How to remove a user from a Wi-Fi router: a complete guide with images and commands

Have you noticed that your Wi-Fi has become slower, even though your plan hasn't changed? Or have you seen unknown gadgets with strange names like Xiaomi_1234 or android-5f8a2dMost likely, someone else has connected to your network—neighbors, guests who forgot to disconnect, or even hackers exploiting vulnerabilities in old firmware. Removing unnecessary users from your router will not only restore your internet speed but also protect your data from leaks.

In this article, we will look at all possible ways to disconnect devices from Wi-Fi: from the standard web interface to advanced commands via Telnet/SSHYou'll learn how to block a specific device by MAC address, limit access by time, and what to do if your router won't let you remove a device due to firmware errors. These instructions are suitable for popular brands: TP-Link, ASUS, Keenetic, Zyxel, MikroTik and others.

1. How to check who is connected to your Wi-Fi

Before blocking users, you need to make sure there are actually strangers on the network. Many routers display a list of connected devices directly on the main page of the web interface. Here's how to access it:

1. Find out your router's IP address. Usually it is 192.168.0.1 or 192.168.1.1You can find it on the sticker on the device body or through the Windows command line:

   ipconfig /all

   Look for the line Main gateway.

2. Enter the address in your browser. Use Google Chrome, Mozilla Firefox or Microsoft Edge - some routers are not displayed correctly in Safari.
3. Log in. The default login and password are usually admin/admin or admin/passwordIf it doesn't work, reset the settings using the button. Reset on the back panel.

In the section DHCP, Local area network or Wireless (Names vary by model) You'll see a table with connected devices. Please note:

• 🔹 Device name (Hostname) — often produces a model (for example, iPhone-12-Pro or Samsung-Galaxy-S21).
• 🔹 MAC address — a unique identifier in the format 00:1A:2B:3C:4D:5EYou can use it to block your device permanently.
• 🔹 IP address - if it is static (does not change), it can also be used for blocking.
• 🔹 Connection time — If the device is online 24/7, this is a cause for concern.

If you see any unknown gadgets on the list, don't rush to block them. These could be:

• 📱 Smart devices - light bulbs Xiaomi, columns Amazon Echo, or a robot vacuum cleaner that you haven't used for a long time.
• 🖥️ Guest connections — friends could have connected a year ago and forgotten to disconnect.
• 🔄 Duplicates - some devices (for example, Apple) may appear twice due to the function Private Wi-Fi Address.

2. Method 1: Deleting a user via the router's web interface

The easiest method is to block the device directly in the admin panel. The instructions are universal for most routers, but the menus may differ slightly.

For routers TP-Link:

1. Go to Basic → Wireless (or Wireless mode).
2. Select a tab Wireless Client List (Client list).
3. Find the device you want to remove and click Block (Block).
4. Save the settings with the button Save.

For routers ASUS:

1. Open Network map in the main menu.
2. In the section Clients Find the device you need.
3. Right click on it and select Block the network.
4. Confirm the action.

For routers Keenetic:

1. Go to Home Network → Devices.
2. Find the device in the list and click on it.
3. In the window that opens, select Block Internet access.
4. Set the blocking time (it can be permanent).

If the buttons Block No, try:

• 🔧 Turn off the device manually - some routers allow you to press Disconnect (Disable), but this is a temporary measure.
• 🔄 Reboot the router - After rebooting, all devices will lose connection but will be able to connect again.
• 🔒 Change your Wi-Fi password - a radical method, but will force all users to enter a new key.

Make sure the device isn't yours|Write down the MAC address for future reference|Check if it's being used for a smart home|Save router settings-->

3. Method 2: Blocking by MAC address (permanent solution)

If you want to permanently block a device from connecting to your network, use MAC address filteringThis method works even after rebooting the router.

Instructions for most routers:

1. Find the MAC address of the device you want to block (see section 1).
2. Go to Settings Wireless → Wireless MAC Filtering (or Wireless Mode → MAC Filter).
3. Turn on filtering (check the box) Enable).
4. Select mode Deny (Block) - This will block only the specified addresses. Mode Allow Allows connections only to selected devices (useful for maximum security).
5. Add the MAC address to the list and save the settings.

Example for Zyxel Keenetic:

Internet → Home Network → Devices → [Select device] → Block

For MikroTik (through WinBox):

IP → Firewall → Filter Rules → [Add rule with action=drop and src-mac-address=XX:XX:XX:XX:XX:XX]

What should I do if my device's MAC address changes?

