Having an unauthorized user connect to your home network isn't just annoying, it's also potentially dangerous. Internet speeds drop, and personal data can be at risk if an intruder intercepts your traffic. That's why the ability to quickly restrict access to unwanted guests is a critical skill for any home network administrator.
Blocking devices via a computer is the most secure way to manage your network, as it gives you access to the router's full functionality, which is often limited in mobile apps. You don't need to be a professional programmer to perform this procedure; basic browser skills and knowledge of your access point's address are sufficient. In this article, we'll cover all methods in detail, from simple to advanced.
There are several levels of protection, from temporarily disabling a specific device to creating a strict list of approved devices. The method you choose depends on your router model and your goals. Sometimes simply changing the password is enough, but if the "pirate" has already discovered it, more drastic measures will be required, such as MAC filtering.
Before taking any action, it's important to ensure you have physical access to the router or are connected via cable. Connecting wirelessly while setting up filtering rules can lead to you accidentally locking yourself out if you're not careful with your security settings.
Identifying uninvited guests on the network
Before resorting to drastic measures, you need to determine exactly what's consuming your traffic. It often happens that the list of connected devices includes forgotten gadgets, smart plugs, or TVs that you simply didn't recognize at first glance. First, log in to your router's admin interface.
Open any browser on a computer connected to the network and enter the gateway IP address in the address bar. Most often, this is 192.168.0.1 or 192.168.1.1If the default addresses are not suitable, you can find out your gateway through the Windows command line by entering the command ipconfig and find the line "Default gateway".
After entering your login and password (often admin/admin if you haven't changed them), go to the wireless network status section. It may be called Wireless Status, Client List or Client list. All active connections are displayed here in real time.
⚠️ Important: If you see a device with the name "Unknown" or a strange MAC address, don't rush to block it. First, check the list of connected devices in the Bluetooth settings of your phones and laptops—sometimes device names are the same or appear incorrectly.
For accurate identification, use special network scanning utilities such as Advanced IP Scanner or Fing (If you have an Android emulator on your PC). They allow you to see not only the IP address but also the network card manufacturer, which often helps you figure out whose phone or laptop it is.
- 📱 Check the names of all your smartphones and tablets in the "About phone" settings.
- 💻 Compare the number of active Wi-Fi indicators on the router body with those of other devices you know.
- 🌐 Pay attention to the channel load: if you're not downloading anything and the speed is busy, someone else is using the network.
- 🔍 Use port scanning programs to determine the type of connected device (printer, camera, PC).
Once you've collected the MAC addresses of all your devices, make a list. Any device whose address isn't on this list is a potential intruder. Write down its MAC address, as this will be used for blocking.
Blocking via the router's web interface
The most common way to restrict access is to use the built-in functions of the router. Interfaces from different manufacturers (TP-Link, ASUS, D-Link, Keenetic) may differ visually, but the operating logic remains the same. You need to find the section responsible for wireless networking or security.
Most modern routers have a "Blacklist" feature. This allows you to add the MAC address of an intruder to a list of blocked addresses. After saving the settings, the router will disconnect from that device and ignore any attempts to reconnect.
☑️ Check before blocking
An alternative method is to create a "White List." This is a more restrictive measure, allowing only devices you explicitly specify to access the network. Anyone else, even with the password, won't be able to connect. This is ideal for maximum security, but it requires entering the MAC addresses of all your devices.
The process of adding a device to a blacklist typically looks like this: copy the MAC address from the client list, go to the filtering settings, select the "Deny" rule, and paste the address. Some routers allow you to do this with one click directly from the list of connected clients by clicking the "Block" button next to the device name.
| Manufacturer | Menu section | Function name | Complexity |
|---|---|---|---|
| TP-Link | Wireless -> MAC Filtering | MAC Address Filter | Low |
| ASUS | Wireless -> MAC Filter | MAC Address Filter | Low |
| D-Link | Wi-Fi -> MAC Filter | List of MAC addresses | Average |
| Keenetic | My Networks and Wi-Fi -> Client List | Block | Very low |
| Netis | Wireless Mode -> Filter | MAC Filter | Average |
On some older models, changes take effect only after restarting the device. If the device doesn't disconnect immediately, try disabling Wi-Fi and then re-enabling it.
Using the Windows Command Prompt
Advanced users can manage network connections and even perform certain blocking actions via the operating system's command line. However, it's important to understand that standard Windows tools won't directly "kick" a device from someone else's router unless you have access to its admin panel. However, you can manage your own network card.
If your goal is to temporarily disable your own adapter or reset the network settings on your computer to resolve IP address conflicts, the commands used are ipconfigFor example, the team ipconfig /release will release the current IP address, and ipconfig /renew will request a new one.
ipconfig /flushdnsThis command clears the DNS cache, which can be useful if you're having trouble accessing websites after blocking the intruder. Sometimes the system caches invalid routes, and clearing them helps restore normal operation.
There are also scripts and utilities for Windows, such as NetCut (using ARP spoofing), which allow other devices on the local network to "cut off" the Internet. Using such methods on other people's networks or without the consent of the device owners is illegal. Within your home network, this can serve as a diagnostic tool to show how your security is working.
