Blocking Devices by MAC Address on Wi-Fi: A Step-by-Step Guide

Protecting your home or office Wi-Fi network from unauthorized access is key to ensuring data security and stable internet operation. One of the most effective ways to control connections is blocking devices by MAC addressThis method allows you to manually allow or deny network access to specific devices based on their unique network ID.

A MAC (Media Access Control) address is a unique 12-digit code assigned to each network device during manufacturing. Unlike an IP address, which can change, a MAC address remains constant, making it a reliable filtering tool. However, it's important to understand: MAC filtering is not 100% secure. from experienced hackers, as the address can be spoofed. However, for most home users, this method remains a simple and effective way to restrict Wi-Fi access.

In this article, we will look at how to find the MAC address of a device, set up filtering on routers of popular brands (TP-Link, ASUS, Keenetic, MikroTik), and we'll also look at alternative network security methods. If you're experiencing unauthorized devices connecting to your Wi-Fi or want to restrict children's access during certain hours, this guide will help you solve the problem.

What is a MAC address and how to find it?

MAC address (from English. Media Access Control) is a unique identifier assigned to each network adapter during manufacturing. It consists of 6 bytes (48 bits) represented in hexadecimal format, for example: 00:1A:2B:3C:4D:5E. The first three bytes indicate the manufacturer of the device (OUI — Organizationally Unique Identifier), and the last three are the unique number of a specific adapter.

To block a device by MAC address, you first need to identify it. The methods depend on the type of device:

• 📱 On Android: go to Settings → About phone → General information → Wi-Fi MAC address.
• 🍎 On iPhone/iPad: open Settings → Wi-Fi, click on the symbol i next to the connected network - the MAC address will be listed in the section Wi-Fi address.
• 💻 On Windows: run the command in Command line:

  ipconfig /all

  Look for the line Physical address in the section Wireless LAN adapter.

• 🖥️ On macOS: open System Preferences → Network → Advanced → Ethernet/Wi-Fi — The MAC address is specified as Ethernet ID.

You can also view the MAC addresses of all connected devices in the router control panel. They are usually displayed in the DHCP clients, Connected devices or Wireless modeThis is convenient if you don't want to search for the address on each gadget separately.

When to use MAC filtering

MAC address blocking is not a universal solution, but it is effective in a number of cases:

• 🚫 Restricting access to third-party devices. If you notice unknown MAC addresses in the list of connected gadgets, you can block them.
• 👶 Parental control. Prohibit connection of children's devices at night or during school hours.
• 🏢 Corporate network control. In offices, MAC filtering helps to restrict access to only official devices.
• 🔄 Changing Wi-Fi password. If you don't want to change the network password, but need to disconnect a specific device.

However, the method also has limitations:

• ⚠️ MAC address can be spoofed (spoofing), so filtering does not protect against experienced hackers.
• ⚠️ If you change the network card (for example, in a PC), the MAC address will change and the device will lose access.
• ⚠️ Setup requires manual entry of addresses, which is inconvenient for large networks.

How to block a device by MAC address on routers of different brands

The process for setting up MAC filtering varies depending on the router model. Below are instructions for the most popular manufacturers. If your model isn't listed, look for the section titled MAC Filter, Access Control or Wireless Mode → MAC Filter.

1. TP-Link (Archer, TL-WR, Deco)

For routers TP-Link follow these steps:

1. Open the control panel at 192.168.0.1 or 192.168.1.1 (login and password are usually admin).
2. Go to Wireless Mode → MAC Filter.
3. Activate the option Enable MAC address filtering.
4. Select mode Deny the stations specified in the list access to the network.
5. Add the MAC addresses of the devices you want to block in the format XX:XX:XX:XX:XX:XX.
6. Save the settings and reboot the router.

Is MAC address filtering enabled?|Is it set to "Deny"?|Have you added all the required MAC addresses?|Have your settings been saved?-->

2. ASUS (RT-AC, RT-AX, ZenWiFi)

On routers ASUS The path to the settings is as follows:

1. Log in to the web interface at 192.168.1.1.
2. Go to Wireless Network → MAC Filter.
3. Set the switch to position Turn on.
4. Select Blacklist mode (to block) or Whitelist mode (to allow only specified devices).
5. Enter the MAC addresses in the field MAC address and press Add.
6. Apply the settings with the button Apply.

Please note: on some models ASUS Filtering only works for wireless connections (Wi-Fi), but not for wired ones (Ethernet).

3. Keenetic (Giga, Hero, Extra)

Routers Keenetic have a more advanced interface:

1. Go to the web configurator at 192.168.1.1.
2. Go to Home Network → Devices.
3. Find the device you want to block and click on its MAC address.
4. In the window that opens, select Block Internet access.
5. Save the changes.

Advantage Keenetic — the ability to block not only by MAC address but also by IP address, as well as flexible parental control settings.

