Many wireless network owners are familiar with the situation where internet speeds drop sharply and unfamiliar devices appear in the list of connected devices. Often, neighbors or passersby, knowing the password, can connect to your router without permission, hogging bandwidth and creating potential security risks for your personal data. This problem can be resolved without waiting for a system administrator or a computer to be available.
Modern technologies allow you to manage your network directly from your smartphone, using a browser or special applications from equipment manufacturers. Blocking devices Using the mobile interface is a quick way to regain full control over your traffic. You don't need to be a networking expert to configure basic security settings; simply follow the clear steps outlined below.
In this article, we'll take a detailed look at all available access restriction methods, from standard password changes to advanced MAC address filtering. We'll explore the interface features of popular routers and address common mistakes users make when trying to banish uninvited guests from their networks.
Diagnostics: How to find guests connected to Wi-Fi
Before taking drastic measures, it's important to confirm the problem and accurately identify the offender. Many routers have built-in monitoring tools that show active connections in real time. However, these built-in lists are often confusing, displaying only IP addresses or network card manufacturer abbreviations.
For a more in-depth analysis, you can use specialized scanner applications available in stores. Google Play And App StoreUtilities such as Fing or Network Scanner, allow you to see detailed information: the device name, its manufacturer, IP and MAC address. This is critically important, since a device with a name Unknown It could be either your neighbor's smart light bulb or your own forgotten gadget.
Pay attention to your traffic activity. If an unknown device is consuming data while you're simply reading the news, this is a clear sign of "spamming." Some advanced routers allow you to set up notifications about new client connections, which is a preventative security measure.
⚠️ Attention: Don't rush to block devices with manufacturer names you don't recognize. Often, a name like Espressif or Tuya your own smart plugs, sensors or vacuum cleaners are hidden.
Once you've compiled a list of suspects, write down their MAC addresses. We'll need this unique identifier to configure filters. Without the exact address, you risk blocking your own device or, conversely, leaving a backdoor for an intruder.
Accessing router settings via a mobile browser
The first and most universal way to manage access is to log into the router's web interface. To do this, your phone must be connected to the router's Wi-Fi network. Open any browser (Chrome, Safari, Firefox) and enter the gateway IP address in the address bar. Most often, this is 192.168.0.1 or 192.168.1.1, but the exact address is always indicated on the sticker on the bottom of the device.
The system will ask for your login and password. If you have never changed them, use the default combination, usually admin/adminFor security reasons, it is strongly recommended to change this information immediately after the first login. Interfaces of modern routers, such as Keenetic, TP-Link or Asus, often have an adaptive layout that is convenient for control from a smartphone screen.
If the standard web version of a website displays incorrectly or the buttons are too small, try switching your browser to "Desktop Site" mode via the settings menu. This will allow you to see all the necessary tabs that may be hidden in the mobile interface.
What should I do if the page address doesn't open?
If your browser says "Unable to access the site," check if your mobile data is enabled. Sometimes your phone will try to switch to 4G when it sees there's no Wi-Fi connection (if the router isn't connected to your provider). Temporarily disable mobile data in your phone's settings and try again.
After successful authorization, you'll be taken to the control panel. Navigation may vary, but the logic remains the same: look for sections related to wireless networking (Wireless), security (Security) or a list of clients (Client List).
Using official manufacturer applications
Many modern network equipment manufacturers have moved away from complex web interfaces in favor of user-friendly mobile apps. This significantly simplifies the task of blocking Wi-Fi from others, especially for beginners. Apps from Tenda, Mi Home (for Xiaomi routers), TP-Link Tether And Keenetic offer an intuitive control interface.
In such apps, a list of connected devices is usually located on the main screen. Often, simply tapping the icon of an unknown device reveals a "Block" or "Deny Access" button. The system will automatically apply the necessary MAC address filters without your intervention.
- 📱 Convenience: Manage access with one click from anywhere in the world if remote access is configured.
- 🔒 Safety: Applications often have built-in vulnerability scanners and warn you about weak passwords.
- 👨👩👧 Parental control: Many applications allow you to not only block, but also limit access time for specific devices.
However, this method has its limitations. The app's functionality may be limited compared to the full web version. For example, fine-tuning the guest network or complex port filtering may only be available through a browser.
| Manufacturer | Application name | Lock function | Remote control |
|---|---|---|---|
| TP-Link | Tether | Yes (via customer list) | A TP-Link ID account is required. |
| Xiaomi | Mi Wi-Fi | There is (speed limit or block) | Mi account required |
| Keenetic | Keenetic | Yes (via priorities and access) | KeenDNS is required |
| Asus | ASUS Router | Yes (in the clients section) | An Asus account is required. |
MAC address filtering method (Blacklist and Whitelist)
The most reliable technical method for blocking Wi-Fi from other users on your phone is to use access control lists. There are two approaches: "Blacklist" and "Whitelist." In the former, you add the offending addresses to a blacklist, and the router blocks them when they attempt to connect.
The second method, Whitelist, is radical, yet extremely effective. You allow access only to specific, pre-defined devices. Everyone else, even with the correct password, will be unable to connect. This is ideal for apartments in multi-unit buildings, where neighbors might try to guess the keys.
⚠️ Attention: When enabling the "Whitelist" mode (Allow only listed MAC addresses), exercise extreme caution. If you don't add your phone's MAC address to the allowed list before enabling the filter, you will lose access to your router settings and internet. Access can only be restored by resetting the router using the reset button.Reset.To configure, go to the section
Wireless MAC FilteringorMAC filteringThere you'll see a field for entering the address. Enter the MAC address of the device you want to block and select "Deny" or "Allow" depending on the filter mode you've selected.☑️ Check before turning on filtering
Completed: 0 / 4Change the password and hide the network name (SSID)
If you don't want to mess around with address lists, the easiest way to kick out all the "freeloaders" is to change your Wi-Fi network password. Once you change the security key, all connected devices will be disconnected and will need to enter the new code to reconnect. This ensures that only those you personally share the new password with will have access.
An additional security measure is to hide the network name (
SSID Broadcast). In this case, your router stops broadcasting its name. It simply won't appear in the list of available networks on your neighbors' phones. To connect, you'll have to manually enter the network name and password in the Wi-Fi settings on your devices.However, it's important to understand that hiding the SSID isn't a panacea. Advanced users with specialized software can see hidden networks. Therefore, this method should be considered an additional layer of protection, not the only security measure.
When changing your password, use complex combinations that include mixed-case letters, numbers, and special characters. Avoid obvious combinations like your date of birth or phone number. A password of 12 or more characters is virtually impossible to brute-force in a reasonable amount of time.
Setting up a guest network for visitors
Often the need to connect someone to the internet arises temporarily: friends, guests, or repairmen are visiting. Giving them access to the main network where your computers, NAS storage, and smart home are located is unsafe. The solution is to create Guest network (Guest Network).
This feature allows you to create a separate access point with its own name and password. The main advantage of a guest network is isolation. Devices in the guest segment cannot access local network resources (printers, files), but can access the internet. You can set speed limits or network time limits for this network.
You can set up a guest network in the same router web interface. Typically, all you need to do is check the "Enable guest network" box, create a name (SSID), and enter a password. After your guests have visited, you can simply disable this feature or change the password without affecting your network!