Slow internet speeds and constant lag when gaming or watching videos often indicate that your network is being used by unauthorized users. Modern routers not only allow you to see a list of connected devices, but also hard-code limit the number of Wi-Fi users, leaving access only for your devices. This is a basic security measure that every home router owner should know.
In this article, we'll discuss how to find hidden subscribers, what tools are needed, and how to configure the maximum number of clients in the router interface. You'll learn how to distinguish legitimate devices from rogue ones and apply effective channel security methods.
Before moving on to settings, it's important to understand that access control isn't just about setting a password. It's a complex set of measures, including MAC address filtering, guest network configuration, and active session monitoring. Administrative panel Your router has much more functionality than it seems at first glance.
Current Situation Analysis: Who is in Your Network?
The first step should always be diagnostics. Before setting limits, you need to understand how many devices are currently consuming data and which of them actually belong to you. Many users are surprised to find familiar smartphones, tablets, and TVs on the list. Smart TV, gaming consoles and even smart plugs.
The easiest way to find out the number of connected users is to look at the indicators on the router body, if they flash when active, or use the manufacturer's mobile app. However, the most accurate information is provided by the device's web address. To do this, enter the gateway IP address in the browser's address bar, usually 192.168.0.1 or 192.168.1.1.
Once logged in, look for a section that may be called "Status," "Network Map," "Clients," or "DHCP Server List." This displays a table of active connections. Carefully examine the list: if you see a device named Unknown or a MAC address that does not match your equipment, this is a cause for concern.
⚠️ Attention: Some devices may appear under strange names or without any names at all. Before blocking an "unknown" gadget, make sure it's not your new smart vacuum or light bulb that automatically connected to the network.
Enter your router settings and find the options you need.
To manage the number of users, you will need access to the router settings. Interfaces vary from manufacturer to manufacturer (TP-Link, ASUS, Keenetic, Xiaomi) are different, but the operating logic is the same. You need to log in using your username and password, which are often found on a sticker on the bottom of the case, unless you've changed them previously.
Look for sections with names like "Wireless," "Wireless Mode," "Wi-Fi Network," or "Guest Network." These are where access restriction settings are located. Advanced models may have a separate section called "MAC Filtering" or "Access Control."
If you can't find a specific item, use the settings search (if available) or refer to the manual. It's important not to confuse WAN (Internet) settings with LAN/WLAN (Local Area Network) settings. We're specifically interested in the wireless local area network.
Methods for limiting the number of users
There are several ways to control who and how many can connect to your Wi-Fi. The method you choose depends on your goals: whether you just want to share a signal with friends for an evening or permanently block access to strangers.
The most restrictive method is to set a maximum number of clients. Some routers allow you to set a number, for example, "5 devices." Once the fifth device connects, the sixth will no longer be able to log in, even with the correct password. This is useful in offices or public spaces with metered traffic.
A more flexible approach is to use White List (whitelist). In this mode, the router allows connections only to devices whose MAC addresses are manually added to the list. All others, even with the password, will be rejected. This is the most reliable way to protect your home network.
| Limit method | Difficulty of setup | Security level | Guest convenience |
|---|---|---|---|
| Change password | Low | Average | Low (must be communicated to everyone) |
| MAC Filtering (White List) | High | Maximum | Low (everyone needs to be included) |
| Guest network | Average | High | High (separate password) |
| Quantity limit (Max Clients) | Average | Average | Average |
Setting up MAC address filtering
MAC address filtering is the "gold standard" of home network security. A MAC address is a unique identifier for a network card, hard-coded by the manufacturer. It's difficult to change, so it's difficult for a casual passerby to spoof it.
To implement this method, you first need to collect the MAC addresses of all your devices. On a computer, this can be done via the command line by entering the command ipconfig /all (for Windows) or ifconfig (for Linux/Mac). On smartphones, the address is usually listed in the "About phone" section or in the Wi-Fi connection properties.
Then, in the router settings, find the "MAC Address Filtering" section. Select "Allow" or "Whitelist." Add the addresses of your devices. Once enabled, the router will ignore any connection requests from devices not on this list.
☑️ Configuring a MAC address whitelist
⚠️ Attention: Be extremely careful when setting up the White List. If you add only one device (for example, a PC) to the list and then enable filtering, your smartphone will immediately lose its Wi-Fi connection because its address isn't yet on the white list.
Using a guest network for access control
If you need to let your friends or colleagues access the Internet, but you don’t want to give them access to your main resources (printers, NAS, files on your PC), the function is ideal Guest network (Guest Network) This is a virtual Wi-Fi network with a separate name and password.
Guest network settings often allow you to set individual limits: speed, connection time, and, most importantly, the number of connected users. You can allow a maximum of three devices to connect. If a fourth person attempts to log in, the router simply won't assign them an IP address.
This also solves the problem of clogging up the master list of trusted devices. Guests can connect, use the internet, and disconnect without accidentally (or intentionally) accessing your personal information. After the party, the guest network can be simply disabled with a single click.
What are the dangers of an open guest network?
If you leave your guest network without a password, anyone can connect to it. While access to your files will be blocked, such a user could use your IP address for illegal activities, and formally, you, as the channel owner, will be held accountable.
What to do if someone else is already connected?
If you discover that a "neighbor" or hacker has already connected to your network, you need to act quickly. First, change your Wi-Fi password. This will forcefully disconnect all devices, and you'll have to reconnect them again.
The second step is to check if other router settings have been changed. An attacker could have attempted to change DNS servers or redirect traffic. It's recommended to perform a full reset of the router and reconfigure it with new, complex passwords.
For future connections please use WPA3 encryption Or at least WPA2-AES. Older encryption protocols (WEP, WPA-TKIP) can be cracked in minutes using free software available online. Don't make things easier for attackers by using outdated security standards.
Frequently Asked Questions (FAQ)
Can a router limit the number of users itself?
Yes, most modern routers have a Max Clients feature in the wireless network settings. However, by default, this limit is often set to the technical maximum (for example, 32 or 64 devices), so it must be reduced manually.
Does the number of connected devices affect internet speed?
Absolutely. The Wi-Fi channel is shared among all active users. If one person is downloading files or watching 4K video, everyone else will experience bandwidth starvation, resulting in ping and buffering.
How to find out the MAC address of someone else's device?
You won't be able to find a device's MAC address unless it's connected to your network. However, if it's already connected, its MAC address will be displayed in the DHCP Client List in the router's admin panel. This address can be used to determine the device's manufacturer (the first six characters).
What is better: hiding the SSID or setting a complex password?
A complex password (WPA2/WPA3) is much more effective. Hiding the network name (SSID) doesn't provide real protection, as professional scanners easily detect hidden networks, and it will create unnecessary inconvenience for your personal devices when connecting.
Is it possible to limit the speed for a specific user?
Yes, this feature is called QoS (Quality of Service) or simply "Bandwidth Control." In your router settings, you can set the maximum download and upload speed for each specific IP or MAC address to prevent one user from hogging the entire bandwidth.