How to reduce Wi-Fi bloat: limit speed, traffic, and network access

Have you noticed your Wi-Fi has slowed down, with your data flowing uncontrollably? Perhaps someone has connected to your network without permission, or your home devices are consuming too much data in the background. Reducing Wi-Fi distribution — it's not only a way to save traffic, but also protection against unauthorized access, channel congestion, and even cyberattacks. In this article, we'll look at legitimate And technical Methods for limiting speed, blocking devices, and optimizing router operation.

The problem of over-sharing Wi-Fi is a common problem for both home users and small offices. For example, neighbors can "accidentally" connect to your network if the password is weak, and children can download heavy games 24/7, slowing down other devices. We'll cover solutions for various scenarios: from basic router settings to advanced tools like QoS (Quality of Service) and MAC filteringImportant: all methods work on modern routers (TP-Link Archer C6, ASUS RT-AX55, Keenetic Giga etc.), but the interface may differ slightly.

If you're a landlord and want to limit your tenants' internet access, or simply want to prevent guest Wi-Fi from hogging all your data, this guide is for you. We'll start with the simplest methods and gradually move on to more complex ones.

1. Changing your Wi-Fi password: the first step to security

The most common cause of uncontrolled Wi-Fi distribution is password leakIf you have never changed the default password for your router (for example, admin/admin (or the combination from the sticker on your device), there's a high risk that someone else is connected to your network. Even if you're sure you're the only one with the password, it could have been cracked or stolen through phishing.

How to change your Wi-Fi password:

• 🔧 Open your router's control panel. This is usually the address 192.168.0.1 or 192.168.1.1 (check the device sticker).
• 🔑 Enter your login and password (by default it is often admin/admin or admin/empty).
• 📡 Go to the section Wireless network → Security Settings.
• 🔐 In the field Wi-Fi Password Come up with a new key. Use at least 12 characters, combining letters, numbers and special characters (for example, WiFi_2026!Kot&Pes).
• 💾 Save the settings and reconnect all devices.

Important: After changing the password, all devices will be disconnected from the network. Please notify your family or colleagues in advance to avoid any dissatisfaction.

⚠️ Warning: If you use guest network (for example, for friends or tenants), its password also needs to be updated separately. In some routers (Xiaomi Mi Router 4A, Tenda AC10) The guest network does not have a password by default - check this in the settings!

2. Limiting Internet speed for individual devices

If you don't need to block access completely, but just reduce speed For certain gadgets (for example, Smart TV or a children's tablet), use the function Bandwidth Control (Bandwidth Control) or QoS (Quality of Service). This will allow you to prioritize traffic (for example, for work) and limit non-essential traffic (social media, streaming).

Instructions for routers TP-Link:

1. Go to the control panel (192.168.0.1).
2. Go to Advanced settings → QoS.
3. Turn on QoS and select the mode Bandwidth Limit.
4. Please specify maximum download/upload speed for the device (for example, 5 Mbps for Smart TV).
5. Add device by MAC address or IP (how to find out MAC – see below).
6. Save the settings.

For routers ASUS the path will be different: Administration → QoS → Custom RulesHere you can set restrictions by time (for example, at night) or by traffic type (for example, blocking torrents).

Find out the actual speed of your tariff (check on speedtest.net)

Determine which devices need to be restricted (write down their IP or MAC)

Check if your router supports QoS (budget models may not)

-->

If your router does not support QoS, you can use an alternative method - changing MTU (Maximum Transmission Unit). Reducing this parameter to 1400 or 1300 will artificially reduce the speed for all devices, but this is an imprecise solution and may cause problems with some services.

TP-Link

ASUS

Keenetic

Xiaomi

Zyxel

D-Link

Another

-->

3. Blocking devices by MAC address

MAC address — is a unique identifier of a network device. If you want ban completely To block Wi-Fi access for certain devices (for example, an old smartphone or a smart speaker), you can blacklist their MAC addresses. This method is more secure than IP blocking, as the MAC address doesn't change when you reset your network settings.

