Many home owners are familiar with the experience of their internet slowing down and their router's lights flashing wildly. Often, the cause isn't a faulty device, but rather the presence of uninvited guests on your wireless network. These uninvited devices can use your bandwidth to download large files, critically reducing connection speeds for primary users.
Removing someone else's WiFi connection isn't just a way to speed up your internet connection, it's also a crucial security measure. Open ports on connected devices can allow attackers to access personal data stored on your computer or in cloud storage. Therefore, it's important not only to "kick" the device from the network, but also to close the loophole through which it entered.
In this article, we'll explore proven methods for blocking devices on popular router models. You'll learn how to distinguish your devices from others, change passwords, and configure MAC address filtering for maximum protection.
How to spot uninvited guests on the network
The first step to cleaning the network is accurately identifying connected devices. Many users mistakenly believe that the client list in the provider's app or on the router's casing is always accurate, but the real picture is often hidden deeper in the system logs. First, you need to access the router's administrative panel by entering the gateway IP address (usually 192.168.0.1 or 192.168.1.1) in the browser's address bar.
After logging in, find the section responsible for your wireless network status. It may have different names depending on the manufacturer: Wireless Status, Client List, DHCP Client List or "Client List." This displays all active connections, including wired and wireless.
- 📱 Device name: often displayed as the phone model (eg iPhone-13, Samsung-Galaxy) or OS name (Android, Windows).
- 🆔 MAC address: A unique network card identifier consisting of 12 characters (numbers and the letter AF), which cannot be forged programmatically on the fly without root rights.
- 🌐 IP address: the internal address that the router assigned to the device in the current session, for example,
192.168.1.45.
Compare the number of devices in the list with your actual devices. If you see an unfamiliar name or the number of clients exceeds the actual number of phones, TVs, and laptops you own, there's an intruder on your network. Pay attention to data transfer activity: if an unknown device shows high traffic volume in real time, this is a sure sign that your channel is being used illegally.
⚠️ Attention: Some modern smartphones (especially iOS and Android 10+) use a "Private Wi-Fi Address" feature or MAC address randomization. This means the same device may appear as a new one in the router's list each time it reconnects unless this option is disabled in the phone's settings.
Accessing router settings and searching for clients
To manage your network, you'll need to log into your router's web interface. This is a standard procedure and can be performed through any browser. Make sure your device (computer or phone) is connected to the router, preferably via cable to avoid connection interruptions during setup.
In the address bar, enter the gateway IP address. If you haven't changed the default settings, this will be 192.168.0.1 or 192.168.1.1The exact address is often indicated on a sticker on the bottom of the device. Next, you will need to enter the administrator login and password. By default, this is often a combination admin/admin, but for security reasons it is better to change this data immediately after the first setup.
Interfaces vary significantly between manufacturers, but the logic for searching for clients is the same. Look for tabs named "Status," "Network Map," or "Wireless Mode." In modern models, such as Keenetic or MikroTik, the list of clients can be displayed on the main dashboard screen.
What to do if you forgot your router password?
If you haven't changed the administrator password, try the standard combinations (admin/admin, admin/password). If the password has been changed and lost, the only solution is a full reset using the reset button on the router. This will restore the router to factory settings, but it will also erase all your ISP and WiFi settings, so you'll have to set up your internet connection again.
Within the client list, you'll see a table. It may contain the following columns: Hostname, MAC address, IP address, Connection type (Wireless/LAN), and DHCP lease time. The MAC address is the key parameter for subsequent blocking, as the IP address can change each time the device reconnects.
Removing users via MAC filtering
The most reliable and professional way to remove a WiFi user and prevent them from reconnecting is to use MAC filtering. This method allows you to create a "blacklist" of devices that will be denied network access.
Unlike a simple connection break, which is often temporary (the device will simply reconnect after a minute), MAC address filtering blocks access at the protocol level. The router simply ignores authorization requests from prohibited identifiers.
☑️ MAC filter blocking algorithm
To set up, go to the wireless network section (Wireless) and find the subsection MAC Filtering or MAC address filteringHere you need to activate the filtering function. It's important to select the correct mode: "Deny" (Blacklist) or "Allow" (Whitelist).
The "Deny" mode allows all devices except those on the list to access the network. This is the most convenient option for removing specific users. The "Allow" mode is more restrictive: only devices on the list will have access, while all others (even those with the password) will be blocked. Use the latter option only if you want to create a network exclusively for trusted people.
Add the MAC address of the intruder to the list. On some interfaces, such as TP-Link or ASUSYou can do this directly from the client list by clicking the "Block" button next to the device name. After adding the rule, be sure to click "Save" or "Apply" for the changes to take effect.
Changing the password and encryption type
If you suspect your password has been compromised, simply blocking one device may not help—the attacker may try to connect from another device. A radical yet effective solution is to completely change your wireless network security key.
