Who connected to your Wi-Fi without permission? Learn how to block strangers.

Have you noticed your internet has slowed down, or unknown devices have appeared in your router's list of connected devices? Someone is most likely using your Wi-Fi without permission. This not only steals your bandwidth, but also creates security risks: your network could be used to spread viruses, download illegal content, or hack accounts. In this article, we'll discuss how. find and block unauthorized users on routers from different manufacturers - from budget ones TP-Link to bonuses ASUS.

Blocking methods depend on the router model and its firmware, but the general algorithm is the same: first, identify the "outsiders," then restrict their access. It's important to understand that some methods (for example, filtering by MAC address) are easily bypassed by experienced users, so for reliable protection, you'll need to combine several approaches. If you've never changed your default Wi-Fi password, start there—80% of unauthorized connections are caused by weak security.

1. How to check who is connected to your Wi-Fi

Before blocking someone, you need to make sure there really are strangers on your network. Most modern routers display a list of connected devices in the web interface. Here's how to access it:

1. Find out your router's IP address. Usually it is 192.168.0.1 or 192.168.1.1 (indicated on the sticker on the device body).
2. Enter the address in the browser address bar and log in (default logins/passwords are also on the sticker, for example admin/admin).
3. Find the section with connected devices. Depending on the firmware version, it may be called:
   • 📡 TP-Link: Wireless → Wireless Statistics or DHCP → DHCP Clients List
   • 🖥️ ASUS: Network map or Local Network → Client List
   • 🌐 Keenetic: Devices (in the main menu)
   • 🔄 Zyxel: Network → Local Network → DHCP Client List

In the list you will see IP addresses, MAC addresses (unique device identifiers) and hostnames (if assigned). Compare them with your devices. Unknown devices can be identified by the first three pairs of characters. MAC addresses — they indicate the manufacturer. For example:

If the list contains devices with unknown MAC addresses or names (for example, android-123456), they should be blocked. But first, make sure they aren't your household's gadgets—some devices (such as smartwatches or speakers) may appear under unintelligible names.

2. Method 1: Blocking by MAC address (filtering)

Filter by MAC address — the most common blocking method. It works like this: you create a "whitelist" of allowed devices, and the router allows only those devices onto the network. All others are automatically disabled. The downside: MAC address It can be counterfeited, so it does not provide 100% protection, but it will protect you from random "neighbors".

Instructions for popular routers:

• 🔧 TP-Link:
  1. Go to Wireless → Wireless MAC Filtering.
  2. Select mode Allow (allow only specified MAC addresses).
  3. Add MAC addresses your devices (can be copied from the list of connected clients).
  4. Save the settings and reboot the router.

Local Network → Routing → MAC Address Filter

Important: Once filtering is enabled, all devices not included in the list will lose network access. Therefore, first add MAC addresses all your gadgets (smartphones, laptops, televisions, printers, etc.).

Collect MAC addresses of all your devices|Check the correctness of the entered addresses|Save current router settings (export configuration)|Reboot the router after applying the filter-->

⚠️ Attention: Some devices (such as smart speakers or IoT gadgets) may use random MAC addresses to protect privacy. In this case, filtering won't work—you'll have to use other blocking methods.

3. Method 2: Change your Wi-Fi password (the most reliable method)

If strangers have joined your network, they've likely connected because they've learned your password. This could happen for several reasons:

• 🔑 You used a simple password (for example, 12345678 or qwerty).
• 📋 The password was written down on a piece of paper and fell into the wrong hands.
• 🕵️‍♂️ The password was selected using specialized programs (if it is short or consists of dictionary words).
• 📡 Neighbors "caught" the password through a protocol vulnerability WPS (if it is enabled).

There is only one solution - change your password to a complex oneHere's how to do it right:

1. Go to your router settings (instructions in the first section).
2. Find the section Wireless Settings (or Wi-Fi settings).
3. In the field Password (or Network key) Enter a new password. It must:
   • 🔢 Be at least as long 12 characters.
   • 🅰️ Contain letters of different upper and lower case (A-Z, a-z).
   • 🔢 Include numbers and special characters (!@#$% etc.).
   • 🚫 Not be a dictionary word or a combination of dates (e.g. Ivanov1985).
• Save the settings. All devices will be disconnected and will need to reconnect.