4. MikroTik (hAP, RB, CCR)

For routers MikroTik will need to be used Winbox or web interface:

1. Open IP → Firewall.
2. Create a new rule (+).
3. Tab General: select Chain: forward.
4. Tab Advanced: in the field Src. MAC Address Specify the address to block.
5. Tab Action: select drop.
6. Save the rule (Apply → OK).

MikroTik Allows you to create complex filtering rules, such as blocking devices only at certain times of day.

What should I do if the device still connects after being blocked?

If your device continues to access the network, check:

1. Is the MAC address entered correctly (case is not important, but the separators must be correct: colons or dashes).

2. Have the settings been saved and the router rebooted?

3. Has the MAC address on the device been spoofed (on Android this can be done via Settings → Wi-Fi → Advanced → MAC Address).

4. Is the device being used via a guest network (if it is enabled on the router).

Blacklist vs. Whitelist: Which Mode Should You Choose?

When setting up MAC filtering, routers offer two main operating modes:

For most home users it is optimal blacklist - it is easier to set up and does not require constant updating. Whitelist Suitable for offices or if you want complete control over which devices connect to the network.

Alternative ways to block devices on Wi-Fi

MAC filtering isn't the only method of restricting access. Let's consider alternative options that can be used in addition to or instead of MAC blocking:

• 🔒 Change Wi-Fi password. The easiest way to disconnect all unauthorized users. Disadvantage: you'll have to reconnect all your devices.
• 🕒 Parental control. Most routers have a time-based access restriction feature (for example, Schedule V TP-Link).
• 🌐 Guest network. Create a separate network for guests with limited access to local resources.
• 📵 IP blocking. Some routers (eg. Keenetic) allow you to block devices by IP address, but this method is less reliable, since the IP can change.
• 🛡️ Firewall. Advanced routers (MikroTik, Ubiquiti) support the creation of firewall rules to block traffic from specific devices.

A combination of several methods gives the best result. For example, you can use MAC address whitelist + parental control by time + guest network for maximum safety.

Common mistakes and how to avoid them

When setting up MAC filtering, users often encounter typical problems. Here are the most common errors and solutions:

⚠️ Attention: If the device still connects to the network after blocking, check if the function is being used on it. MAC Address Randomization (MAC randomization). This option automatically changes the MAC address each time you connect and is enabled by default. iPhone (starting with iOS 14) and some Android-devices. To disable it on an iPhone, go to Settings → Wi-Fi, click on the symbol i next to the network and deactivate the option Private Wi-Fi address.

• ❌ Invalid MAC address format. Make sure the address is entered correctly, with colons or dashes (example: 00:1A:2B:3C:4D:5E or 00-1A-2B-3C-4D-5E). Some routers do not accept addresses without separators.
• ❌ Unsaved settings. After adding MAC addresses to the list, be sure to click Save or Apply and reboot the router.
• ❌ Conflict with other functions. If enabled WPS or UPnP, they can bypass filtering. Disable them in your router settings.
• ❌ Blocking the router itself. Never blacklist the MAC address of the router itself (usually starts with XX:XX:XX:XX:XX:XX(where XX are the first characters of the manufacturer). This will result in loss of access to the control panel.

If after all these manipulations the device continues to connect, try:

1. Update your router firmware to the latest version.
2. Reset your router to factory settings and configure filtering again.
3. Check if the device is connecting via Ethernet (wire), since some routers only filter Wi-Fi.

FAQ: Answers to Frequently Asked Questions

Is it possible to block a device by MAC address on all routers?

Most modern routers support MAC filtering, but budget models (such as those from ISPs) may lack this feature. If there is no section in the web interface MAC Filter or Access Control, please refer to your model's instructions or contact technical support.

How do I find the MAC address of a device that is already connected to my network?

The easiest way is to go to the router control panel and look at the list of connected devices (section DHCP Clients, Connected Devices or Wireless Mode → Clients). The MAC addresses of all active gadgets will be listed there.

What should I do if I've blocked myself and can't access my router settings?

If you accidentally blocked your device, connect to the router via cable (Ethernet) — wired connections are usually not subject to MAC filtering. If this doesn't help, reset the router to factory settings using the Reset (hold for 10-15 seconds).

Is it possible to bypass MAC address blocking?

Yes, an experienced user can change the MAC address of his device (MAC spoofing). On Windows this is done through device Manager, on Android - using applications like MAC Address Changer, on iPhone - via Wi-Fi settings (optional) Private address). Therefore, MAC filtering should not be considered as the only method of protection.

Why does the blocking reset after rebooting the router?

This can happen for two reasons:

1. The settings were not saved (always press Save or Apply after changes).
2. The router firmware is not working correctly. Update it to the latest version using the section System Tools → Firmware Update.