Many users are familiar with the experience of their internet slowing down and unfamiliar names appearing in the list of connected devices. This is a sure sign that someone is using your network without permission. This intrusion not only reduces connection speed but also poses a real threat to the security of your personal data stored on computers and smartphones.
The first thing to do when you discover a problem is not to panic, but to act consistently and calmly. There are several effective ways to disable a thief's access to your Wi-Fi, ranging from a simple password change to complex IP address filtering. Understanding these mechanisms will allow you to regain full control of your home network.
In this article, we'll take a detailed look at all available security methods, explore the settings for popular routers, and answer frequently asked questions. You'll learn to distinguish your devices from others and permanently block access to uninvited guests.
Signs that someone else is connecting to your network
Before taking active steps to block the device, you need to make sure the problem actually exists. Users often mistake normal speed fluctuations caused by downloading updates or running background apps on their devices for "theft." However, there are clear indicators of unauthorized access, which cannot be ignored.
Pay attention to the indicators on the router. If the WLAN or Wi-Fi light is flashing rapidly when all your devices are off or in sleep mode, this is a warning sign. Active data transmission when no one is using it indicates that the channel is being used by someone else.
Another way to check is to use specialized software. Programs like Fing or Wireless Network Watcher They scan the airwaves and display a complete list of all connected MAC addresses. By comparing this list with your existing devices, you can easily identify the intruder.
A sharp drop in internet speed is also an indirect but important sign. If your provider guarantees a stable 100 Mbps, but you're barely managing 5 Mbps when watching HD video, you should immediately check your router's client list.
⚠️ Warning: Some smart devices (lamps, sockets, vacuum cleaners) may have strange names in the connection list. Before blocking an unknown device, make sure it's not your new gadget.
Modern routers often have built-in mobile apps that show network load in real time. If you see traffic spikes at 3 a.m., when everyone is asleep, it's a clear sign that someone is using your Wi-Fi.
Changing the password and encryption type
The most radical and effective method for disabling a thief's access to your Wi-Fi is to change the password. This will forcefully disconnect all devices, including your own, requiring you to re-authorize with the new credentials.
To access your router's settings, you need to enter its IP address in the browser's address bar. This is usually 192.168.0.1 or 192.168.1.1The login and password for accessing the admin panel are often located on a sticker on the bottom of the device, unless you have changed them previously.
In the router interface, find the section responsible for the wireless network. It may be called Wireless, Wi-Fi or Wireless modeThis is where security settings are located. Selecting the correct encryption type is critical.
Use only the standard WPA2-PSK or its newer version WPA3Outdated WEP or WPA-TKIP protocols are easily cracked by automated programs in minutes, rendering your password useless.
After changing the password, the router will restart the wireless module. Any devices attempting to connect with the old password will be rejected. This ensures that even if someone knew your previous key, they will no longer be able to use it.
MAC address filtering
A more advanced method of protection is to use MAC filteringEach network adapter has a unique physical address, which is programmed at the factory and does not change (with rare exceptions). The router can operate in "Whitelist" mode, allowing only approved devices through.
To set up this feature, you first need to find out the MAC addresses of all your legitimate devices. On a computer, you can do this via the command line by entering the command ipconfig /all and find the "Physical Address" line. On smartphones, the address is listed in the "About Phone" section or in the Wi-Fi connection properties.
Find the section in your router settings MAC Filtering or MAC address filteringEnable "Allow" or "White List" mode. Then enter the addresses of all your devices into the table: laptops, phones, TVs, and consoles.
Once this feature is enabled, the router will ignore any connection requests from devices whose addresses aren't on the list. Even if an attacker learns your password, they won't be able to access the network.
| Device | MAC address example | Status |
|---|---|---|
| ASUS laptop | 00:1A:2B:3C:4D:5E | Allowed |
| iPhone 13 | A4:5E:60:F1:22:33 | Allowed |
| Smart TV Samsung | D8:49:0B:11:22:33 | Allowed |
| Unknown PC | 1C:AF:F7:99:88:77 | Blocked |
The main drawback of this method is its labor-intensive nature. Every time friends come over and want to connect to Wi-Fi, you'll have to manually enter their phone's address into the router settings. For home networks with a constant mix of devices, this is a great option.
