How to Hide Your Computer on a Wi-Fi Network: Disable Discovery and Protect Your Data

Hiding your computer on a Wi-Fi network is a crucial task for both security and protecting your personal data from prying eyes. When your PC or laptop is connected to a home or office network, it can be visible by default to other devices, from printers and smartphones to other people's laptops, if they're on the same subnet. This opens up potential risks, from unauthorized access to shared folders to hacking attempts through protocol vulnerabilities. SMB or NetBIOS.

However, there are several ways to hide a computer on the network—both at the operating system level and through router settings. It's important to understand that complete "invisibility" is impossible (the network administrator will always be able to detect the device by MAC address or IP), but it can make the task significantly more difficult for most users. In this article, we'll look at working methods for Windows 10/11, macOS and popular router models, and we'll also look at nuances that are rarely discussed.

———

Why is my computer visible on a Wi-Fi network and why is this dangerous?

By default, modern operating systems are configured to behave "friendly" on a local network. This means that your computer can automatically announce its presence via protocols like LLMNR (Link-Local Multicast Name Resolution) or NetBIOS over TCP/IPFor example, when you open Net In Windows Explorer, all devices that responded to the broadcast request are displayed.

Key risks of online visibility:

• 🔍 Port scanning: Attackers can look for open ports (eg. 445 For SMB or 3389 For RDP) and try to exploit vulnerabilities.
• 📂 Access to shared resources: If you've ever set up shared folders or printers, these resources may be accessible to other devices.
• 🕵️ Activity tracking: On corporate networks, administrators can monitor traffic, including the websites you visit (if not using VPN).
• 💻 Man-in-the-Middle AttacksIn unsecured networks (such as in a cafe), attackers can intercept data transmitted between devices.

However, not all protocols are equally dangerous. For example, mDNS (used in macOS And Linux for services Bonjour) less vulnerable than the outdated one NetBIOS, but it can also provide information about your device. Important: Even if you disable discovery in Windows, your computer will still be visible to the router in the list of connected devices (by MAC address).

———

Method 1: Disable network discovery in Windows 10/11

The easiest way to hide your computer from other devices on your local network is to disable the feature network discoveryThis will not make your PC completely invisible (for example, for ping requests), but will hide it from the list of devices in Windows Explorer and block access to shared resources.

Instructions for Windows 10/11:

1. Open Control Panel → Network and Internet → Network and Sharing Center.
2. In the left menu, select Change advanced sharing options.
3. Expand your profile Guest or public (even if you are connected to your home network).
4. Select an option Disable network discovery And Turn off file and printer sharing.
5. Click Save changes.

After this, your computer will no longer be visible on the network, but basic network functions (Internet access, ping etc.). If you need to temporarily show your computer on the network (for example, to transfer files), change the settings back.

Are folders accessible over the network?|Is the computer visible in File Explorer on other PCs?|Can I connect to the printer over the network?|Does the Internet work after the changes?-->

⚠️ Attention: If you use HomeGroup (in Windows 10) or shared folders, their access will be blocked. To unblock a specific folder, you will have to manually configure permissions through Properties → Access → Advanced settings.

———

Method 2: Blocking NetBIOS and LLMNR protocols

Protocols NetBIOS And LLMNR These are responsible for communication between devices on the local network. Disabling them will make your computer less visible, but may disrupt some network functions (for example, printer discovery or connecting to network drives by hostname).

How to disable NetBIOS:

1. Open Control Panel → Network Connections.
2. Right click on your connection (Wi-Fi or Ethernet) and select Properties.
3. Find in the list Internet Protocol version 4 (TCP/IPv4) and press Properties.
4. Click More → WINS and select Disable NetBIOS over TCP/IP.

How to disable LLMNR (via registry):

1. Click Win + R, enter regedit and confirm.
2. Follow the path:

   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient

3. Create a parameter DWORD (32 bits) with a name EnableMulticast and meaning 0.
4. Restart your computer.

These changes require administrator privileges. If you are unsure about what you are doing, back up your registry before editing.

———

Method 3: Configure a firewall to block noisy ports

Windows Firewall can be configured to block requests that make your computer visible on the network. For example, by closing ports 137-139 (NetBIOS) and 445 (SMB) will reduce the risk of detection.

Instructions:

1. Open Control Panel → Windows Firewall → Advanced settings.
2. In the left menu, select Rules for incoming connections.
3. Find the rules with the names:
   • NetBIOS (TCP-In)
   • NetBIOS (UDP-In)
   • File and Printer (SMB-In)

An alternative option is to create a new rule that blocks all incoming connections except those required (for example, for VPN or online games). However, this requires in-depth knowledge of network protocols.

⚠️ Attention: Port blocking 445 This may disrupt network drives, printers, and some corporate applications. Before making changes, check to see if you're using these features.

