How to Block Connected Devices to Wi-Fi: A Complete Guide (2026)

Have you noticed unknown devices connecting to your Wi-Fi? Or do you want to restrict internet access for certain devices in your home? Blocking devices on your network isn't just a security issue, but also a way to manage traffic, save speed, and even implement parental controls. In this article, we'll cover all current methodsHow to block devices connected to Wi-Fi, regardless of your router model.

Modern routers offer several methods of access restriction: from simple blocking by MAC address to flexible rules in firewallWe'll look at options for popular brands - TP-Link, ASUS, Keenetic, MikroTik — as well as universal solutions that work on any equipment. You'll also learn how to detect "redundant" devices on your network and what to do if blocking doesn't work.

Important: Some methods require access to the router's admin panel. If you haven't changed the default login details, they can be found on a sticker on the back of the device (usually 192.168.0.1 or 192.168.1.1 with login admin and password admin).

1. How to find all devices connected to Wi-Fi

Before blocking gadgets, you need to understand which devices are connected to your network. Most routers display this list in the web interface. Here's how to find it:

• 🔍 On TP-Link: go to Wireless Mode → Wireless Mode Statistics or DHCP → DHCP Client List.
• 🔍 On ASUS: open Network map in the main menu - all connected devices will be displayed here with an indication IP And MAC addresses.
• 🔍 On Keenetic: go to Devices on the main page of the interface.
• 🔍 On MikroTik: use IP → DHCP Server → Leases or Wireless → Registration Table.

If your router doesn't display a list of devices (which is unlikely for modern models), you can use third-party programs:

• 🖥️ Wireless Network Watcher (Windows) - Scans the network and displays all connected gadgets MAC addresses and manufacturers.
• 📱 Fing (Android/iOS) - a mobile application for network analysis, shows even hidden devices.
• 🌐 Advanced IP Scanner — a free utility for searching all IP-addresses in the local network.

Pay attention to unknown devices with unfamiliar names (for example, android-123456 or unknown-device). Also check if there are any duplicates in the list. MAC addresses - this may indicate spoofing (address substitution) by the attacker.

2. Blocking devices by MAC address

MAC address — is a unique identifier of a network device, which is assigned at the factory. Blocking by MAC - one of the most reliable ways to restrict access to Wi-Fi, as it is more difficult to fake than IP addressLet's look at how to do this on different routers.

Instructions for TP-Link

1. Go to your router's control panel (usually at 192.168.0.1 or 192.168.1.1).
2. Go to the section Wireless Mode → MAC Filter.
3. Enable filtering by selecting the option Turn on.
4. Add MAC address device you want to block to the list and save the settings.

Instructions for ASUS

1. Open the router's web interface and go to Wireless Network → MAC Filter.
2. Select mode Refuse (Deny) to block.
3. Enter MAC address device manually or select it from the list of connected clients.
4. Save the changes and reboot the router if necessary.

Keenetic Instructions

1. In the router interface, open Home Network → Devices.
2. Find the desired device in the list and click on it.
3. In the window that opens, select Block Internet access.
4. Confirm the action - the device will be immediately disconnected from the network.

On MikroTik the process is more complex and requires knowledge Winbox or WebFig:

/ip firewall filter add chain=forward mac-address=00:1A:2B:3C:4D:5E action=drop comment="Block_Device" disabled=no

Important: MAC address blocking isn't 100% reliable, as an experienced user can spoof the MAC address. For maximum protection, combine this method with other methods (such as changing your Wi-Fi password).

Make sure the address is entered correctly (example: 00:1A:2B:3C:4D:5E)

Check if you've accidentally locked your device.

Save the list of allowed MAC addresses for future reference.

Reboot your router after making changes-->

3. Blocking by IP address (static binding)

If for some reason the blocking is due to MAC address not suitable, you can restrict access by IP addressTo do this, you first need to bind MAC devices to a specific IP in the router settings and then block this IP in the firewall.

How to bind MAC to IP (DHCP reservation)

• 🔗 On TP-Link: DHCP → Address Reservation → add MAC and desired IP.
• 🔗 On ASUS: Local Network → DHCP Server → Manual ARP Binding.
• 🔗 On Keenetic: Home Network → Binding IP Addresses to MAC Addresses.

