The situation when third-party devices connect to your wireless network is familiar to many router owners. Internet speed Your internet connection is dropping, your ping in games is increasing, and your bandwidth is being wasted. These are sure signs that a neighbor or passerby has taken advantage of your hospitality, especially if you haven't set a secure password yet.
Equipment owners TP-Link You can easily fix this situation by using your router's built-in security features. You don't need to be a system administrator to restrict access from unwanted devices. Simply access the web interface and follow the step-by-step instructions.
In this article, we will discuss in detail how to block Wi-Fi from other TP Link users using blacklist and MAC address filtering. You'll learn to distinguish your gadgets from others and permanently block unauthorized access.
Analyzing the list of connected clients
Before blocking anyone, you need to determine exactly who is on your network. Users often panic prematurely when they see unfamiliar device names that actually belong to them. Smart plugs, refrigerators, or TVs may appear under strange chip manufacturer names.
First, you need to log into your router's control panel. Open any browser on a device connected to the network and enter the IP address in the address bar. Typically, for models TP-Link This 192.168.0.1 or 192.168.1.1If these addresses don't work, check the sticker on the bottom of the case—it contains the exact IP address and authorization information.
After entering your login and password (by default, it is often admin/admin), go to the section Wireless (Wireless mode) and find the item Wireless Statistics (Wireless Statistics). This will display a table with all active connections. Carefully examine the column MAC Address and the current status of data transfer.
To accurately identify a device, temporarily disable Wi-Fi on your phone or tablet and see which entry disappears from the list. Repeat this process for all known devices. The remaining "ghost" devices are the ones you need to block.
There is a simple way to double-check the data using the command line on your computer. Click Win + R, enter cmd and run the command arp -aThis will display a table of IP and physical address mappings, which will help you match the data to the router interface.
Setting up MAC address filtering
The most effective method to block Wi-Fi from other TP Link users is to use the function Wireless MAC FilteringIt allows you to create a list of approved devices or, conversely, a list of blocked ones. The second option (Blacklist) is more convenient if you have many devices, but one or two offenders have appeared.
Find the section in the menu Wireless -> Wireless MAC FilteringBy default, this function is disabled. Click the button Enable (Enable) and select the option Deny the stations specified by any enabled entries in the list to access (Deny access to those on the list). This means that everyone not on the list works normally, and those on the list are blocked.
Now you need to add the MAC addresses of the intruders that you identified in the previous step. Click Add New (Add new). In the field MAC Address Enter the address of someone else's device in the field Description write something like "Neighbor Phone" and make sure the status is set to Enabled.
☑️ Check before blocking
After adding all unwanted guests, don't forget to click the button Save (Save). The changes will take effect almost immediately. If the offender was online when the block occurred, their connection will be cut off and they will no longer be able to connect, even if they know the password.
⚠️ Warning: Be extremely careful when entering MAC addresses. A single character error (for example, mixing up 0 and O) could result in you blocking the wrong device or, conversely, creating a security hole.
Using device whitelisting
If you want to ensure maximum security, it is better to use the mode Whitelist (Whitelist). In this case, only devices you've personally added to the database can access the network. All others, even with the correct Wi-Fi password, won't be able to connect.
To activate this mode in the same menu Wireless MAC Filtering select an option Allow the stations specified by any enabled entries in the list to access (Allow access only to specified users.) This is a radical measure that completely closes the network to the outside world.
The main drawback of this approach is the need to manually add each new device. When you buy a new smartphone or have guests over, you'll have to go into your router settings and enter their MAC addresses each time. However, for offices or apartments where privacy is important, this is the best choice.
What to do if you blocked yourself?
If you enabled the whitelist but forgot to add your current device, you'll lose Wi-Fi access. In this case, the only solution is to connect via a LAN cable or reset the router using the Reset button on the router.
When using a whitelist, it's recommended to keep a paper or digital log of all your devices. Write down the models of phones, laptops, and TVs next to their MAC addresses. This will save you time in the future when you need to search for information about a specific device.
Changing your password and security settings
MAC address blocking is great, but if strangers already know your password, your security has been compromised. The most reliable way to kick everyone out immediately is to change your wireless network password. After this, all devices will be disabled and will only be able to reconnect after entering the new password.
Go to the menu Wireless -> Wireless SecurityThere are several critical parameters to consider here. First, select the encryption type. WPA2-PSK (or WPA3, if your router is modern). This is a modern standard that is difficult to hack.
Second, create a complex password. It should contain at least 8 characters, including uppercase and lowercase letters and numbers. Avoid using birthdays, phone numbers, or simple sequences like "12345678."
You can also hide the network name (SSID) in this section. If you enable this option Enable SSID Broadcast in position Disable, your network will disappear from the list of searchable networks on your neighbors' phones. You'll only be able to connect by manually entering the network name and password.
Comparison of access restriction methods
The choice of protection method depends on your goals and technical savvy. Some methods are suitable for temporary restrictions, while others provide permanent protection. Below is a table to help you determine the optimal security strategy for your situation.
| Method of protection | Difficulty level | Efficiency | Convenience |
|---|---|---|---|
| Change password | Short | High | Average (must be re-entered) |
| Blacklist | Average | Average | High (doesn't interfere with others) |
| Whitelist | High | Maximum | Low (laborious to add) |
| Hiding the SSID | Average | Low (protection from curious people) | Low (inconvenient for connecting guests) |
As the table shows, there is no perfect solution. A combination of methods, such as a strong password and periodic blacklist checks, provides the best results. Don't rely on just one barrier.
Common blocking issues
Sometimes users encounter a problem where the "intruder" continues to consume traffic after all the settings have been configured. This is most often due to the MAC address randomization feature introduced in iOS and Android. The phone can present itself to the router under a different address each time, bypassing your blacklist.
In this case, MAC filtering becomes ineffective. The only solution is to strengthen encryption and change your password more frequently. The problem may also lie in caching browser settings or the router itself.
Try a hard reboot of the router. Unplug the router for 10-15 seconds, then plug it back in. Wait for the system to fully boot up (usually 1-2 minutes) and check the client list again.
⚠️ Note: The interface of modern TP-Link routers (blue theme) differs from older models (green theme). Menu items may have different names, for example, "Wireless" may be called "Wi-Fi," and "MAC Filtering" may be called "Access Control." Look for similar sections.
If all else fails, your router may be infected with a virus or hacked. In rare cases, attackers may be able to access the admin panel. In this situation, the only solution is a factory reset and setting a new password for the admin panel.
Questions and Answers (FAQ)
Can a blocked user reconnect?
If you're using a blacklist, then no, as long as their MAC address is on the block list. However, if they change their device's MAC address (which is possible on some operating systems) or you reset the router, access will be restored.
Will my internet speed decrease if I have many devices connected?
Yes, the Wi-Fi channel is shared among all active users. The more devices there are, especially if they're downloading files or watching 4K videos, the less speed each one gets. Blocking unnecessary clients will restore your performance.
How to find your phone's MAC address?
On Android the path is usually: Settings → About phone → General information (or Status). On iPhone: Settings → General → AboutLook for the line "Wi-Fi Address" or "Wi-Fi Address".
What should I do if I forgot my router admin password?
If you changed the default password and forgot it, you can't restore access without resetting the settings. You'll have to hold down the button Reset on the router body for 10 seconds. After this, the device will return to factory settings, and you will have to set up the internet again.
Does blocking devices affect the operation of a smart home?
If you use a whitelist, new smart home devices won't connect until you add them. If you use a blacklist, your smart home won't be affected unless you accidentally block light bulbs or outlets.