How to Completely Block Wi-Fi Access: From Passwords to Hidden Networks

Have you noticed your internet speed has suddenly dropped, and unknown devices have appeared in your list of connected devices? Or do you simply want to secure your network from neighbors who "accidentally" connect to your Wi-Fi? There are several ways to block Wi-Fi access, from a basic password change to advanced methods like MAC filtering or guest network with limitations. In this article, we'll cover all the current methods, including the nuances for different router models and mobile hotspots.

It is important to understand that simply changing the password is not enough if the attacker already knows it or exploits protocol vulnerabilities. WPA2We'll show you how to combine methods for maximum protection without sacrificing convenience. We'll also explain why some "folk" advice (like disabling DHCP) do not work or even harm safety.

1. Changing your Wi-Fi password: a basic but effective method

The most obvious way to block access is to change the Wi-Fi password. However, many people do this incorrectly: they use simple combinations like 12345678 or date of birth, which can be hacked in minutes. To ensure your password truly protects your network:

🔐 Length not less than 12 characters (optimally 16+). Short passwords are vulnerable to brute-force attacks.
🎲 Use a mix of letters (upper and lower case), numbers, and symbols: for example, K0ff3e$h0t!WiFi.
📝 Don't store your password in your phone's notes or on a sticky note under your router. For secure storage, use a password manager (KeePass, Bitwarden).
🔄 Change your password every 3-6 months, especially if guests connect to the network.

How to change the password on different routers:

🔧 TP-Link: Wireless → Wireless Security, field PSK password.
🔧 ASUS: Wireless Network → General → WPA Pre-Shared Key.
🔧 Keenetic: Wi-Fi → Access Point → Network Key.
🔧 Xiaomi: Wi-Fi → Wi-Fi Settings → Password.

⚠️ Important: After changing the password, all devices will be disconnected from the network. Prepare a list of gadgets that will need to be reconnected in advance, especially if you have smart devices (cameras, light bulbs) – they may need to be reconfigured.

2. MAC filtering: white and black lists of devices

MAC address — a unique identifier for a network device. MAC filtering allows you to allow connections only to specific devices or, conversely, block specific ones. This method is useful if you want to:

🏠 Restrict children's access by time (for example, only from 5:00 PM to 8:00 PM).
🚫 Block a neighbor's device that connects without permission.
🔒 Add an extra layer of protection to your password.

How to set up MAC filtering:

Find the MAC addresses of your devices:
- On Android: Settings → About phone → General information → Wi-Fi MAC address.
- On iPhone: Settings → Wi-Fi → (i) next to the network → MAC address.
- On Windows: run in command line ipconfig /all and find the line Physical address.

Go to your router settings and find the section MAC filter (at TP-Link This Wireless Mode → MAC Filtering).

Select mode:

Whitelist — only devices from the list will be able to connect.
Blacklist — only the specified MAC addresses will be blocked.
Add addresses and save settings.

Router brand	Path to MAC filter	Does the schedule support it?
TP-Link Archer C6	`Advanced Settings → Wireless → MAC Filtering`	Yes
ASUS RT-AX55	`Wireless Network → MAC Filter`	Yes (through `Parental Controls`)
Keenetic Extra	`Home Network → Devices → Access Rules`	Yes
Xiaomi Mi Router 4A	`Wi-Fi → Advanced Settings → MAC Address Filter`	No

⚠️ Please note: MAC addresses can be spoofed, so this method is not 100% secure. Use it in conjunction with a strong password and encryption. WPA3.

📊 How often do you change your Wi-Fi password?

Never

Once a year

Every 6 months

Only when I notice problems

3. Hiding the Network Name (SSID): Pros and Cons

Many people believe that if you hide the network name (SSID), then no one will connect to the Wi-Fi. This is a myth: experienced users can find a hidden network using special utilities (Wireshark, NetStumbler). However, hiding the SSID will make life more difficult for casual "freeloaders" and reduce the number of connection attempts.

How to hide a network:

🔧 TP-Link: Wireless → Basic Settings → Hide SSID (check the box).
🔧 ASUS: Wireless Network → General → Hide SSID.
🔧 Keenetic: Wi-Fi → Hotspot → Hide network.

Once you hide a network, it won't appear in the list of available Wi-Fi networks. To connect, you'll need to enter the SSID manually:

On Android: in Wi-Fi settings, tap Add a network and enter the network name, security type and password.
On Windows: Control Panel → Network and Internet → Manage wireless networks → Add.

Why doesn't hiding your SSID protect you from hackers?

The hidden SSID is still transmitted in clear text in the service packets (beacon frames) sent by the router. Programs like Airodump-ng can intercept these packets and determine the network name. Furthermore, devices connected to the hidden network themselves send out requests with its name, making detection even easier.

The main disadvantage of hiding the SSID is the inconvenience of connecting new devices. Also, some "smart" gadgets (for example, Amazon Echo or Google Nest) may not see hidden networks during initial setup.

4. Disabling WPS: A vulnerability many forget about

WPS Wi-Fi Protected Setup (WPS) is a feature for quickly connecting devices using a PIN code or a button on the router. The problem is that an 8-digit PIN code can be cracked in a few hours, even if you have a strong Wi-Fi password. Many routers enable WPS by default, making the network vulnerable.

