Home network security is a question that concerns every owner of modern equipment. KeeneticIn the digital age, your Wi-Fi can be accessed not only by neighbors looking to save bandwidth, but also by hackers using password-guessing software. If you notice your internet is slower than usual, or unfamiliar devices appear in your list of connected devices, you need to take immediate action to secure your perimeter.
operating system KeeneticOS, installed on this brand's routers, provides powerful and flexible access management tools. You don't need to be a network engineer to block access to uninvited guests. The system allows you to instantly disconnect a specific device or permanently block access using filtering by unique hardware identifiers. In this article, we'll cover all available methods in detail, from simple actions via the mobile app to fine-tuning security rules.
Before taking any action, it's important to understand that blocking is only part of a comprehensive defense. The most reliable method is to set a strong password on the wireless network itself using a modern encryption standard. WPA3 or WPA2However, if the password has already been compromised or you've been temporarily letting in guests who now need to be "kicked out," manual blocking will become your primary tool for controlling the situation.
How to identify an uninvited guest on the network
The first step in ensuring security is accurately identifying the problem. Users often panic prematurely when they see names they don't recognize in the list of devices. These could be smart plugs, TVs, or other devices. Samsung or LG, game consoles, or even a refrigerator if it's connected to the internet. Before blocking, make sure the device is truly someone else's. Access the router's web interface using a browser by entering the address 192.168.1.1 or my.keenetic.net.
In the main menu, find the section responsible for the client list. In the interface KeeneticOS It's usually called "My Networks and Wi-Fi" or appears on the main panel as icons of connected devices. Pay attention to the number of active connections. If there are more than the number of devices in your home, look for suspicious names or devices with the "Unknown" type. MAC address — This is a unique identifier for the network card that cannot be changed programmatically on most devices, and it will be the key to blocking.
For a more in-depth analysis, you can use built-in traffic monitoring tools. They will show which device is currently consuming the most data. If some laptop with an obscure name is downloading terabytes of information while you're simply scrolling through your news feed, that's a clear sign of interference. It's also worth checking whether the device is connected via a guest network, if you have that feature enabled.
⚠️ Attention: Some operating systems, such as iOS and Android, use the "Private Wi-Fi Address" (Randomized MAC) feature by default. This means that each time a device reconnects, it can present itself to the router with a new MAC address, making it more difficult to permanently block devices using this setting.
To accurately identify your device, compare the MAC address listed in your phone or laptop settings with those displayed in the router's list. On Android, this can be found under "About Phone" -> "Status," and on iPhone, under "General" -> "About." A match in the last few characters usually confirms the device's identity.
Instant blocking via web interface
The fastest way to restrict access is to use the temporary blocking feature directly in the client list. This method is ideal if you need to urgently terminate a connection, but don't need to create permanent filtering rules. Keenetic allows you to do this in literally one click, without delving into complex settings.
In the list of connected devices, find the desired user. Next to the device's name or icon, there's usually a lock button or a toggle switch. Clicking it will forcefully disconnect the current connection. The device will lose internet access, but theoretically will be able to reconnect unless additional security measures are taken. This is sufficient for a temporary disconnect.
☑️ Check before blocking
If you want to block a user more securely through the web interface, go to the Wi-Fi settings section. There you'll find the "Access" or "Access List" tab. Here you can select the filter mode. Select "Black List." Add the intruder's MAC address to this list. After adding and saving the settings, the router will ignore any connection requests from that specific device, even if it knows the correct network password.
Setting up a MAC address blacklist
Using a blacklist is the most effective method of permanently blocking access. Unlike temporarily disconnecting a connection, a blacklist rule remains in effect until you delete it. This ensures that even after a router reboot or reconnection attempt, the "neighbor" will not gain access.
To configure, go to the menu My Networks and Wi-Fi -> Home networkFind the section related to filtering or access lists. Switch the mode to "Blacklist." Now you need to add the MAC address of the device you want to block. You can copy it from the client list or enter it manually. Be extremely careful when entering characters: one mistake will invalidate the rule or, worse, block your own device.
After adding the address, be sure to click "Save" or "Apply." The router may reboot the Wi-Fi module, which will take a few seconds. During this time, all devices will reconnect. A device whose address is blacklisted will simply be unable to complete the authorization process and obtain an IP address.
| Parameter | Description | Recommendation |
|---|---|---|
| Filtering mode | Defines the logic of the list | Use the Blacklist to block specific offenders. |
| MAC address | Unique device identifier | Copy from the client list to avoid typing errors |
| Comment | Text label for the rule | Please provide the owner's name or device type for convenience. |
| Status | Rule activity | Always make sure the "Enabled" checkbox is checked. |
Using a White List for Maximum Protection
If the security situation is critical, or you want to be 100% sure that no one else can connect, use "Whitelist" mode. This is a radical, but the most reliable measure. In this mode, the router allows connections. only Access will be restricted to devices whose MAC addresses are included in the list. All others, even those with the password, will be rejected.