☑️ Setting up a MAC filter
Blocking via the router's web interface
If you don't want to change the password or mess with lists, you can simply "kick" a specific device right now. Most modern routers (TP-Link, ASUS, Keenetic, D-Link) have a real-time client blocking feature.
Go to the router's web interface and find the section Client list, DHCP Client List or Network mapThere you'll see all active connections. Each device typically has a "Block" or "Ban" button or a hand sign next to it.
Click this button next to the suspicious device. The router will immediately terminate the connection and add the offending device's MAC address to the blacklist. Even with the correct password, they will no longer be able to connect until you remove them from the blacklist.
This method is convenient because it's quick and easy. You don't need to reboot your router or reconnect your devices. You simply address the problem locally, while maintaining the rest of your network without interruptions.
Some router models, for example Keenetic or MikroTik, allow you to customize your access schedule. You can limit Wi-Fi usage hours for specific devices or turn off the wireless network completely at night.
⚠️ Please note: Router interfaces are constantly being updated. Button locations may vary depending on the firmware version. If you can't find the option you need, please refer to the instructions for your specific model.
Using mobile apps from providers
Many internet providers and router manufacturers have developed convenient smartphone apps that allow you to manage your network remotely. This is especially useful if you're away from home but want to check who's using your Wi-Fi.
Apps like My TP-Link, Keenetic, Huawei AI Life or Rostelecom. My Wi-Fi They provide complete control over the network. They often include a "Guest Network" feature, which allows you to create a separate Wi-Fi connection for friends, isolated from your personal devices.
With just one click, you can view a list of connected devices and click the "Disconnect" button. Some apps even send notifications when a new device connects to the network, allowing you to respond immediately.
Using the official app also makes it easy to update your router's firmware. Manufacturers regularly release security patches that fix vulnerabilities that could allow hackers to access your network.
What is a guest network?
A guest network is an isolated segment of your Wi-Fi network. Guests can use the internet but can't access your files, printer, or router settings. This is the best way to secure your data if you host frequent parties.
This requires a stable connection, but opens up the possibility of remote control from anywhere in the world.
Hiding the network name (SSID) and other measures
One preventative measure is hiding your network name (SSID Broadcast). When this feature is enabled, your Wi-Fi becomes "invisible" to regular scanners. It won't appear in the list of available networks on your neighbors' phones.
However, this doesn't provide 100% protection. An experienced user can detect a hidden network using specialized traffic analyzers. Furthermore, you'll have to manually enter the network name on each new device, which is inconvenient.
A more important measure is to disable the function WPSThis technology is designed to simplify connections, but it has critical vulnerabilities. Attackers can brute-force the WPS PIN and gain access to the network even without knowing the master password.
Find the section in your router settings WPS and move the switch to the position Off or DisableThis will close one of the most common security holes in home networks.
It's also recommended to disable Remote Management over the WAN unless you specifically use it. This will prevent attempts to hack your router settings from the outside internet.
Frequently Asked Questions (FAQ)
Can a neighbor steal my password if I haven't told it to anyone?
Yes, it's possible. If you have a simple password or use outdated WEP encryption, it can be cracked quickly using specialized software. Alternatively, the password may have been saved on the device of a friend who visited you and is now being broadcast from their device.
Does a connected "thief" affect my internet speed?
Absolutely. The connection bandwidth is shared among all active users. If someone is downloading movies or playing online games using your network, your speed will drop significantly, and your ping will increase.
Do I need to change my password after locking my device?
Recommended. If you've simply blocked your device by MAC address but the password remains the same, an attacker could theoretically change their adapter's MAC address (clone your device's address) and attempt to log in again. Changing the password is the most secure measure.
How can I find out who exactly has connected if the list only contains numbers?
Look at the first six characters of the MAC address (OUI). There are online databases that use these characters to identify the device manufacturer (e.g., Apple, Samsung, Intel). This will help you determine whether it's a phone, laptop, or smart plug.
Is it safe to use programs to "disable" neighbors?
Using programs to actively terminate connections (deauthentication) may be considered a violation of computer security laws in many countries. It's better to use the legal methods for configuring your own router, as described in this article.