How to block an IP address in a firewall

After linking, all that remains is to block traffic from this IP:

• 🛡️ On TP-Link: Security → Basic Settings → IP Filtering → add a blocking rule.
• 🛡️ On ASUS: Firewall → Network Filter → create a rule with an action DROP.
• 🛡️ On MikroTik: use the command:

  /ip firewall filter add chain=forward src-address=192.168.1.100 action=drop

This method is less secure than blocking by MAC, because IP address This may change (unless static binding is used). However, it is useful in cases where you need to temporarily restrict access, for example, for guest devices.

⚠️ Attention: If your network uses DHCP without reservation, IP addresses may change with each connection. In this case, blocking by IP will be ineffective.

4. Using parental controls

Many routers have a built-in function parental control, which allows you to not only block devices but also limit their internet access time. This is convenient if you want, for example, to turn off children's devices after 10:00 PM or limit access to social media.

Setup on TP-Link

1. Go to Additional settings → Parental controls.
2. Enable the feature and add the device by MAC address.
3. Set a schedule (for example, blocking from 10:00 PM to 8:00 AM).
4. Save the settings and apply the rules.

Setting up on ASUS

1. Open Administration → Parental Controls.
2. Select a device from the list or add it manually.
3. Set time and day of the week restrictions.
4. Apply the changes and the router will automatically block access at the specified time.

Setting up on Keenetic

IN Keenetic parental control is called Access profile:

1. Go to Devices, select the gadget and click Edit profile.
2. Create a new profile with time restrictions.
3. Specify the days and hours of blocking (for example, from 11:00 PM to 7:00 AM on weekdays).
4. Save the profile and apply it to the device.

The advantage of this method is that the blocking works on a schedule, and you don't have to constantly turn it on/off manually. Additionally, some routers (for example, ASUS) allow you to block access to specific websites or content categories (social networks, games, videos).

What to do if parental controls don't work?

Make sure your device isn't using a VPN or proxy—they bypass router restrictions.

Check that the time on your router is synchronized with the Internet (incorrect time will disrupt the schedule).

If your device is connected via cable (Ethernet), set up restrictions for the wired network as well.

5. Blocking via a mobile app

Modern routers often support mobile app management, making it easier to block devices. Let's look at the most popular apps for different brands:

Mobile apps are convenient because they allow you to block devices remotely. For example, you can disable your child's Wi-Fi access without leaving the couch. Additionally, some apps (for example, ASUS Router) there is a function notifications about new devices — the router will notify you if an unknown gadget connects to the network.

The downside of this method is that not all routers support full control via the app. For example, on MikroTik to block you will have to use Winbox or WebFig.

⚠️ Attention: If you use an app to manage your router, make sure it is official (download only from App Store or Google Play). Fake apps can steal your network data.

6. Alternative blocking methods

If standard methods don't help or your router doesn't support the required features, you can use alternative solutions.

Changing your Wi-Fi password

The simplest but most radical way is change your Wi-Fi passwordAll devices will be disconnected, and you'll have to reconnect them. This is effective if you want to "cleanse" your network of all unknown devices:

1. Go to your router settings.
2. Go to the section Wireless network or Wi-Fi.
3. Change the password in the field Network key (recommended to use WPA3 for better protection).
4. Save the settings - all devices will be disconnected.

Using a guest network

If you want to restrict access for guests, but not block them completely, set up guest network:

• 📶 On TP-Link: Wireless Mode → Guest Network → enable and set a separate password.
• 📶 On ASUS: Guest network → configure SSID and restrictions (such as speed or access time).

The guest network is isolated from the main network, so devices on it will not be able to access your local resources (printers, network drives).

Blocking via Windows/macOS firewall

If you need to block a specific device on your local network (for example, a child's computer), you can use the built-in firewall:

• 🪟 On Windows: open Windows Defender Firewall → Additional options → create a blocking rule IP addresses.
• 🍎 On macOS: use Pfeilwall (pfctl) to block traffic.

This method is suitable for advanced users as it requires knowledge of network settings.

