Slow internet speeds and constant lag in online games often indicate that someone has connected to your wireless network. Unauthorized access Not only does it steal your traffic, but it also creates the risk of personal data leakage, as the attacker gains access to your local network. In such a situation, the only effective solution is to immediately block the attacker.
Modern routers have powerful tools for administering connected clients. You don't need to be a network engineer to disable the uninvited guestAll you need is the device's IP address or MAC address, as well as access to the router's control panel. In this article, we'll discuss universal protection methods that work on most popular equipment models.
Before you begin, make sure you know the administrator password. Without this information, you won't be able to change the security configuration. MAC filtering is the most reliable method, since the hardware address of a network card is almost impossible to spoof remotely without physical access to the device. Next, we will look at the process in detail.
Identifying offenders in the client list
The first step is always to detect the other person's device. You can't just disconnect your own devices, so you need to pinpoint who's on the line. Access your router's control panel by entering the gateway address in your browser, usually 192.168.0.1 or 192.168.1.1.
Find the section that may be called Attached Devices, Client List or Client listThis displays complete information about all active connections. Pay attention to the number of devices: if you have a phone and a laptop connected, and there are four in the list, there are uninvited guests.
For accurate identification, use the following signs:
- 📱 Device name (Hostname): often contains the gadget model, for example, iPhone-Alex or Samsung-Galaxy, which allows you to quickly understand whether this is your device or not.
- 🔢 IP addressCheck which addresses have been assigned. Often, other devices receive addresses at the end of the DHCP range, even if your devices have already received theirs in order.
- 🆔 MAC address: A unique 12-character identifier. Compare it to the stickers on your devices or check it in your phone's settings under "About Phone" -> "Status."
If you're unsure which device is the offending one, try temporarily disabling Wi-Fi on all your devices. The device that remains active in the router's client list is the offending device. Write down its MAC address; you'll need it for further steps.
Using the Blacklist feature
The easiest way to restrict access is to blacklist the intruder's MAC address. This feature is available in almost all modern routers, including TP-Link, Asus And KeeneticIt allows you to deny access to a specific device, even if it knows the WiFi password.
Find the section in the menu Wireless (Wireless mode) and subsection Wireless MAC Filtering or MAC address filteringHere you need to activate the filtering function. It is important to choose the correct operating mode: you need the mode Deny (Prohibit) or Blacklist.
The setup process is as follows:
- 🛑 Enable the MAC address filtering feature by setting the switch to the position
Enable. - ➕ Click the button
Add New(Add) and enter the MAC address of the intruder that you copied earlier. - 💾 Save the settings by clicking
SaveorApplyThe device will be immediately disconnected from the network.
☑️ Blocking check
Once these settings are applied, the intruder will lose their connection and won't be able to reconnect until you remove them from the blacklist. This is an effective measure, but it requires you to first identify the device's address.
Configure Whitelist for Maximum Protection
A more radical and reliable method is to use a whitelist (Whitelist). In this mode, the router allows connections ONLY to devices whose MAC addresses are included in the list. All others, even with the correct password, will be unable to connect.
In the same section Wireless MAC Filtering change the filtering rule to Allow (Allow). Now you need to carefully enter the MAC addresses of all your trusted devices: smartphones, TVs, laptops, and smart plugs.
⚠️ Caution: Be extremely careful when enabling Whitelist mode. If you add only one device to the list and then lose access to it, your other devices will be left without internet access. It is recommended to set up this mode with an Ethernet cable handy for a direct connection to the router.
The advantage of whitelisting is that you don't need to constantly monitor your network for new connections. Any connection attempt by an unknown device will be automatically rejected by the router's security system.
Changing the password and encryption type
If you suspect your WiFi password has been compromised, simply blocking it by MAC address may not be sufficient, as an experienced user can clone the address of an authorized device. The most effective way to kick everyone out is to change the password.
Go to the section Wireless Security (Wireless Security). Here you need to do two things: set a new complex password and check the encryption type. It is recommended to use the standard WPA2-PSK or modern WPA3, if your hardware supports it.
Avoid using outdated encryption WEP, as it can be cracked in just a few minutes using specialized tools. After changing the password, all devices will be disabled, and you'll have to re-enter the new key on each one.
How to create a strong password?
The password must contain at least 12 characters, including uppercase and lowercase letters, numbers, and special characters. Avoid birthdays, pet names, or simple sequences like 12345678. It's best to use a random combination that's difficult to guess using brute-force attacks.
Changing your password regularly (e.g., every six months) is a good digital hygiene practice, especially if you frequently grant access to guests.
Blocking features on routers of different brands
Interfaces from different manufacturers can vary significantly, although the logic remains the same. Below is a table to help you navigate the section names for popular models.
| Router brand | Path to settings | Function name |
|---|---|---|
| TP-Link | Wireless -> Wireless MAC Filtering | MAC Filtering (Enable/Disable) |
| Asus | Wireless Network -> MAC Address Filter | Filtering Mode (Accept/Reject) |
| D-Link | Wi-Fi -> MAC Filter | Enable MAC filter |
| Keenetic | My Networks and WiFi -> Network Access | Access List (Allow/Deny) |
On some models, for example MikroTik, the configuration can be done through the terminal or more complex menus WinBoxUsers of such devices are advised to review the documentation specifically for your firmware version.
Additional network security measures
Blocking users is a reactive measure. To prevent future problems, it's worth setting up proactive protection. Disable this feature. WPS in the wireless network settings. This technology is designed for fast connections, but has known vulnerabilities that make it easy to guess the PIN code.
It's also recommended to reduce your transmitter power if you live in an apartment building. The signal shouldn't penetrate several floors up and down. This will reduce the network's range outside your apartment, making it less noticeable to your neighbors.
Don't forget to update your router firmware. Manufacturers regularly release updates that patch security holes. You can check for a new version in the section System Tools -> Firmware Upgrade.
⚠️ Note: Interfaces and menu item names may vary depending on your router's firmware version. If you can't find the described items, refer to the official instructions on the manufacturer's website or search for your device model in the support section.
Frequently Asked Questions (FAQ)
Can a blocked user bypass the ban?
A regular user won't be able to. However, someone with advanced knowledge could attempt to clone the MAC address of your authorized device. This is why it's important to use complex passwords and WPA2/WPA3 encryption in addition to filtering.
Will the router reset its blocking settings after being turned off?
No, all settings, including blacklists and whitelists of MAC addresses, are stored in the device's non-volatile memory. They will remain active even after a reboot or a short power outage.
How do I unlock my device if I accidentally blacklisted it?
You need to log back into the router control panel, go to the MAC address filtering section, find the entry with your device's address, and delete it or change its status to "Allow." After saving the settings, the device will be able to connect.
Does the number of blocked devices affect the router's speed?
The block list itself (even with dozens of addresses) has virtually no impact on the router's processor performance. The load only occurs during a connection attempt, when the router checks the address against the list, but this takes only milliseconds.