Have you noticed that your internet speed has suddenly dropped, and unfamiliar devices have appeared in the list of connected devices? Or perhaps your neighbor has "forgotten" your network password again, but is still using your data? Disconnecting unauthorized devices from Wi-Fi — a problem faced by every fifth home network user. According to research Kaspersky By 2026, 38% of traffic leaks will occur due to unauthorized connections to routers with factory security settings.
In this article you will find current blocking methods for routers of all popular brands - from budget ones TP-Link to bonuses ASUS RT-AX88UWe will cover not only the standard shutdown via the web interface, but also advanced methods: filtering by MAC address, change DHCP-pool, as well as hidden features in manufacturers' mobile apps. We'll pay special attention to how bypass MAC address spoofing On modern smartphones and laptops, this is the most common trick used by those who "freeload" on your internet.
1. How to check who is connected to your Wi-Fi
Before blocking devices, you need to know exactly which ones are "unnecessary." Most routers allow you to view a list of connected devices in real time. Here's how to do this on different models:
- 📡 TP-Link (Archer, Deco): Go to
General Settings → Wireless → Wireless Statistics. All devices are displayed here with the indicationIP,MAC addressesand consumed traffic. - 🖥️ ASUS (RT-AX, ZenWiFi): Open section
Network Map → ClientsThe system automatically classifies devices by type (smartphone, TV, game console). - 📱 Xiaomi/Redmi Router: In the mobile app Mi Wi-Fi Go to the "Devices" tab. Here you'll find a graph of each device's activity over the past 24 hours.
- 🔄 Keenetic: In the web interface, select
System Monitor → Connected DevicesKeenetic even shows a week's connection history.
Pay attention to devices with unusual names (eg. android_123456 or Host-4A-7B) or those that consume traffic during non-working hours. Modern routers, such as ASUS RT-AX86U or TP-Link Deco X90, can send notifications when a new device is connected - enable this feature in the security settings.
⚠️ Attention: Some devices (such as smart light bulbs) Yeelight or columns Amazon Echo) may appear online under technical names. Before blocking, make sure it's not your device by temporarily unplugging it.
2. Disabling devices via the router's web interface
The most universal method is to use the router's admin panel. This manual is suitable for 90% of models, including D-Link, Zyxel And Mercusys. Follow these steps:
- Open your browser and type in the address bar
192.168.0.1or192.168.1.1(the exact address is indicated on the router sticker). - Enter your login and password (by default it is often
admin/adminoradmin/password). - Find the section with connected devices (see section 1 of this article).
- Select the unknown device and click the Disconnect button (Disconnect, "Block" or "Kick").
On routers TP-Link And Mercusys there is an option "Prohibit connection" (Block) - it not only disables the device now, but also adds it MAC address blacklisted. On ASUS A similar function is called "Deny". Important: after blocking, do not forget to save the settings (button Apply or "Apply").
| Router brand | Path to the list of devices | Power button | Permanent blocking |
|---|---|---|---|
| TP-Link | Wireless Mode → Statistics |
"Disable" | Deny connection |
| ASUS | Network Map → Clients |
«Block» | "Deny" + save rules |
| Xiaomi | Mobile app → "Devices" | "Disable" (swipe left) | Blacklist in settings |
| Keenetic | System Monitor → Connected Devices |
Block | Automatically when blocked |
⚠️ Attention: On some routers (for example, Tenda N301) After disconnecting the device via the web interface, it may take 5-10 minutes for it to reconnect. In this case, use the filtering method MAC address (see section 4).
Take a screenshot of the list of connected devices | Check if you are disconnecting your smartphone or laptop | Make sure the router is connected to power (some models reset their settings when rebooting) | Save changes to the settings after blocking-->
3. Blocking via a mobile app (for routers with support)
Manufacturers like Xiaomi, Huawei And TP-Link Mobile apps for managing routers are available. This is convenient if you need to quickly turn off a device and don't have a computer nearby. Let's look at the process using popular apps as an example:
- 📱 Mi Wi-Fi (Xiaomi):
- Open the app and go to the Devices tab.
- Swipe left on an unfamiliar gadget.
- Click "Disable" or "Add to blacklist".
- 🌐 Tether (TP-Link):
- Select your router from the list.
- Go to Clients (
Clients). - Click on the device and select "Block".
- In the Clients section, click on the device.
- Select "Block" and confirm the action.
The advantage of mobile apps is the ability to receive notifications about new connections. For example, in Mi Wi-Fi You can set up alerts if a device with an unknown identity connects to the network. MAC addressAnd in ASUS Router There is an "Intrusive Control" feature that automatically blocks suspicious gadgets.
4. MAC address filtering: a reliable way to block
If simply disconnecting doesn't help (the device reconnects), use MAC address filteringThis method works on all routers and blocks the device at the network level. Instructions:
- Find
MAC addressthe device you want to block (it is displayed in the list of connected gadgets). - Go to the router settings section
Wireless Mode → MAC Filter(orWireless → MAC Filtering). - Activate filtering and select the "Deny" mode (
Deny). - Add
MAC addressto the list and save the settings.
On routers ASUS This section may be called "Wireless → MAC Filter" and on Keenetic — "Security → Client Filtering." Important: After applying the filter, the router may reboot, and all devices may temporarily be disabled. Don't worry—this is normal.
Disadvantage of the method: experienced users can spoof MAC address on your device. To avoid this, combine filtering with other methods (for example, changing your Wi-Fi password).
How to bypass MAC address blocking?