After changing your password, be sure to update it on all your devices. If you use smart home devices (lights, outlets, cameras), you'll also need to reconnect them—some gadgets don't save multiple networks and may require a reset.

4. Method 3: Disabling WPS and protecting against brute force

Technology WPS (Wi-Fi Protected Setup) was designed to simplify connecting devices to the network, but it has become one of the main vulnerabilities. Attackers can WPS PIN code in a few hours, even if you have a complex Wi-Fi password. Therefore It's better to disable WPS..

How to do it:

• 🔌 TP-Link: Wireless → WPS → disable the function.
• 🖥️ ASUS: Wireless Network → WPS → select Disable.
• 🌐 Keenetic: Wi-Fi Network → Advanced Settings → WPS → uncheck the box.

Also recommended:

• 🔒 Enable brute force protection (if available in the settings). For example, in Keenetic this is an option Protection against password guessing.
• 🔄 Hide SSID (network name). This won't protect you from experienced hackers, but it will reduce the number of accidental connections. The option is called Hide SSID or Hide network.
• 📡 Use encryption standard WPA3 (if the router supports it). It's more reliable. WPA2, but not all devices support it.

⚠️ Attention: Hiding SSID may cause connection issues with some devices (such as older printers or smart TVs). If the device doesn't connect after hiding the network, temporarily unhide it. SSID, add the device, then hide it again.

5. Method 4: Guest network to restrict access

If you don't want to completely block strangers (for example, you give Wi-Fi to guests), but are concerned about the security of your main network, use guest accessThis function creates a separate network with limited rights:

• 🚫 Guests won't see your local devices (printers, network drives).
• 🔒 Their traffic is isolated from your main network.
• ⏱️ You can limit the speed or operating time of the guest network.

Setting up a guest network:

1. In the router's web interface, find the section Guest network (or Guest Network).
2. Enable guest access and set a separate network name (SSID).
3. Set a password (it can be simpler than for the main network).
4. Set up restrictions:
   • 🕒 Opening hours (for example, only from 9:00 to 22:00).
   • 📉 Speed ​​limit (for example, 10 Mbps).
   • 🔌 Disabling access to local resources.

Now you can share your guest network password without compromising your primary one. This method is useful for cafes, offices, or if you frequently have guests.

6. Method 5: Blocking by IP address (for experienced users)

If you know IP address an outsider, it can be blocked through the router's firewall. This method is less reliable than filtering by MAC, because IP addresses may change (especially if the router is enabled DHCP). But in some cases it is useful.

Instructions for Keenetic:

1. Go to Security → Firewall.
2. Create a new rule:
   • Action: Drop (block).
   • Protocol: Any (all protocols).
   • Source IP Address: Enter IP stranger.

For ASUS:

1. Open Local Network → Routing → Static Routing.
2. Add a route with IP address stranger and indication Interface = None.

To block by IP It worked reliably, you can assign a permanent address to someone else's device in the settings DHCP (tying it to MAC address). Then even after rebooting the router, the "pest" will receive the same IP.

7. Additional Wi-Fi security measures

In addition to blocking strangers, it's worth taking steps to prevent new connections:

• 🔄 Update your router firmware regularlyManufacturers patch vulnerabilities in new software versions. Check for updates every 2-3 months.
• 📡 Disable remote control of your router (option Remote Management). This will prevent hacking via the Internet.
• 🔌 Use a VPN for important devicesFor example, set up WireGuard on the router so that all traffic goes through an encrypted tunnel.
• 📊 Monitor trafficIn some routers (for example, ASUS with firmware Merlin) There are network usage graphs by device. A sudden spike in traffic may indicate an intruder.

If your router doesn't support modern security methods (for example, you have an older model), consider purchasing a new one. Modern devices (for example, ASUS RT-AX88U or TP-Link Archer AX6000) have built-in intrusion detection systems and automatic security updates.

FAQ: Frequently Asked Questions about Wi-Fi Blocking