———

Every day|Several times a week|Rarely|Never-->

Method 4: Hiding a computer through router settings

Some routers allow you to hide devices from other network clients using the feature AP Isolation (client isolation) or Client IsolationIn this case, the devices will not see each other, but will still have internet access.

How to enable client isolation:

• 📡 For TP-Link:
  1. Go to the router's web interface (192.168.0.1 or 192.168.1.1).
  2. Go to Wireless → Wireless Advanced.
  3. Enable the option AP Isolation (or Enable AP Isolation).
• 📡 For ASUS:
  1. Open Wireless → Professional.
  2. Find Enable AP Isolation and activate it.

This feature is useful if you want to prevent devices on your network from communicating with each other (for example, on a guest network). However, it doesn't hide your computer from the router—it will still be visible in the list of connected devices (DHCP clients).

⚠️ Attention: On some routers AP Isolation Works only for wireless clients. Wired devices (connected via Ethernet) can remain visible to each other.

———

Method 5: Change the hostname and workgroup

By default, Windows uses the computer name as host name (host name) that can be displayed on the network. Changing it to a random set of characters will make it more difficult to identify your device.

How to change hostname:

1. Open Control Panel → System → Advanced system settings.
2. On the tab Computer name click Change.
3. In the field Computer name Enter a custom name (for example, DESKTOP-XYZ123).
4. Restart your PC.

You can also change working group (default - WORKGROUP):

1. In the same window (Additional system parameters) click Change.
2. In the field Working group Enter a custom name (for example, HOME-NET).
3. Confirm changes and reboot.

These actions will not make the computer completely invisible, but will make it more difficult to identify on the network. For example, instead of a name IVAN-PC other devices will see DESKTOP-ABC456, which is less informative.

———

Method 6: Using a VPN or alternative networks

If you need complete anonymity online (for example, on public Wi-Fi), consider connecting via VPN Or create a separate virtual network. This doesn't hide your computer from the router, but it does encrypt your traffic and mask your activity from other devices on the same network.

Options:

• 🔒 VPN: Connecting to VPN server Hides your real IP address on the local network. Other devices will only see encrypted traffic between you and the VPN server.
• 🌐 Tor: Browser Tor Routes traffic through multiple nodes, making it anonymous. However, this does not hide the device itself on the local network.
• 🖥️ Virtual machine: Running a second OS in a virtual machine (e.g. VirtualBox) with a separate network adapter (mode NAT) isolates it from the main system.

For maximum protection, combine these methods. For example, connect to Wi-Fi through a VPN and disable network discovery in your host OS.

⚠️ Attention: Free VPN services can collect data on your activity. For critical tasks, use proven paid solutions (for example, ProtonVPN or Mullvad).

———

Method 7: Physical isolation (guest network or second router)

If you need to completely separate your computer from other devices on your network, consider creating a guest network on the router or connecting through a second router in mode client bridge.

How to set up a guest network:

• 📡 On most routers (TP-Link, ASUS, Keenetic) there is an option Guest network in the section Wi-Fi.
• 🔑 Set up a separate SSID (network name) and password for the guest network.
• 🔒 Turn on the option Isolate guest clients (if any).

Benefits of a guest network:

• Devices in the main and guest networks cannot see each other.
• You can limit the speed or access time for guest devices.
• The guest network often has a separate VLAN, which increases safety.

An alternative is to connect via a second router:

1. Connect the second router to the main one via cable (in LAN port).
2. On the second router, disable DHCP and assign it a static IP from the range of the main router.
3. Connect to the second router's Wi-Fi—your computer will be on a separate subnet.

———

Common mistakes and how to avoid them

When setting up a computer to be hidden on the network, users often encounter the following problems:

1. Loss of access to network resources

If you have disabled NetBIOS or SMB, but you need shared folders, use access by IP address (For example, \\192.168.1.100\shared) instead of the host name.

2. Problems with printers or NAS

Many network printers and storage (NAS) are used mDNS or LLMNR for discovery. If devices are no longer detected after disabling these protocols, please reset the settings or configure access manually.

3. Conflicts with corporate policies

In office networks, administrators can force network discovery through Group Policy (GPOIn this case, local Windows settings won't help—you'll need to coordinate the changes with the IT department.

4. Incorrect firewall configuration

Blocking all incoming connections may disrupt the operation of programs (for example, Zoom, Steam or 1C). Always test critical applications for functionality after changes.

⚠️ Attention: If you use Windows Pro/Enterprise, the domain administrator can override your settings through Group PolicyIn this case, it is impossible to hide a computer on the network without administrator rights.

———

FAQ: Frequently asked questions about hiding your computer on Wi-Fi

ping your_IP_address