Some modern gadgets (especially Apple And Android 10+) use the function MAC address randomization For privacy. In this case, MAC blocking won't help. Solutions:

1. Disable randomization in the Wi-Fi settings on your device (if this is your gadget).

2. Use IP blocking (see section 4).

3. Set up guest network with a separate password for untrusted devices.

⚠️ Attention: MAC address filtering isn't 100% secure. An experienced user can spoof their device's MAC address and bypass the block. For added security, combine this method with changing your Wi-Fi password and disabling WPS.

4. Method 3: IP address restriction (for advanced users)

If MAC blocking doesn't work (for example, due to randomization), you can block access by IP addressThis method requires an understanding of network settings.

Steps for routers based on DD-WRT or OpenWRT:

1. Find out the IP address of the device in the client list.
2. Go to Administration → Commands (or System Tools → Commands).
3. Enter the command:

   iptables -I FORWARD -s 192.168.1.100 -j DROP

   Replace 192.168.1.100 to the desired IP.

4. Save the settings and reboot the router.

For MikroTik:

/ip firewall filter add chain=forward src-address=192.168.1.100 action=drop

For standard routers (eg. TP-Link):

1. Go to Advanced → Security → IP Filtering.
2. Add a rule with an action Deny and specify the IP address.

⚠️ Attention: If the device receives an IP address DHCP (dynamically), its address may change after a reboot. To fix the IP, bind it to the MAC address in the settings. DHCP Reservation (DHCP Reservation).

5. Method 4: Using a mobile app

Many router manufacturers offer official apps for managing the network from a smartphone. This is convenient if you need to quickly block the device without accessing the web interface.

Advantages of mobile applications:

• 📱 Notifications - some applications (for example, Keenetic) notify about new connections.
• 🔄 Quick control — you can lock your device in 2 clicks without entering passwords.
• 📊 Traffic statistics — you can see who uses the internet the most.

Flaws:

• 🚫 Limited functions — applications often lack advanced settings like iptables.
• 🔒 Requires registration - some manufacturers (for example, TP-Link) are forced to create an account.

6. Method 5: Advanced methods (Telnet/SSH and scripts)

If the router's web interface is limited and the mobile app is not suitable, you can use command line through Telnet or SSHThis method is suitable for MikroTik, Ubiquiti, routers with firmware DD-WRT/OpenWRT and some models ASUS.

Step 1: Enable Telnet/SSH access

To do this:

1. In the web interface, find Administration → System (or Management → System Tools).
2. Turn on Enable Telnet or Enable SSH.
3. Save the settings.

Step 2: Connect to the router

Use the program PuTTY (Windows) or Terminal (macOS/Linux). Enter:

ssh admin@192.168.1.1

or

telnet 192.168.1.1

Enter your login and password (the same as for the web interface).

Step 3: Lock your device

Commands depend on the firmware:

For DD-WRT/OpenWRT:

iptables -A FORWARD -m mac --mac-source 00:1A:2B:3C:4D:5E -j DROP
iptables -A FORWARD -s 192.168.1.100 -j DROP

For MikroTik:

/ip firewall filter add chain=forward src-mac-address=00:1A:2B:3C:4D:5E action=drop
/ip firewall filter add chain=forward src-address=192.168.1.100 action=drop

For ASUS (Merlin):

nvram set wl_maclist="00:1A:2B:3C:4D:5E"
nvram set wl_macmode="deny"
nvram commit
service restart_wireless

To make the rules persist after a reboot, add them to Startup Scripts (in the web interface or via command nvram).

⚠️ Attention: Incorrect commands in iptables may completely disable the internet on all devices. Before experimenting, back up your router settings in the Administration → Backup.

7. What to do if the router doesn't allow you to delete a user

Sometimes the blocking does not work due to:

• 🔄 Outdated firmware — Older versions of the software may have bugs with MAC filtering.
• 🔧 Incorrect access rights - if you are logged in as a guest and not an administrator.
• 📡 External attacks — Some viruses change router settings.