7. What to do if the lock doesn't work

Sometimes your device continues to connect to Wi-Fi despite your best efforts. Let's look at possible causes and solutions:

• 🔄 The device changes its MAC address.: some smartphones (especially on Android) are used MAC randomization for privacy. In this case, blocking by MAC won't work. The solution is to block by IP or use parental controls.
• 🔌 Connection via cable (Ethernet)If the device is connected via a network cable rather than Wi-Fi, blocking it in wireless settings won't help. Set up a firewall for your wired network.
• 📡 Neighborhood network with the same name: if your neighbors have Wi-Fi with the same SSID and weak security, devices may automatically connect to it. Check to see if your network name is duplicated.
• 🔑 Password leakIf your Wi-Fi password is known to strangers, they can still connect even after it's been blocked. MACThe solution is to change the password and enable WPA3.

If nothing helps, try reset the router to factory settings and configure it again. To do this:

1. Press and hold the button Reset on the back panel of the router (usually 10-15 seconds).
2. After resetting, log in to the control panel (the default login and password are indicated on the sticker).
3. Reconfigure your network by setting a strong password and enabling filtering. MAC addresses.

⚠️ Attention: Resetting your router will delete all settings, including Wi-Fi passwords, bindings IP and firewall rules. Before resetting, save important data (for example, the list of allowed MAC addresses).

8. How to prevent unauthorized connections in the future

To prevent unknown devices from reappearing on your network, follow these guidelines:

• 🔒 Use a complex password: at least 12 characters with letters, numbers, and special characters. Avoid obvious combinations like 12345678 or qwerty.
• 🛡️ Enable WPA3This encryption standard is harder to crack than the older one. WPA2If your router does not support WPA3, update the firmware.
• 📵 Disable WPS: function Wi-Fi Protected Setup Vulnerable to brute-force attacks. Disable it in your router settings.
• 🔍 Check the device list regularly: Once a month, go to the control panel and check your connected gadgets.
• 📡 Hide your SSID: disable network name broadcasting in settings (Hide SSID). This won't protect you from experienced hackers, but it will reduce the number of accidental connections.
• 🔄 Update your router firmware: Manufacturers regularly release patches for vulnerabilities. Check for updates in the section Administration → Software Update.

Additionally, you can use specialized programs for network monitoring, such as GlassWire (Windows/macOS) or NetGuard (Android). They notify you of new connections and suspicious activity.

If you suspect your Wi-Fi has been hacked, immediately change your password and check your router for malware (some viruses can change settings) DNS or open ports for remote access).

FAQ: Frequently asked questions about blocking devices on Wi-Fi

Is it possible to block a device without accessing the router settings?

Yes, but the options are limited. You can:

• Turn off Wi-Fi on the device itself (if you have access to it).
• Use the router's mobile app (if it supports blocking).
• Temporary solution: disconnect the router from power (but this will block all devices).

There is no option to permanently block without access to the router - you need to go to the control panel.

How do I block a device on a router from a provider (e.g., Rostelecom, Beeline)?

Routers from ISPs often have limited functionality. Try this:

1. Login to the web interface (usually 192.168.0.1 or 192.168.1.1).
2. Find a section Devices, Clients or Wi-Fi.
3. If there is no blocking function, contact your provider's support - sometimes they can help remotely.

If nothing helps, buy your own router and set it up in mode bridge (bridge).

What should I do if an unknown device continues to connect after being blocked?

Possible causes and solutions:

• MAC spoofing: the device is counterfeiting MAC addressThe solution is to block by IP or use parental controls.
• Double NATIf you have two routers, blocking the primary one may not work. Check your network diagram.
• Router vulnerability: update firmware or reset settings.

The last resort is change the router to a model with better protection (for example, ASUS RT-AX88U or Keenetic Ultra).

Is it possible to block a device permanently?

Technically, no, because:

• The user can change MAC address your device.
• When you reset your router, all blocking settings will be erased.
• If your device is connected via a cable, blocking Wi-Fi won't help.

However, the combination of methods (blocking by MAC + parental control + complex password) will make the task as difficult as possible for an attacker.

How to block a device on public Wi-Fi (in a cafe, hotel)?

On public networks, you can't block other people's devices because:

• You do not have access to the router settings.
• This is illegal (Article 272 of the Criminal Code of the Russian Federation - unauthorized access to information).

If you're concerned about slow internet due to a large number of connected devices, complain to the property manager. In hotels, you can sometimes ask for a separate connection. VLAN.