It's often frustrating when your internet slows down and page loading speeds drop to critical levels. This can be caused not only by faulty equipment or issues with your provider, but also by simple traffic theft by neighbors. If you notice an unfamiliar device in your list of connected clients, you need to take immediate steps to protect your network.
There are several effective ways to restrict unwanted users from accessing your hotspot. The most reliable method MAC address filtering is a way to create a blacklist of devices. However, before resorting to drastic measures, it's important to ensure that the speed drop is caused by unauthorized actions and not technical issues.
In this article, we'll detail the action algorithms for various router models, explain how to identify the "intruder," and what interface settings need to be changed. It is important to understand, that incorrect configuration may result in you losing network access, so follow the instructions carefully.
How to identify an intruder on your network
Before blocking, you need to determine exactly who is using your connection. Modern routers have built-in monitoring tools that allow you to see a list of all active connections in real time. To access this information, you need to log in to the device's admin panel.
Enter your router's IP address (usually it's 192.168.0.1 or 192.168.1.1) and log in. Find the section that might be called Wireless Statistics, Client list, DHCP Client List or Attached devicesThis displays all the gadgets that receive an IP address from your router.
⚠️ Attention: Firmware interfaces are frequently updated. If you can't find the exact name of a menu, check the official instructions for your model manufacturer, as the location of the menu items may vary.
To identify a device, use the MAC address list. Typically, a unique identifier is listed on the device's body (in the "About Phone" or "Status" settings). By comparing this information with the router's list, you can easily identify someone else's equipment. Also, pay attention to device names—they often contain the brand or model name, for example, iPhone-User or Android-TV.
If you find a device that does not belong to you or your household, this is a clear sign of unauthorized access. MAC address is a unique identifier of the network interface, and it will be the key parameter for further blocking.
The fastest way: change your Wi-Fi password
The most radical and simple method for getting rid of these "parasites" is to completely change your wireless network security key. This will forcibly disconnect all devices, including your own, and require you to re-authorize with the new password.
To perform this procedure, go to the wireless settings section, often referred to as Wireless or Wi-FiFind the subsection Wireless Security or SecurityIn the field PSK Password (password) enter a new complex combination of characters.
After saving the settings, the router will restart the Wi-Fi module. All previously connected devices will lose their connection. The advantage of this method The advantage of this method is its simplicity and speed: you don't have to manually add the addresses of each offender to the blacklist.
☑️ Network security check
However, this approach has a significant drawback: if you haven't changed the password on all your devices or forgot to do so on your smart TV, you could temporarily lose internet access on them. Furthermore, if your neighbor is skilled at guessing passwords or uses special tools, they could regain access if the security remains weak.
MAC Address Blocking: Creating a Blacklist
A more flexible and professional tool is MAC address filtering. This feature allows you to block a specific device without affecting others. It works simply: you add the offending device's ID to a special block list, and the router ignores any connection requests from that device.
Find the filtering section in the settings menu. It may be called Wireless MAC Filtering, MAC address filtering or Access ControlYou need to activate this function and select the operating mode. Deny (Prohibit) or Blacklist.
Next, you need to add the MAC address of the intruder. In some router models, such as TP-Link or KeeneticThis can be done directly from the list of active clients by clicking the "Block" button next to the desired device. On older models, you'll have to enter the address manually.
⚠️ Attention: Be extremely careful when entering the MAC address. One incorrect digit will result in the blocking not working, or, worse, you'll block your own device.
After adding the address to the list, don't forget to click the button Save or ApplyThe effect is immediate: a device whose address is blacklisted will lose its connection and will be unable to reconnect, even if it knows the correct Wi-Fi password.
Instructions for TP-Link and D-Link routers
Popular brands have their own interfaces. Let's look at the steps for TP-Link and D-Link devices, which are commonly found in home networks. In newer interface versions (TP-Link has a green design), the steps may differ slightly from the standard ones.
For routers TP-Link (new interface): go to the menu Additional settings (Advanced) → Wireless mode (Wireless) → MAC address filter (MAC Filtering). Enable the feature and select the "Block listed devices" rule. Add the intruder's MAC address to the table and save.
For devices D-Link: select from the menu Advanced settings → Wi-Fi → MAC filterCheck the "Enable MAC Filter" box and select "Deny" mode. In the rules table, click "Add," enter the address, and apply the changes.
What should I do if the router interface is in English?
If you only see English menu names, look for sections that say Wireless, Security, Filter, or Access Control.
It is recommended to reboot the router through the menu. System Tools → Reboot, so that the new rules can come into full force.
Setting up a lock on ASUS and Zyxel
ASUS and Zyxel (Keenetic) routers are renowned for their well-designed interfaces, which make access control extremely convenient. They often utilize the concept of "Whitelists" and "Blacklists," allowing for flexible network management.
In routers ASUS go to the section Wireless network (Wireless) → tab MAC address filter (MAC Filter). Select the "Reject" mode. In the "MAC Filter List" field, enter the intruder's address and click Add, then Apply.
Devices Zyxel Keenetic offer an even more convenient mechanism. In the menu My Networks and Wi-Fi → Home network You'll see a list of all connected clients. Click on the device name (or the gear icon), and in the window that opens, find the "Internet Access" or "Always Block" toggle. Turn it off.
Key advantage The advantage of such systems is the ability to block devices without manually entering long hexadecimal codes. You simply select a device from the list of active ones and block its access.
Comparison of Wi-Fi network security methods
The choice of security method depends on your specific situation: whether you need to temporarily restrict access to one person or want to completely overhaul your network security. Below is a comparison table of the main methods.
| Method | Complexity | Efficiency | Impact on your devices |
|---|---|---|---|
| Change password | Low | High (drops everyone) | Requires reconnection of all gadgets |
| MAC filtering | Average | High (spot) | Does not affect connected devices |
| Hiding the SSID | High | Low (protection against accidental) | Makes it difficult to connect new devices |
| Disabling WPS | Low | Average (additional measure) | Improves overall security |
As can be seen from the table, MAC filtering is the most convenient way to address a specific issue without inconvenience to the network owner. However, a combination of methods yields the best results.
Additional security measures and FAQ
Once you've blocked the intruder, it's recommended to strengthen your overall network security. First, disable the WPS (Wi-Fi Protected Setup). This technology, which allows you to connect with the push of a button, has known vulnerabilities that attackers exploit to brute-force your PIN.
Also, make sure you're using a modern encryption standard. In your wireless network settings, select the mode WPA2-PSK or, if the equipment allows, WPA3. Obsolete protocol WEP does not provide any real protection and can be hacked in a few minutes.
Check your router's firmware regularly. Manufacturers release updates that patch security holes. You can update the firmware in the section System Tools → Firmware Upgrade.
Can a blocked user bypass the block?
Yes, if the user is tech-savvy, they could try to clone the MAC address of your authorized device (e.g., your phone) onto their laptop. This is why it's important to use complex passwords and WPA2/WPA3 encryption, rather than relying solely on address filtering.
What should I do if I blocked myself?
If you accidentally blacklisted your MAC address, you'll need to connect your computer to the router via a network cable (LAN). Using a wired connection, access the settings and remove your address from the block list. If you don't have a cable port, you'll need to perform a full reset of the router using the button on the router.
Does my ISP see that I'm blocking someone?
No, the ISP provides the connection but doesn't control internal routing within your local network. Blocking occurs at the hardware level, and the ISP won't be aware of it.
Following these simple rules will allow you to enjoy high-speed internet without worrying about someone using your traffic for their own needs. Remember that network security is a process that requires periodic monitoring and updating of settings.