How to find out the MAC address of a device:

• 📱 On Android: Settings → About phone → General information → Wi-Fi MAC address.
• 🍎 On iPhone: Settings → Wi-Fi → (i) next to the network → Wi-Fi Address.
• 💻 On Windows: run the command in CMD:

  ipconfig /all | findstr "Physical Address"

• 🖥️ On MacOS: System Preferences → Network → Advanced → Ethernet/Wi-Fi.

How to block a device by MAC address on a router TP-Link:

1. Go to the control panel.
2. Go to Wireless mode → MAC Filtering.
3. Select mode Deny.
4. Add the MAC addresses of the devices you want to block (eg. 00:1A:2B:3C:4D:5E).
5. Save the settings.

⚠️ Please note: MAC addresses can be spoofed, so this method is not 100% secure against advanced users. For added security, combine it with other methods, such as changing your password.

What to do if the MAC filter is not working?

If after adding the MAC address to the blacklist the device still connects:

1. Check that the filter is enabled (sometimes a router reboot is required).

2. Make sure you entered the correct MAC (no spaces or dashes, only colons or no separators).

3. On some routers (D-Link DIR-615) the filter only works in the mode Allow — then you only need to add authorized devices to the list, and all the others will be blocked automatically.

4. Setting up parental controls and timeouts

If you want to limit Wi-Fi access by time (for example, to prevent children from surfing the net at night), use the function parental control (Parental Control). It allows:

• 🕒 Set an access schedule (for example, Wi-Fi is disabled from 8:00 PM to 8:00 AM).
• 📵 Block specific websites or types of content (social networks, games).
• 📊 View statistics of visited resources.

Example setup for Keenetic:

1. Log into your router's web interface.
2. Go to Home Network → Parental Control.
3. Add a device by IP or MAC.
4. Set time limits (eg. Mon-Fri: 10:00 PM–7:00 AM).
5. Apply settings.

On routers ASUS with firmware Asuswrt there is a more flexible system AiProtection, which allows you to block access to website categories (for example, "Adult Content" or "Gambling"). To do this:

1. Go to AiProtection → Parental control.
2. Select a device from the list.
3. Activate category filtering.
4. Set up a schedule.

If your router does not support parental controls, you can use third-party solutions, such as OpenDNS or Cloudflare FamilyThese services allow you to block unwanted websites at the DNS level, but require manual configuration on each device.

5. Creating a guest network with restrictions

If you frequently share your Wi-Fi with guests, tenants, or neighbors, guest network — the best solution. It's isolated from the main network, which improves security, and allows for flexible restrictions. For example, you can:

• 🔒 Set a separate password (and change it more often).
• ⏳ Limit speed or operating time.
• 🚫 Block access to local resources (printers, NAS).

How to set up a guest network on TP-Link:

1. Go to Wireless mode → Guest Network.
2. Enable the guest network and give it a name (for example, Guest_WiFi).
3. Set a password (preferably different from the main one).
4. In the section Additional settings limit the speed (for example, to 10 Mbps).
5. Activate the option Isolate guests (AP Isolation)so that devices on the guest network cannot see each other.

On routers Keenetic The guest network is configured in the section Home network → SegmentsHere you can create a separate segment with its own access rules and even link it to a specific VLAN (for advanced users).

⚠️ Please note: In a guest network, some functions (e.g. UPnP or Port Forwarding) may be disabled by default. If guests require specific settings (for example, for online gaming), the router will need to be reconfigured.

6. Disabling WPS and password protection

WPS (Wi-Fi Protected Setup) WPS is a convenient feature for quickly connecting devices using a PIN or a push-button, but it's extremely vulnerable. Attackers can crack your PIN in a matter of hours, even if you have a strong Wi-Fi password. Disabling WPS is a mandatory step to secure your network.

How to disable WPS:

• On TP-Link: Wireless Mode → WPS Settings → Disable WPS.
• On ASUS: Wireless Network → WPS → Disable.
• On Keenetic: Home Network → Access Point → Security Settings → WPS: Disabled.

Additional protective measures:

• 🔄 Change your Wi-Fi password regularly (every 3-6 months).
• 🛡️ Use encryption WPA3 (if supported) or WPA2-AES (Not TKIP!).
• 📡 Hide your SSID (network name) if it doesn't cause any inconvenience. This won't protect you from experienced hackers, but it will reduce the number of accidental connections.
• 🔍 Turn on Connection log in the router settings to track new devices.