When you change your password, all devices will automatically disconnect from the network. You'll have to re-enter the new key on all your devices (smartphones, TVs, laptops). This ensures that only those you share the new code with will have access.
| Encryption type | Security | Compatibility | Recommendation |
|---|---|---|---|
| WEP | Low (hack in minutes) | Very high (old devices) | Do not use |
| WPA/WPA2 Mixed | Average | High | Acceptable for older gadgets |
| WPA2-PSK (AES) | High | High | Recommended standard |
| WPA3 | Maximum | New devices only | For high-end routers |
Go to Wireless Settings (Wireless Settings). Find the field Wireless Password or Security keyCreate a complex combination of uppercase and lowercase letters, numbers, and special characters. The password must be at least 12 characters long.
It's also crucial to check the encryption type. Make sure the protocol is selected. WPA2-PSK with an algorithm AESAvoid using outdated TKIP or WEP encryption, as they are easily cracked even by novice hackers using specialized software.
Blocking features on routers of different brands
Router interfaces from different manufacturers have their own unique features. While the operating principle is the same, menu navigation can vary significantly. Let's look at the nuances of popular brands.
On devices TP-Link (new interfaces with a green or blue header) go to the "Advanced" tab -> "Wireless" -> "MAC Filtering." This allows you to conveniently manage the list directly from the connected clients table.
Routers ASUS ASUSWRT firmware offers a very user-friendly visual interface. On the main "Network Map" page, click on the client icon. Hovering over a device reveals a lock button (a lock icon or a prohibition symbol). This is the fastest way to delete a user.
In devices Keenetic (formerly ZyXEL) access control is implemented through a system of priorities and access lists. Go to the "My Networks and Wi-Fi" menu -> "Client List." By clicking on the device name, you can immediately toggle the "Internet Access" switch to the "Off" position. Flexible access schedule settings are also available here.
- 🔒 D-Link: often requires going to Advanced settings -> Wi-Fi -> MAC filter, where you need to manually enter the address.
- 🚀 Tenda: has a mobile app that allows you to block users with one click, from anywhere in the world.
- 🌐 MikroTik: requires knowledge of setting up Firewall and Access List rules, making the process challenging for beginners but extremely flexible.
If you are using equipment from an Internet service provider (eg. Sagemcom, Sercomm or branded Huawei), the interface may be stripped down. In such cases, providers often recommend using dedicated smartphone apps with prominently displayed "Guest Network" or "Blocking" functions.
⚠️ Attention: Router firmware interfaces are regularly updated. Menu locations, item names, and appearance may change. If you can't find the item you need, consult the official instructions on the manufacturer's website for your specific model.
Guest network as an alternative to blocking
Instead of constantly fighting off those who want to connect to your WiFi, you can use an isolation strategy. Creating a Guest Network is an elegant solution that allows you to provide access to guests or neighbors without compromising your main network.
A guest network creates a virtual channel with a separate name (SSID) and password. Its main advantage is isolation. Devices on the guest network cannot see computers, NAS storage devices, and printers connected to the main network. This protects your personal files from prying eyes.
Set up a guest network in the appropriate section of your router. You can limit the speed for guests, set a traffic limit, or set access time limits (for example, only from 10:00 AM to 10:00 PM). If someone starts overusing resources, you can simply disable the guest channel without changing the password for your main Wi-Fi.
This is an ideal option for situations where you have friends over or rent out your space by the day. You provide internet access to your guests while maintaining full control over your infrastructure.
Frequently Asked Questions (FAQ)
Can the remote user reconnect to WiFi?
Yes, if you simply disconnected without changing the password or blacklisting the device (MAC filter). When automatically reconnecting, the device will attempt to connect to the network again. For reliable protection, be sure to use MAC address filtering or change the password.
Does my provider see that I blocked a user?
No, the ISP provides the connection and doesn't control how many devices, or which ones, are connected to your router internally. Blocking occurs at the level of your local equipment.
What should I do if I see a device named "Unknown" in the client list?
It could be a foreign device, or it could be one of your smart gadgets (such as a temperature sensor or smart plug) that isn't broadcasting its name. Compare the number of unknown devices to your existing devices. If there are more than you should have, try disabling your devices one by one and seeing if the entry disappears from the list, or temporarily enable strict filtering mode.
Will internet speed decrease after blocking?
On the contrary, the speed should increase or stabilize as the channel is cleared of excess traffic. However, the filtering process itself creates minimal load on the router's processor, which is unnoticeable on modern models.
How to block a user from a phone?
Most modern routers have mobile apps (TP-Link Tether, ASUS Router, Keenetic, etc.). Download the app for your model, log in, and find the "Clients" or "Devices" section. There's usually a lock button next to each connected device.