Many router owners are familiar with the situation when an intruder connects to their wireless network. Internet speeds drop, ping times in games increase, and the security of your personal data is compromised. If you notice an unfamiliar device in the list of connected clients, you need to act immediately to restrict the intruder's access.
The process of removing a user from the network TP-Link No advanced programming or networking knowledge is required. Modern web configurator and mobile app interfaces allow you to manage access in just a few clicks. The key is knowing where to find the necessary settings and how to correctly identify someone else's device among your own.
In this article, we'll look at all the available blocking methods: from simply changing your password to setting up an advanced filter. MAC addressesYou'll learn how to identify your devices, use the Blacklist, and set up a guest network to secure your main home network from unauthorized connections.
Identifying connected devices
Before resorting to drastic measures, it's important to determine exactly which device is the intruder. Users often mistake forgotten gadgets, such as smart plugs or TVs, for intruders. First, access your router settings by entering the standard address in your browser's address bar. 192.168.0.1 or 192.168.1.1.
After logging in (the default login and password are usually found on a sticker on the bottom of the router), find the section responsible for network status. Depending on your router model and firmware version, it may be called Wireless, Statistics or DHCP Client ListThis is where the complete list of all active connections is displayed.
Pay attention to the number of connected devices. If you only have two smartphones and a laptop in your home, but the list shows four or five devices, that's a clear warning sign. Modern interfaces TP-Link They often display not only the IP address, but also the name of the device or the network card manufacturer, which makes searching much easier.
- 📱 Check all your smartphones and tablets for an active Wi-Fi connection.
- 💻 Don't forget about desktop computers, smart TVs, and set-top boxes.
- 🏠 Think about smart home devices: lamps, robotic vacuum cleaners, speakers.
If you can't identify a device by name, try temporarily disabling Wi-Fi on your devices one by one and monitoring the router's client list for changes. This is a reliable way to identify someone else's equipment.
Changing your wireless network password
The fastest and most effective way to remove all users, including potential intruders, is to change your Wi-Fi password. After changing the security key, all devices will automatically be disconnected and unable to reconnect without entering the new code. This action is guaranteed to "kick out" anyone who knew the old password.
To perform this operation, go to the menu Wireless (Wireless mode) and select the subsection Wireless Security (Wireless Security) Find the field PSK Password or Wireless PasswordEnter a new complex password consisting of mixed-case letters and numbers, and save the settings by clicking the button. Save.
⚠️ Please note: After changing your password, your router may reboot, and all your personal devices will require re-authorization. Prepare the new password in advance to enter on your phone or tablet to avoid losing access to settings if you manage your router via Wi-Fi.
Use this method if you suspect your password has been compromised or shared widely. However, keep in mind that if the attacker has a network profile saved on their device, they may attempt to connect again, but this time unsuccessfully. For ongoing protection, it's best to combine password changes with other methods.
Some router models TP-Link Wireless routers with WPS support allow you to connect without entering a password. If you use a key changer, be sure to disable the WPS function in the corresponding menu, as it can become a backdoor for attackers using special tools to brute-force the PIN.
Setting up MAC address filtering
A more flexible tool than a complete password change is MAC address filtering. Each network device has a unique physical identifier— MAC addressTP-Link routers allow you to create lists of allowed or blocked addresses, giving you complete control over who can connect to the network.
To use this feature, find the section in the menu Wireless MAC Filtering (MAC address filtering). First, you need to find out the MAC address of the device you want to block. This can be done in the client list (Wireless Statistics), where opposite each connected gadget its unique format code is indicated AA:BB:CC:11:22:33.
There are two filter operating modes:
- 🚫 Deny: This list contains the addresses of devices that are blocked from accessing Wi-Fi. All others are allowed to connect freely.
- ✅ Allow: Only trusted devices are added to the list. Any other device, even with the password, will not be able to access the network.
To delete a specific user, select the mode Deny, click Add New (Add new), enter the MAC address of the intruder and save the settings. If you want to create a "whitelist" for maximum security, select the mode Allow and enter the MAC addresses of all your devices there.