If you suspect that someone else has already connected to your network, check the list of devices in the section DHCP clients or Connected devicesUnknown MAC addresses can be blocked (see section 3).

7. Advanced Methods: VLANs and Firmware

If the standard router functions are not enough, you can use advanced tools:

• 🌐 VLAN (Virtual LAN): allows you to divide the network into virtual segments with different permissions. For example, create a separate VLAN for IoT devices (smart bulbs, cameras) with limited internet access.
• 🔧 Firmware from third-party developers (For example, DD-WRT, OpenWRT). They support flexible QoS settings, firewall, and even traffic limits based on area (for example, 1 GB per day per device).
• 📊 Scripts on the router: by using cron And iptables You can automatically turn off Wi-Fi at a certain time or block devices on a schedule.

Example of VLAN configuration on Keenetic:

1. Go to System → Networks.
2. Create a new VLAN (eg. VLAN 10 for IoT).
3. Assign it a separate IP range (eg. 192.168.10.0/24).
4. In the settings Firewall Restrict access from VLAN 10 to the main network.

For installation DD-WRT or OpenWRT Technical skills required. These firmwares support:

• Flexible traffic limitation by devices (Bandwidth Limiter).
• Detailed network usage statistics.
• Ad blocking at the router level (AdBlock).

⚠️ Warning: Incorrect router firmware may render your router inoperable (bricked). Before installation, check the model compatibility on the official website. DD-WRT or OpenWRT.

FAQ: Frequently asked questions about Wi-Fi sharing restrictions

Is it possible to limit Wi-Fi speed without access to the router?

No, all speed limiting and device blocking settings are configured at the router level. If you don't have access to the router's control panel (for example, you're a renter), you can:

• Ask your network administrator to set up restrictions.
• Use software solutions on your device (for example, NetBalancer for Windows), but this will not affect other gadgets.

How do I know who is connected to my Wi-Fi?

The list of connected devices can be viewed:

• In the router control panel (section DHCP clients, Connected devices or Wireless Clients).
• Through mobile applications from the router manufacturer (for example, TP-Link Tether, ASUS Router).
• Using third-party utilities, for example, Fing (available for Android and iOS).

Look out for unfamiliar devices with suspicious names (eg. android_123456 or Unknown Device).

What should I do if my neighbors are stealing my Wi-Fi?

If you find foreign devices on your network:

1. Change your Wi-Fi password immediately (see section 1).
2. Turn on MAC filtering and add only your devices to the list.
3. Turn it off WPS (see section 6).
4. Reduce the signal transmission power (find the parameter in the router settings) Transmit Power and set the value 50% or Low).
5. If the problem persists, consider changing the Wi-Fi channel or frequency. 5 GHz (it's harder to intercept).

How to limit traffic for a Smart TV or set-top box?

Smart TV and set-top boxes (for example, Xiaomi Mi Box or Apple TV) often consume a lot of data due to background updates or 4K streaming. To limit them:

1. Find the MAC address of the device (usually found in the network settings on the TV itself).
2. Configure the settings in the router panel QoS or Bandwidth Control for this MAC (see section 2).
3. Limit your speed to 10–20 Mbps - this is enough for Full HD, but not for 4K.
4. Disable automatic updates in your TV settings (if possible).

For Samsung Smart TV You can also disable background ad loading: Settings → Support → Terms of Service → Disable "Personalized Ads".

Is it possible to limit Wi-Fi time without parental controls?

Yes, there are several alternative ways:

• Router operating schedule: some models (TP-Link, ASUS) allow you to turn off Wi-Fi based on time (for example, from 00:00 to 6:00). Look for the option Wireless Schedule.
• Scripts on the router: if you have firmware DD-WRT or OpenWRT, you can write a script that will turn off Wi-Fi at a specified time.
• Smart sockets: connect the router via a smart plug (for example, Xiaomi Mi Smart Plug) and set up its schedule.

The downside of these methods is that disabling Wi-Fi affects all devices, not just specific ones.