On Android: Use apps like MAC Address Changer or manually change the MAC in the developer settings (Settings → About phone → Build number (7 taps) → Developer options → Wi-Fi MAC address).
On Windows: Change MAC via Device Manager → Network Adapters → Properties → Advanced → Network Address.
On iOS: You can't change your MAC without jailbreaking, but you can use a "random MAC" in Wi-Fi settings (iOS 14+).
5. Changing the Wi-Fi password: a radical solution
If you have too many foreign devices on your network, the easiest way is to change your Wi-Fi passwordThis will disconnect all users, and you'll have to reconnect your devices. Here's how to do it correctly:
- Log in to the router's web interface (see section 2).
- Go to
Wireless Mode → Security Settings(orWireless → Security). - In the "Password" field (
PasswordorKey) Enter a new code. Use at least 12 characters with numbers, letters, and special characters (e.g.,WiFi_7#Kot2026!). - Select encryption type
WPA3-Personal(orWPA2-PSK, IfWPA3(not supported). - Save the settings and reboot the router.
After changing the password, all devices, including yours, will be disconnected. Reconnect them by entering the new password. This method is guaranteed to remove all "unauthorized" devices, but it requires time to reconfigure smart devices (speakers, cameras, light bulbs).
⚠️ Attention: Don't use personal information (birthdates, pet names) or simple combinations like 12345678Hackers use dictionaries with millions of such passwords to guess them. To generate a strong code, use a password manager (for example, Bitwarden or KeePass).
6. Advanced Methods: IP and DHCP Restrictions
If the previous methods didn't work, try bind IP addresses to MAC or limit the range DHCPThese methods require a little more technical knowledge, but they give 100% results.
Method 1: Binding IP to MAC (Static DHCP)
This method assigns a fixed address to each device. IP address, which complicates the connection of third-party gadgets:
- Find the section in your router settings
DHCP → Address Reservation(orLAN → DHCP Reservation). - Add to list
MAC addressesand correspondingIPfor your devices. - Disable automatic distribution
IPfor unknown devices.
Method 2: Limiting the DHCP Range
Reduce the distribution pool IP addresses, so that there are no free "spaces" left in the network:
- Go to
DHCP → DHCP Settings. - Change the range of addresses being distributed (for example, from
192.168.1.100–192.168.1.199on192.168.1.100–192.168.1.110). - Assign to your devices
IPoutside this range (for example,192.168.1.5–192.168.1.9).
These methods are effective, but require manual configuration. If you have many devices (smartphones, TVs, smart appliances), keep a table with the links. MAC-IP in a notebook or Google Sheets.
7. Additional security measures
To minimize the risk of reconnecting foreign devices, follow these guidelines:
- 🔒 Disable WPS: Function
Wi-Fi Protected Setupvulnerable to brute-force attacks. In the router settings, find the sectionWPSand deactivate it. - 📶 Hide SSID: Disable network name broadcasting in
Wi-Fi Settings → Hide SSIDThis won't protect you from experienced hackers, but it will reduce the number of accidental connections. - ⏱️ Wi-Fi operating hours: Set up automatic network shutdown during your absence (for example, from 9:00 to 18:00 on weekdays).
- 🔄 Update your router firmware: Manufacturers regularly patch vulnerabilities. Check the software's current status in the section
System → Firmware Update.
For routers ASUS with firmware Asuswrt-Merlin The "Intrusive Control" function is available (Intrusion Prevention), which blocks suspicious activity automatically. Keenetic There is a built-in firewall - enable it in the security settings.
⚠️ Attention: Hiding SSID may cause problems with connecting some smart devices (eg. Amazon Echo or Google Nest). Before activating this feature, check the compatibility of your equipment.
Frequently Asked Questions (FAQ)
Is it possible to turn off the device without going into the router settings?
Yes, if your router supports control via a mobile app (see section 3). Also, some models (for example, TP-Link Deco) allow you to turn off devices by voice Alice or Google Assistant, if smart home integration is configured.
Why does a blocked device reconnect?
Most likely, it was replaced MAC address (See spoiler in section 4). In this case:
- Change your Wi-Fi password (section 5).
- Enable filtering by
MACfor all devices except your own. - Use a guest network for suspicious gadgets (if you need them temporarily).
How do I block a device on a router from a provider (Rostelecom, MTS, Beeline)?
Routers from ISPs often have limited functionality. Try:
- Log in to the web interface at
192.168.0.1or192.168.1.1(login/password is usually on a sticker). - Find the "Connected devices" or "DHCP clients" section.
- If there is no lock button, change the Wi-Fi password (section 5).
- Please contact your provider's support team to activate advanced settings.
For example, on routers Sagemcom (Rostelecom) blocking is available in Manage devices → Block.
Is it possible to find out which specific device is consuming all the traffic?
Yes, modern routers display traffic statistics by device. ASUS this is the section "Network Map → Traffic", on TP-Link — "Wireless Statistics." You can also use third-party programs:
- GlassWire (Windows/macOS) — shows traffic by applications and devices.
- Fing (Android/iOS) — scans the network and identifies power-hungry gadgets.
- PRTG Network Monitor — a professional tool for network monitoring.
What should I do if my router won't let me block my device?
Possible causes and solutions:
- Outdated firmware: Update your router software (see section 7).
- Provider restrictions: Try resetting the router to factory settings (button
Resetfor 10 seconds) and configure it again. - Lack of rights: Make sure you are logged into the admin panel (not guest access).
- Hardware limitations: On very old routers (for example, D-Link DIR-300) There may be no blocking function. In this case, change your router or use a guest network with limited access.