⚠️ Warning: Using ARP spoofing and connection cutters in dormitory, hotel, or cafe networks may be considered a violation of the rules for providing communication services and may result in your access being blocked by your provider.
If you want to block access to certain resources on your computer (for example, for a child), use the file hostsThe path to it: C:\Windows\System32\drivers\etc\hosts. By adding a line 127.0.0.1 site.com, you will block access to the specified site for this PC.
Is it possible to block a phone via the command line without access to the router?
No, this is not possible using standard Windows tools. The command prompt only controls the computer it's running on, and it requires special network administrator privileges to control other devices.
Setting up parental controls and schedules
A common reason users want to block Wi-Fi is to limit children's access time. Modern routers offer flexible parental control tools that allow you to not only turn off devices but also set a schedule for them.
You can set up a rule, for example, that allows your child's tablet to access the internet only between 4:00 PM and 8:00 PM on weekdays. The connection will be disconnected automatically during the rest of the day. This is more humane and effective than a complete block.
- 🕒 Set access time intervals for each device separately.
- 🚫 Block access to adult websites using the built-in DNS filter or URL database.
- 📱 Use a guest network for temporary access by visitors, which can be disabled with a single button.
- 🔔 Set up email or phone notifications when new devices are connected.
In routers Keenetic And MikroTik These features are implemented particularly thoroughly. You can limit not only time, but also speed, and even traffic types (for example, allowing instant messaging but blocking YouTube and games).
A guest network is a great way to isolate visitors. You create a separate access point with its own name and password. You can access your router settings from your computer at any time and disable this guest network without affecting your main devices.
To implement the schedule, find the section in the router menu Parental Control or Access ScheduleThere, you'll need to enter the MAC address of the target device and mark the allowed hours on the timeline. Don't forget to activate the rule by checking the "Enable" box.
What to do if you have lost your admin password
Users often can't block uninvited guests because they've forgotten their router password, and the default (admin/admin) password isn't working. In this case, you have two options: try to remember the password or reset the device to factory settings.
Reset (Reset) is performed by holding down the small button on the back of the router (often recessed into the case) for 10-15 seconds while the power is on. The indicators will flash, and the device will reboot with factory settings.
After the reset, you'll have to reconfigure your internet connection (enter your ISP login and password) and set new Wi-Fi names and passwords. All previously connected devices will be disconnected, and you'll need to reconnect them with a new password. This is a radical, but 100% effective, method of "wiping" your network.
If you don't know your ISP connection settings, don't reset your router! Try finding the sticker on the bottom of the device—sometimes the admin password is listed there. You can also try the standard combinations commonly used in your region.
⚠️ Caution: After resetting the router, it becomes "open." Be sure to immediately change the web interface password, otherwise anyone who connects to your Wi-Fi will be able to change the settings again.
To avoid such situations in the future, write down your new passwords in a safe place or use a password manager. It's also recommended to update your router firmware to the latest version, as new software versions often improve the interface and security.
Prevention: How to protect your network in the future
Once you've successfully blocked intruders, it's important to consolidate the results and prevent further intrusion. The simplest and most effective method is to change your password to a strong one. Use a combination of uppercase and lowercase letters, numbers, and special characters, at least 12 characters long.
Enable encryption WPA2-PSK or WPA3Old encryption standards (WEP, WPA) can be cracked in minutes with specialized software. Make sure you've selected a modern security type in your wireless network settings.
Disable the feature WPS (Wi-Fi Protected Setup). This technology allows you to connect to the network by pressing a button or entering a PIN code, but it has vulnerabilities that allow hackers to guess the password automatically. In the router interface, find the Wireless section and set the WPS status to Disabled.
Regularly check the list of connected clients. If you spot an unfamiliar device, change the password immediately. It's also a good idea to hide your network name (SSID Broadcast) so it won't appear in the list of available networks on your neighbors' phones, and they'll only be able to connect to it by manually entering the name.
Remember that absolute security doesn't exist, but a combination of a complex password, disabled WPS, and periodic client list checking makes your network inaccessible to 99% of potential intruders. Be vigilant and monitor your digital perimeter.
Is it possible to block a device if it is currently not in Wi-Fi range?
Yes, if you use MAC filtering (Blacklist) in your router settings. You add the device's address to the blacklist, and the router will reject its connection attempts, even if the device comes back within range within a week.
Will a blocked user see that they have been kicked?
Most likely, yes. Their device's connection status will change to "Limited" or "No Internet Access," or the device will constantly try to connect and reset. This is immediately noticeable.
What should I do if I blocked myself?
The only way to restore access is to connect your computer to the router using a network cable (LAN). A cable connection usually allows access to settings even if Wi-Fi is blocked. After this, you can remove your MAC address from the blacklist.
Does blocking devices affect internet speed?
Yes, positively. By removing unnecessary devices, you free up the network bandwidth and the router's processor resources. This is especially noticeable if you had many devices connected to the network downloading updates or streaming video in the background.