settings are made in the section Guest NetworkHere you can set a network name (SSID), create a password, and, most importantly, set restrictions. For example, you can limit the speed for guests or set a time interval during which the network is active. This is ideal for parties or when relatives are staying temporarily.
Using a guest network improves overall security. Even if a guest accidentally infects their phone with a virus, network isolation will prevent the threat from spreading to your personal devices. Plus, you can always disable the guest network with a single button without affecting your network.