☑️ Setting up a MAC filter
Keep in mind that an experienced user can change (clone) their adapter's MAC address to one permitted on your network. Therefore, this method is effective against regular neighbors, but not against targeted hacker attacks.
Using a guest network for isolation
If you often have guests over or you have to share your Wi-Fi with strangers but don't want to give them access to your main resources, use the feature Guest Network (Guest Network) This creates a separate access point with its own name (SSID) and password, isolated from your main home network.
Guest network settings are made in the menu Guest NetworkHere you can set the network name, for example, Home_Guest, and set a separate password. The main advantage is the ability to limit bandwidth and set a time limit for access.
By enabling the guest network, you can safely assign passwords to users without worrying about them accessing your shared folders, printers, or NAS storage. If someone starts abusing your network traffic, you can simply disable guest mode with one click, without affecting your primary devices.
| Parameter | Main network | Guest network | Closed network (Allow list) |
|---|---|---|---|
| Access to files | Full | Absent | Full |
| Difficulty of setup | Low | Low | High |
| Security | Average | High | Maximum |
| Guest convenience | Low | High | Low |
Using guest mode is a modern standard of digital ethics and security. You provide the service but retain control over the perimeter.
Deleting via the Tether mobile app
For owners of modern routers TP-Link (especially the Archer and Touch series) you don't need to use a computer to manage the network. Mobile app Tether (or TP-Link Tapo (for some models) allows you to control connections directly from your phone anywhere there is internet access.
After installing the app and linking the router to your TP-Link ID account, go to the main screen. This will display a network map or a list of clients. Tapping on any device will reveal detailed information and a lock button. This is usually indicated by a lock icon or an "Internet Access" toggle.
The app's interface is intuitive: you see the device's icon, name, and current download speed. If you see a device called "Unknown" or from a strange manufacturer that's consuming data, simply tap it and select Block (Block).
What should I do if the app doesn't see the router?
Make sure your phone is connected to the router's Wi-Fi network. Remote management requires the router to be linked to a TP-Link cloud account and have an active internet connection. Check the cloud status in the web interface.
The app also allows you to create profiles for children, limiting internet access time for specific devices according to a schedule. This is a great alternative to a complete block if you simply want to limit your child's online gaming time.
Additional Wi-Fi security measures
Simply deleting a user isn't enough; preventing re-intrusion is crucial. Make sure your router has modern encryption enabled. In the security menu (Wireless Security) select the mode WPA2-PSK or, if all devices support it, WPA3-PSK.
⚠️ Warning: Never use the outdated WEP encryption protocol or "Open" mode (without a password). These standards can be cracked in seconds using automated scripts available to any beginner.
It is also recommended to disable the function WPS (Wi-Fi Protected Setup). Despite the convenience of push-button connection, this technology has known vulnerabilities that allow password recovery using brute-force attacks. This setting is usually found in the same wireless security menu.
Update your router firmware regularly. Manufacturers release updates that patch security holes. You can check for a new version in the section System Tools → Firmware Upgrade.
Remember that network security is a process, not a one-time action. Periodically reviewing your client list will help you stay on top of things.
Is it possible to block a user remotely if I'm not at home?
Yes, this is possible if your router supports TP-Link Cloud features and you've previously registered the device to your account. Using the Tether mobile app, you can manage access from anywhere with internet access.
What should I do if a blocked device appears online again?
Most likely, the user changed their device's MAC address, or you blocked it but didn't change the Wi-Fi password. In this case, you need to change the primary network password and disable WPS.
Does blocking a user affect my internet speed?
Yes, blocking an unnecessary device frees up the router's communication channel and processor resources, which positively impacts the speed and stability of the connection for other users.
How do I find my phone's MAC address for whitelisting?
On Android, you can find this in Settings → About the phone → Status or in Wi-Fi settings. On iOS: Settings → Main → About this device (Wi-Fi address).
Will rebooting the router clear the block?
No, MAC address filtering settings and the blacklist are saved in the device's memory. They will remain active even after the router is powered off or rebooted, unless you manually delete them.