Switching to a whitelist requires some preparation. First, ensure all your trusted devices (phones, TVs, smart home devices) are currently connected to the network. Then, in the filtering settings, select "Whitelist" and enable the "Allow only from list" option. The router will automatically add all currently connected devices to the allowed list. If a device has been turned off, you will need to add it manually.
⚠️ Attention: Be careful when enabling the whitelist. If you accidentally fail to add your current device (for example, the laptop you're using to configure the router), you'll lose connection to the admin panel and internet access. Access can only be restored via an Ethernet cable or by resetting the router using the Reset button.
This method is ideal for office networks or situations where the user base is strictly defined and rarely changes. For a home with many guests and new gadgets, whitelisting can be inconvenient, as connecting each new smartphone requires re-entering the router settings.
Access control via a mobile app
Modern routers Keenetic Can be easily controlled from a smartphone. Mobile app Keenetic (available for iOS and Android) allows you to control your network from anywhere with internet access. This is especially convenient if you need to block a user while you're away or check connection status on the go.
The app's interface is intuitive. The main screen displays a network diagram and a list of clients. Clicking on a specific device reveals detailed information about it, including connection speed, IP address, and uptime. This window also often contains the "Internet Access" toggle or the "Block" button. Disabling this toggle immediately connects the device to the global network, although it may remain visible locally.
To create persistent rules in the app, go to Wi-Fi settings. Blacklist and whitelist settings are also available there. The mobile interface makes it easy to scan QR codes or select devices from the list of recently connected ones to add them to the exceptions or block list. This is faster and more convenient than entering long hexadecimal codes manually.
What should I do if the app doesn't see the router?
If the app shows a connection error, make sure your phone and router are on the same network. If you're using mobile data, make sure the Keenetic Cloud service is configured and enabled on the router, allowing you to manage the device remotely via the router's ID.
Organizing a guest network as an alternative
Instead of constantly blocking users and wrangling passwords, you can use a more civilized approach: a guest network. This is an isolated Wi-Fi segment that operates in parallel with your main network. Guests connect to it and access the internet, but they can't see your personal files, printers, or other devices on the local network.
Set up a guest network in Keenetic It's very simple. In the Wi-Fi section, create a new network, give it a name (e.g., "Guest"), and set a separate, simpler password. You can even limit the speed for guests or set a schedule so the network is only active during certain hours. This will eliminate the need for "how to block" since guests will be in their own isolated space.
The main advantage of a guest network is security. Even if a guest shares their password with others, your main network and personal data will remain secure. If suspicious activity occurs, you can simply disable the guest network with a single click, without affecting your smart devices or computers.
Frequently Asked Questions (FAQ)
Can a blocked user bypass the ban by changing the MAC address?
Technically, it's possible to change (clone) the MAC address on computers and some smartphones with root access. However, for the average user, this is a complex procedure. For most "random" neighbors, blocking by MAC address is an insurmountable barrier. If an advanced hacker has taken over your network, no simple blocking will help—change your Wi-Fi password to a strong one.
Will the blacklist be reset after rebooting the router?
No, blacklist and whitelist settings are stored in non-volatile memory. KeeneticAfter a reboot or power surge, all filtering rules will remain in effect. The only way to reset them is to perform a full reset of the router (factory reset).
Why is my blocked device still showing up in the client list?
The device may appear in the list as "disabled" or with limited access for a short time until the router clears its cache. Also, if the device was active when it was blocked, it may maintain a local connection but be unable to access the internet (pages won't load). It will disappear completely from the list after the device attempts to reconnect and is denied.
How do I block a user if I forgot the router admin password?
If you don't remember your password to access your settings 192.168.1.1, try the default ones (admin/1234 or those listed on the sticker underneath). If they don't work, you'll have to reset the router using the Reset button on the body. After that, you'll need to set up the Wi-Fi again, including setting a new password.
Does the number of blocked devices affect the router's speed?
The block list itself (even of 50 devices) has virtually no impact on the router's processor performance. However, if you have many active devices connected that are constantly trying to break through the protection and generating request traffic, this may create a minimal load. However, in a home environment, this impact is negligible.