Blocking Wi-Fi for Individual Devices: A Complete Guide 2026

Have you noticed someone connecting to your Wi-Fi without permission? Or do you want to restrict internet access for certain devices in your family? Blocking Wi-Fi for specific devices is not only a way to save data but also an important step in protecting your network from unauthorized access. In this article, we'll cover all the current methods: from standard MAC filtering to hidden router functions that few people know about.

It doesn't matter what kind of router you have - TP-Link, ASUS, Keenetic or MikroTik — the principles of device blocking are universal. The main thing is to understand that restrictions can be imposed at both the router, as well as through third-party programs. We'll also explain how to bypass common errors that prevent blocking, and what to do if the device still connects to the network.

Before you begin, make sure you have access to your router's admin panel. Typically, this can be accomplished by entering [address] in your browser. 192.168.1.1 or 192.168.0.1 and log in (default logins and passwords are listed on the device's sticker). If you've changed them but forgotten them, you'll have to reset them to factory settings.

1. MAC address blocking: reliable, but not perfect

MAC filtering — the most common way to restrict Wi-Fi access for specific devices. Each gadget (smartphone, laptop, smart speaker) is assigned a unique MAC address, by which the router identifies it on the network. Adding an address to the blacklist will completely block the connection.

To find the MAC address of a device:

• 📱 On Android: go to Settings → About phone → General information → Wi-Fi MAC address.
• 🍎 On iPhone/iPad: Settings → Wi-Fi → (i) next to the network → MAC address.
• 💻 On Windows: run in command line

  ipconfig /all

  and find the line Physical address.
• 🖥️ On MacOS: open System Preferences → Network → Advanced → Ethernet/Wi-Fi.

Now add the address to the router's blacklist:

1. Log in to your admin panel (usually 192.168.1.1).
2. Find the section Wireless (Wi-Fi) → MAC Filter (the name may differ).
3. Select mode Blacklist (or Deny).
4. Enter the MAC address of the device and save the settings.

⚠️ Attention: MAC addresses can be spoofed! If an attacker knows which addresses are allowed on your network, they can change their device's MAC address and bypass the block. This method is only reliable against random connections.

Find the MAC address of the target device

Write it down on paper or in notes

Make sure your router supports filtering

Check if the device is on the whitelist (if used)

-->

2. Parental control: time and content restrictions

If you need to not only block a device, but also restrict its access to the Internet during certain hours (for example, for children), use the function parental controlIt's available on almost all modern routers and allows you to:

• 🕒 Set an access schedule (for example, the Internet is disabled from 8:00 PM to 8:00 AM).
• 🚫 Block specific websites or content categories (social networks, games, torrents).
• 📱 Bind restrictions to the MAC address or IP of the device.

Setting up an example TP-Link:

1. Go to Additional settings → Parental controls.
2. Add a new rule by specifying the MAC address of the device.
3. Select the days of the week and time intervals for blocking.
4. Save and apply the settings.

On routers ASUS This function is called AiProtection → Parental Control, and on Keenetic — Family → DevicesThe interface may differ, but the logic is the same: link a device to a rule and set up restrictions.

⚠️ Attention: Parental controls only work for devices connected to a router. If the device is using mobile internet (4G/5G) or a VPN, restrictions will not apply.

3. IP Blocking: An Alternative to MAC Filtering

If the MAC address of the device changes (for example, on some Android-devices when the function is enabled Randomized MAC), you can block it by IP addressTo do this:

1. Find the device's IP in the list of connected clients (section DHCP or Devices in the router panel).
2. Reserve this IP for the device so that it does not change (optional IP-MAC binding).
3. Add a rule to Firewall, blocking traffic from this IP.

Example rule for Keenetic:

Source: [IP devices]
Purpose: Any
Action: Block

On routers ASUS this is done through Firewall → Filtering Rules, and on MikroTik - through IP → FirewallThe main advantage of this method is stability: even if the MAC address changes, the blocking will remain.

⚠️ Attention: If your network uses dynamic IP allocation (DHCP), bind the MAC address to the IP address in the router settings. Otherwise, after a reboot, the device may receive a new IP address and bypass the block.

4. Hiding a Wi-Fi Network: A Radical Method

If you want to completely eliminate the possibility of connecting unwanted devices, you can hide network name (SSID)In this case, your Wi-Fi will not appear in the list of available networks, and only those who know the exact name and password will be able to connect to it.

How to hide SSID:

1. Go to your router settings.
2. Find the section Wireless (Wi-Fi) → Basic Settings.
3. Check the box next to Hide SSID (or Hide SSID).
4. Save the settings and reboot the router.

Now, to connect to the network, the user will have to:

1. Manually add the network in the device settings.
2. Specify the exact name (SSID) and password.

This doesn't block devices outright, but it makes connecting so inconvenient that most casual users won't bother trying. However, This method does not protect against targeted attacks - an experienced user can find a hidden network using specialized programs (for example, Wireshark or NetSpot).

How to connect to a hidden network on Android

1. Open Settings → Wi-Fi.

2. Click Add a network.

3. Enter the network name (SSID) and password.

4. Save and connect.

5. Using a guest network to isolate devices

If you don't want to block the device completely, but want to limit its access to your main network, create guest networkThis is a separate Wi-Fi network with its own name and password, which:

• 🔒 Does not have access to local resources (printers, network drives).
• 📶 May have limited internet speed.
• ⏰ Easily switched off on schedule.

