The sudden drop in internet speed and frantic blinking of router lights is a familiar experience for many home equipment owners. Often, the cause isn't a technical glitch, but rather unauthorized connections from unauthorized users to your network. Router owners TP-Link We encounter this regularly, especially if we have a weak password or use an outdated encryption protocol.
Fortunately, the firmware architecture Tenda And TP-Link Provides effective access control tools. You can not only change your password but also selectively block specific devices while allowing access to your own devices. This is especially important in apartment buildings, where the signal range often extends beyond a single apartment.
In this article we will look at two main methods of restricting access: through MAC filtering and through the built-in Blacklist in the web interface. Both methods are reliable, but have their own implementation and management nuances.
⚠️ Note: The menu interface of TP-Link routers may differ depending on the firmware version and device model (e.g., Archer or TL-WR series). Some menu items may have different names, but the logic remains the same across the entire line.
Identifying uninvited guests on the network
Before resorting to drastic measures, it's important to determine exactly who is connected to your router. A simple slowdown isn't always a sign of a hack; sometimes it's the result of background updates or interference. First, log into your router's administrative panel.
Open your browser and enter your standard IP address in the address bar, usually 192.168.0.1 or 192.168.1.1After entering your login and password (often admin/admin by default), go to the section responsible for traffic monitoring. In new interfaces, it may be called "Network Map" or "Network Map," while in older interfaces, it may be called "Wireless Statistics."
Here you will see a list of all active connections. The key parameter for identification is MAC address — a unique identifier for the network interface. This is how the router distinguishes your phone from your neighbor's laptop.
To identify the device behind a string of numbers and letters, compare the MAC addresses with those listed on the labels of your gadgets or in their settings. Unknown addresses, especially those with manufacturer prefixes you don't have, should raise suspicion. Write down the suspicious address; you'll need it to configure filtering.
MAC filtering blocking method (Whitelist/Blacklist)
The most reliable access control method is MAC address filtering. This feature allows you to create strict rules, allowing only selected devices through or, conversely, denying access to specific intruders. In TP-Link terminology, this is often referred to as "Wireless MAC Filtering."
To activate the mode, go to the menu Wireless (Wireless mode) and select the sub-item Wireless MAC FilteringHere you need to click the button Enable (Enable) to activate the feature. Next, select the default rule.
If you select the "Allow the stations specified by any enabled entries to access" option, you'll create a "whitelist." In this case, no new device will be able to connect until you manually add its MAC address to the table. This is the highest level of security, but it requires manual configuration of each new device.
An alternative option is "Deny the stations specified by any enabled entries to access." This is a classic "blacklist." You add the addresses of offending users to it, and the router blocks their connection attempts, even if they know the correct Wi-Fi password.
To add a record, click Add NewIn the window that opens, enter the previously saved MAC address in the format XX:XX:XX:XX:XX:XX. Make sure the status is set as EnabledOnce the list is saved, the rules will take effect immediately.
Using the Client List feature for quick blocking
In modern TP-Link router models, especially those with the updated green or blue interface, the process is simplified. You don't have to manually rewrite addresses and create rules. Client List (Client List) allows you to manage connections in one click.
Find the "Wireless" or "Basic" section in the menu, then "Wireless Statistics" or "Connected Devices." You'll see a table with all active users. Next to each device, there's usually a lock button (a lock or cross icon).
By clicking this button, you automatically add the device to the blacklist. The system will automatically create a corresponding filtering rule. This is much more convenient than manually managing MAC filtering, as it doesn't require diving into deep security settings.
☑️ Network security check
However, it's important to remember that this method only blocks the device by its current address. If the user is knowledgeable, they can change (clone) the MAC address on their device and bypass the block, although this would be a significant obstacle for an ordinary neighbor.
Change your password and strengthen your Wi-Fi security
Blocking specific devices is a symptomatic measure. If someone has connected to you, it means your password has been compromised or is too weak. The most effective way to block everyone at once is to change your wireless network security key.
Go to the section Wireless Settings (Wireless Settings) Find the field Wireless Password or WPA-PSK/WPA2-PSK PasswordCreate a complex combination that includes letters of different upper and lower case, numbers, and special characters.
After changing your password, all devices will be disabled. You'll have to reconnect your devices using the new code. This will ensure that no one else can access your device, as the old passwords saved on their devices will no longer work.
⚠️ Please note: After changing your Wi-Fi password, smart devices (lamps, sockets, cameras) connected to the network may stop working. You will need to reconfigure them through mobile apps.
It's also critical to check the encryption type. Make sure the standard is selected. WPA2-PSK or WPA3Using the outdated WEP protocol or an open network (Open) makes your traffic vulnerable to interception, even with a strong password.
Comparison of TP-Link network security methods
To systematize your knowledge, we'll review the main security methods in a comparative table. This will help you choose the optimal strategy for your situation, whether it's temporarily blocking a neighbor or building a long-term security system.
| Method | Difficulty of setup | Reliability | Impact on new devices |
|---|---|---|---|
| Change password | Low | High | Requires reconnection of all |
| MAC filtering (Blacklist) | Average | Average | It doesn't affect |
| MAC filtering (Whitelist) | High | Very high | Blocks by default |
| Disabling WPS | Low | Average | It doesn't affect |
As the table shows, a combination of methods yields the best results. Changing the password eliminates current intruders, while enabling filtering or disabling WPS prevents future hacking attempts.
Disabling the WPS function to prevent hacking
One of the most common security holes in TP-Link routers is the function WPS (Wi-Fi Protected Setup). It's designed to quickly connect devices with the press of a button, but its algorithm is often vulnerable to PIN brute-force attacks.
Attackers can use special programs to automatically guess the WPS PIN code within a few hours, after which the router will automatically give them the password for the main network. Therefore, if you don't use the push-button connection feature on a daily basis, it's best to deactivate it.
Find the section in the router menu WPS (often in the main menu or in the Wireless section). Toggle the function status to Disable (Disable). This will close one of the most popular loopholes for hackers.
After disabling WPS, connecting new devices will only be possible by entering a password, which is significantly more secure. Some older printers or TV set-top boxes may require WPS, but 99% of modern devices work perfectly without it.
Why is WPS so easy to hack?
The WPS protocol uses an 8-digit PIN code. However, the last digit is a checksum of the first seven. Only seven digits are actually tested, and the check is performed halves-by-halves. This reduces the number of combinations from 100 million to approximately 11,000, which can be accomplished with a brute-force attack in a few hours.
Frequently Asked Questions (FAQ)
Can a blocked user reconnect?
If you only used a password change, then no, not until they know the new password. If MAC filtering was used, the user can bypass the block by changing (cloning) the MAC address on their device to the address of your authorized device. However, this requires technical knowledge.
Will rebooting the router clear the block?
No, MAC address filtering settings and the blacklist are stored in the router's non-volatile memory. After a reboot (System Tools → Reboot) all blocking rules will remain in effect.
What should I do if I blocked myself?
If you enabled the "Allow only specified" mode and didn't add your device, Wi-Fi access will be lost. You'll need to connect your computer to the router via a LAN (Ethernet) cable and remove the rule or add your MAC address to the allowed list through the web interface.
Does my provider see that I'm blocking devices?
No, connected clients are managed locally within your network. The provider only sees the total traffic coming from your router, but doesn't know how many devices are connected or how you manage them.