Slow page loading speeds, constant video buffering, and sudden connection drops are often signs that your home network is overloaded. In most cases, the culprit isn't an old router, but an uninvited guest that's "hooked" on your wireless internet. Unauthorized access access point can not only cause slow operation, but also become a real threat to the security of transmitted data.
Removing an unauthorized user from the list of connected devices is a necessary and usually fairly quick procedure. It requires access to the router's administrative panel and a basic understanding of how it works. MAC addressingIn this article, we'll examine detailed action algorithms for equipment from different manufacturers and discuss preventative security measures.
Before taking active steps to block, you need to confirm your suspicions. Sometimes low speeds are caused by interference from neighboring networks or technical issues with your provider. However, if you see devices in the client list whose names you don't recognize (for example, iPhone-Unknown or Android-7B2C), it's time to sound the alarm.
Diagnostics: How to identify an intruder online
The first step is always to audit your current connections. Modern routers, whether TP-Link, Asus or Keenetic, have built-in traffic monitoring tools. By accessing the web interface, you can see a full list of active clients. Pay attention to the number of devices: if you have two smartphones and a laptop, but the list shows five, then someone is using your channel.
For accurate identification, it is often necessary to check the MAC address. This unique identifier is assigned to the network interface of each gadget at the factory. You can find it in your phone's settings (Settings -> About phone -> General information) and compare it with what's displayed on the router. A discrepancy indicates the presence of an outsider.
⚠️ Attention: Some network scanner apps may display devices with generic names. Don't blindly block them until you've verified that all family members physically own these devices.
There are several indirect signs that indicate a “neighbor”:
- 📉 A sharp drop in internet speed in the evening, when neighbors are also active.
- 📶 The WLAN indicator on the router is blinking even when all your devices are turned off.
- 🔒 Attempts to access the router admin panel from unknown IP addresses (visible in the logs).
Login to the router's administrative panel
To manage your network, you need to access the "brain" of your system—the router's web interface. This is done through any browser connected to the network by entering the gateway's IP address. The standard addresses are most often 192.168.0.1 or 192.168.1.1, however, some providers, such as Rostelecom or MGTS, can use their own domains.
The system will ask for your login and password. If you've never changed them, check the sticker on the bottom of the device - it contains the factory data (often admin/admin). Security requires changing this data immediately after the first setup, as it is publicly available on the Internet.
If the default combinations don't work, the password may have been changed previously. In this case, the only solution is a full factory reset, which will require reconfiguring the internet.
MAC filtering blocking method
The most reliable way to disconnect someone from WiFi is to use a whitelist (MAC filter). This method involves the router only allowing connections to devices whose addresses are on a special list. Anyone else, even with the password, will be blocked.
The setup process is as follows: first, you copy the MAC addresses of all your trusted devices. Then, in the section Wireless Network -> MAC Address Filter Activate "Allow" mode and enter your addresses. After applying the settings, the network will reboot, and unauthorized access will be immediately disconnected.
| Filtration type | Operating principle | Level of protection | Difficulty of setup |
|---|---|---|---|
| Blacklist | Blocks only selected addresses | Low (you can change MAC) | Low |
| Whitelist | Allows only selected addresses | High | Average |
| Disabling the WLAN button | Physically turns off the WiFi module | Absolute | Minimum |
It's important to understand that an experienced user can spoof (clone) their device's MAC address to match that of an authorized device. Therefore, this method is effective against regular users, but not against hackers.
☑️ Setting up a MAC filter
Force disconnection and password change
If you don't have time to mess with filters, you can take the "nuclear" approach: changing your WiFi password. This action forcibly disconnects all devices. You'll have to reconnect your devices, but the intruder will be left behind, as the old access key will no longer work.
Find the section in the router interface Wireless Security or Wireless settingsIn the field Password (Wireless Password) Enter a new, complex combination. Encryption is recommended. WPA2-PSK or WPA3, since older WEP standards can be cracked in minutes.
After changing the password, it is useful to use the “Disable all” function (if your model has one, for example, in Keenetic or MikroTik) to terminate active sessions immediately, without waiting for the DHCP lease to expire.
⚠️ Attention: After changing your WiFi password, some smart devices (light bulbs, sockets, vacuum cleaners) may not connect automatically. They will need to be reconfigured through the app.
Hiding SSID: Is It Worth the Candle?
Another security method is hiding the network name (SSID). This prevents the router from broadcasting its existence. To connect, the user must manually enter the network name and password in the device's WiFi settings.
Many people think this is a panacea, but this is a misconception. A hidden network is easily detected using specialized sniffers that analyze traffic. When your device tries to connect, it automatically "screams" about the presence of a hidden network. Therefore, this method only provides an illusion of security.
Why is hiding SSID not a reliable security solution?
Hiding the network name (SSID) doesn't encrypt traffic or prevent data interception. It's merely a cosmetic measure that might make life more difficult for your guests, but it won't stop an attacker with basic network auditing software.
It only makes sense to use this feature in conjunction with other measures to reduce "noise" in the airwaves and avoid annoying your neighbors with a list of available networks.
Nuances for different router manufacturers
The interfaces of different routers may differ, but the logic remains the same. Let's look at the features of popular brands:
At routers TP-Link (especially new versions with blue interface) the blocking function is located in the section Advanced Settings -> Wireless -> Wireless StatisticsThere's a convenient "Block" button next to each client.
In devices Asus with AsusWRT firmware you need to go to Network Map -> ClientsBy clicking on the computer or smartphone icon, you'll see a button to deny access. You can also set an access schedule there.
Routers Keenetic (formerly ZyXEL) offer the most flexible tool: click the lock icon in the client list to lock the device. You can also create a guest network with time and speed restrictions to prevent access to your main home network.
Frequently Asked Questions (FAQ)
Can my neighbor hack my password if I change it often?
If you use a complex password (more than 10 characters, mixed-case letters, and numbers) and WPA2/WPA3 encryption, brute-force cracking will take years. Frequent password changes aren't necessary if your password is initially strong. However, if your password is simple, brute-force attacks can crack it in minutes.
What should I do if I blocked myself?
If you've applied a MAC filter and forgot to add your device, you won't be able to access WiFi. In this case, the only solution is to connect to the router via a LAN cable to disable the filter, or perform a full reset using the Reset button on the device.
Does the router owner see what websites connected devices visit?
Standard home router logs typically only show IP addresses of requests or domain names, but not page content (if HTTPS is used). However, by installing specialized software or using parental control features, you can obtain detailed browsing statistics.
Will disabling WPS help prevent uninvited guests?
Yes, it is. WPS technology is vulnerable to brute-force attacks. Even with a strong WiFi password, enabling WPS can become a backdoor to your connection. It is recommended to disable this feature in your wireless network settings.