Solutions:

1. Update the firmware:
   1. Download the latest version from the manufacturer's website.
   2. Download it via Administration → Firmware Upgrade.
   3. Do not turn off the router during the update!
2. Reset settings:
   1. Click the button Reset on the back panel (hold for 10-15 seconds).
   2. Reconfigure your router from scratch.
3. Check for viruses:
   1. Connect the router to the PC via cable.
   2. Scan your network with an antivirus (for example, Kaspersky Internet Security).

If all else fails, your router may be compromised. In this case:

• 🛡️ Buy a new router - some vulnerabilities (for example, VPNFilter) cannot be eliminated.
• 🔒 Use a separate router for the guest network - this isolates the main network from attacks.

How do you know if your router is infected with a virus?

Signs of infection:

- The router reboots spontaneously.

- Unknown rules appear in the settings Port Forwarding or DMZ.

- Internet speed drops even when all devices are disconnected.

- In the logs (System Log) there are suspicious records of connections to unknown IPs.

If you notice these symptoms, immediately disconnect your router from the Internet and reset it.

8. How to prevent unwanted connections in the future

To avoid encountering rogue devices on your network, follow these guidelines:

• 🔐 Use a strong Wi-Fi password:
  • Minimum 12 characters with numbers, letters and special characters.
  • Do not use personal information (dates of birth, names).
  • Change your password every 3-6 months.
• 🔄 Disable WPS:
  • Function WPS vulnerable to brute force attacks.
  • Find it in your router settings WPS and put it out Disabled.
• 📡 Hide your SSID:
  • In Wi-Fi settings, turn it off. Broadcast SSID.
  • Now the network will not be visible in the list of available ones, but you can connect if you know its name.
• 🛡️ Set up a guest network:
  • Create a separate network for guests with limited access to local resources.
  • Set a speed limit for the guest network.
• 🔍 Enable logging:
  • Enable logging in your router settings (System Log).
  • Check them periodically for suspicious activity.

Important: If your router supports the protocol WPA3, be sure to turn it on instead WPA2This will make it much more difficult for hackers, even if they learn the password.

For maximum security, use a combination of methods:

1. MAC address filtering + complex password.
2. Guest network for untrusted devices.
3. Regularly check the list of connected gadgets.

FAQ: Frequently asked questions about removing users from Wi-Fi

Can I delete a device without knowing the router password?

No. Accessing the router settings always requires an administrator password. If you've forgotten it, the only way to reset the router to factory settings is by pressing the reset button. Reset (usually it is recessed into the case and requires a paperclip). After reset, the password will become the default (admin or empty), but all network settings will have to be configured again.

Why does a blocked device appear online again?

Possible reasons:

1. You blocked him by IP address, which changed after rebooting the router. Solution: Use blocking by MAC address or fix the IP in DHCP Reservation.
2. Device changes the MAC address (privacy function in iOS/Android). Solution: Block by IP or disable randomization on the device.
3. Router settings are reset Due to unstable power supply or firmware errors. Solution: Update the firmware or replace the power supply.

How do I remove a user from Wi-Fi on a router from a provider (e.g., Rostelecom, Beeline)?

Routers from ISPs often have limited functionality. Try this:

1. Go to the web interface at 192.168.0.1 or 192.168.1.1 (login/password is usually on a sticker).
2. Find a section Wi-Fi or Connected devices.
3. If there is no lock button, change the Wi-Fi password - this will disconnect all users.

If nothing helps, call your provider's support and ask them to disable the function. WPS or enable MAC address filtering.

Is it possible to find out which device is connected by its MAC address?

Yes. The first 6 characters of the MAC address (e.g. 00:1A:2B) indicate the manufacturer. Check them using services like:

• macvendors.com (enter full or partial MAC).
• aruljohn.com/mac.pl (producer database).

Examples:

• 00:1A:79 — Apple.
• 00:0A:F5 — Samsung.
• B8:27:EB — Raspberry Pi.

If the MAC address starts with 02:00:00, 06:00:00 or AA:00:00, it can be a virtual device or a VPN tunnel.

How to block a device permanently, even after resetting the router?

No method guarantees permanent blocking, as resetting resets all settings. However, you can:

1. Write down MAC addresses unwanted devices and block them after each reset.
2. Use auto-tuning script (for advanced routers like MikroTik), which will apply the rules when loading.
3. Buy a router with support blacklist at the firmware level (for example, ASUS RT-AX88U With Merlin).

The most reliable solution is physical isolation of the network: Turn off Wi-Fi when you're not using it, or use a separate router for trusted devices.