Setting up a guest network on TP-Link:

1. Go to Wireless Mode → Guest Network.
2. Enable the guest network and give it a unique name (for example, MyGuestWiFi).
3. Set a password and limit the speed if necessary.
4. In the section Isolation of clients Enable the option to prevent devices on the guest network from seeing each other.

Now connect the unwanted device to the guest network. It will have internet access, but won't be able to communicate with your main devices. This is convenient for smart devices (cameras, speakers) that don't need access to the local network.

⚠️ Attention: Some smart devices (eg. Xiaomi or Amazon Echo) require a connection to the main network to configure. In this case, configure them first and then reconnect to the guest network.

6. Blocking via third-party programs (for advanced users)

If standard methods fail, you can use specialized software to monitor and block devices on the network. For example:

• 🖥️ GlassWire (Windows/Mac) - Shows all connected devices and allows you to block them.
• 📱 Fing (Android/iOS) - Scans the network and detects unauthorized connections.
• 🌐 OpenWRT (firmware for routers) - allows you to flexibly configure firewall rules.

Example of blocking through GlassWire:

1. Install the program and run a network scan.
2. Find the device you want to block.
3. Right click on it and select Block.
4. The program will add a rule to your computer's firewall, and the device will lose access to the Internet.

For routers with firmware OpenWRT you can create a rule in /etc/config/firewall:

config rule
option name 'Block-Device'
option src 'mac'
option src_mac '00:11:22:33:44:55'
option target 'DROP'

These methods require more technical knowledge but provide maximum control over the network. For example, you can block devices only from accessing specific ports or protocols, rather than blocking them entirely (for example, torrenting or online gaming).

7. What should I do if the device still connects?

If you have tried all the methods but your device still cannot connect to Wi-Fi, check the following:

• 🔄 Reboot your router. Sometimes the settings are applied only after a reboot.
• 📡 Check your Wi-Fi range. Some devices connect to the 5GHz network, but the blocking is configured only for 2.4GHz.
• 🔧 Update your router firmware. Older versions may have filtering bugs.
• 🕵️ Check for duplicate rules. For example, a device can be both blacklisted and whitelisted at the same time.

If nothing helps, try change your Wi-Fi passwordThis is a radical method, but it's guaranteed to disable all devices except those you give a new password to. After changing your password, be sure to update it on all your devices.

Another possible reason is - password leakIf someone has learned your password (for example, through phishing or eavesdropping), they can still connect even after blocking the MAC address. In this case, the only solution is to completely change the password and set up stricter security rules (for example, disabling WPS and inclusion WPA3).

8. Additional security measures

To minimize the risk of unauthorized access, follow these guidelines:

• 🔐 Use WPA3 instead of WPA2 (if the router supports it).
• 🚫 Turn it off WPS - This protocol is vulnerable to brute force attacks.
• 🔄 Update your router firmware regularly (every 3-6 months).
• 📡 Separate the 2.4 GHz and 5 GHz networks if your router supports dual-band.
• 📊 Enable connection logging to track new devices.

It's also useful to set up notifications for new connections. Some routers (for example, ASUS With AiProtection) can send push notifications to your smartphone whenever a new device connects to the network. This will help you quickly respond to suspicious activity.

⚠️ Attention: If you use Mesh systems (For example, Google Nest WiFi or TP-Link Deco), blocking settings may vary. They are usually managed through the mobile app, not the web interface.

FAQ: Frequently asked questions about blocking devices on Wi-Fi

Is it possible to lock a device by name (eg "iPhone")?

No, blocking by device name is not possible, as this name is assigned by the user and can be easily changed. To block, use MAC address or IP address.

How do I know if a device is bypassing my blocking?

Check the list of connected clients in the router panel (DHCP Clients or Connected Devices). If the device is there, despite the blocking, then:

• It connects via a different MAC address (e.g. with randomization).
• The blocking is configured for the wrong Wi-Fi range (2.4 GHz vs 5 GHz).
• The firewall rule is not applied due to a configuration error.

Will the device consume traffic if it is locked?

If a device is blocked at the router level (via MAC filtering or a firewall), it won't be able to connect to the network and, therefore, won't consume your data. However, if blocking is configured on a specific device (for example, via parental controls), it may remain connected to Wi-Fi but won't be able to access the internet.

Is it possible to block a device permanently?

Technically yes, but only if:

• You blocked it by MAC address And Disabled the MAC randomization feature on the device.
• You changed your Wi-Fi password without sharing it with the device owner.
• You are using firmware with advanced settings (for example, OpenWRT), where you can create permanent firewall rules.

In other cases, the block can be bypassed by resetting the network settings on the device or connecting through a different MAC address.

How do I unlock my device if I made a mistake?

To unlock your device:

1. Go to your router settings.
2. Find the section with MAC filtering or firewall rules.
3. Delete the rule associated with the device's MAC or IP address.
4. Save the settings and reboot the router.

If the device was blacklisted, it can also be added to the whitelist (if used).