How to disable WPS:

🔧 TP-Link: Wireless Mode → WPS Settings → Disable WPS.
🔧 ASUS: Wireless Network → WPS Button → Disable.
🔧 Keenetic: Wi-Fi → Access Point → WPS Mode → Disabled.

⚠️ Attention: On some routers (for example, Zyxel Keenetic) WPS cannot be disabled completely, but you can set a complex PIN code or disable the PIN connection, leaving only the button.

If you really need the quick connect feature (for example, for smart light bulbs), use alternatives:

🔑 QR code (available on some routers) ASUS And Xiaomi).
📱 Manufacturer's application (For example, TP-Link Tether or Mi Wi-Fi).

5. Guest Network: Limited Access Without Risks

If you often provide Wi-Fi to guests, but do not want them to have access to your local devices (printers, NAS), set up guest networkIt operates separately from the main one and has its own security settings.

Benefits of a guest network:

🔒 Isolation from the main network (guests won't see your devices).
🕒 Time limit (for example, access only for 2 hours).
📶 Speed limit (to prevent guests from "eating up" all the traffic).

How to set up a guest network:

🔧 TP-Link:
1. Go to Guest network.
2. Enable guest access and set a separate password.
3. In the section Additional settings mark Allow guests to access the Internet And Deny access to local network.

🔧 ASUS:

Open Guest network in the menu.
Please enter the network name (eg. Guest_WiFi) and password.
IN Security settings select Isolate guests.

Set a complex password (different from the main network)

Disable access to local devices

Limit speed (if your router supports it)

Enable the automatic shutdown timer

-->

Some routers (eg. Keenetic) allow you to create multiple guest networks with different permissions. This is convenient if you want to grant more rights to regular guests (such as family members) and fewer to occasional visitors.

6. Time limits and traffic control

If you want to block Wi-Fi access at a certain time (for example, at night or when you are not at home), use parental control or Wi-Fi scheduleThis feature is available in almost all modern routers.

Configuration examples:

🕒 TP-Link:
1. Go to Access Control → Rules.
2. Add a new rule, select the device by MAC address.
3. Specify the days of the week and hours when access is prohibited.

🕒 ASUS:

Open Parental Controls → Devices.
Select the gadget and click Time limit.
Set up a schedule (for example, access is blocked from 11:00 PM to 7:00 AM).

You can also limit Internet speed for individual devices:

📉 Keenetic: Home Network → Devices → Speed Limit.
📉 Xiaomi: Wi-Fi → Device Management → Speed Limit.

⚠️ Note: The time limit only applies to devices that have previously connected to the network. If an attacker changes the MAC address, the rule will no longer apply.

For advanced traffic control, use the features QoS (Quality of Service). For example, on routers ASUS You can prioritize traffic for specific devices (for example, give maximum speed Smart TV, and leave the minimum for guest devices).

7. Advanced Methods: VLANs and a Separate Network for IoT

If you have a lot of smart devices (cameras, sockets, columns), which are often targeted by hackers, it makes sense to move them to a separate network (VLAN). This will allow:

🛡️ Isolate IoT devices from the main network (even if they are hacked, the attacker will not gain access to your data).
🔄 Simplify traffic management (e.g. limit speed for cameras).
🔒 Block external access to the IoT (many devices have vulnerabilities in the web interface).

How to configure VLAN on a router Keenetic:

Go to Home Network → Segments.
Create a new segment (eg. IoT_Network).
Assign it a separate IP range (eg. 192.168.2.0/24).
In the Wi-Fi settings, create a separate access point for IoT devices and bind it to the new segment.
Connect your IoT devices to the new network and configure firewall rules (Firewall) to block access from IoT_Network to the main network.

For routers ASUS with firmware Asuswrt-Merlin you can use the function Guest Network Pro, which allows you to create up to 3 isolated networks with different rights.

Common errors when disabling Wi-Fi access

Many users think changing their password or hiding their network is enough, but in practice, this often backfires. Let's look at common mistakes and how to avoid them:

🔄 Using the same password for your router and Wi-FiIf an attacker connects to your Wi-Fi, they can access the router's admin panel and change its settings. Always use different passwords!
📡 Disabling DHCP in an attempt to "lock out" usersThis doesn't prevent experienced users from manually assigning IP addresses. Instead, use MAC filtering or VLANs.
🔑 Using WEP instead of WPA2/WPA3Protocol WEP hacked in minutes. If your router doesn't support WPA3, at least use it WPA2-AES.
📱 Ignoring firmware updatesOutdated firmware may contain vulnerabilities that allow you to bypass all your security settings. Check for updates every 2-3 months, especially if your router is older than 2 years.

Another common mistake is using standard logins/passwords to log into the router (For example, admin/admin). Always change them for unique combinations!

⚠️ Warning: Some "tips" from older articles may be dangerous. For example, disabling encryption (Open Network) or use WPS with PIN code only increases the risks. Follow your router manufacturer's current recommendations.

FAQ: Answers to Frequently Asked Questions

Is it possible to block Wi-Fi access for just one device?

Yes, use it for this MAC filtering in blacklist mode. Add the MAC address of the device you want to block to the blacklist. You can also use parental control, if the router supports time blocking for specific gadgets.

How do I know who is connected to my Wi-Fi?

There are several ways:

From the router panel: find the section Connected devices or DHCP clients.
Using mobile applications: Fing (Android/iOS) or WiFi Guard.
From the command line on Windows: run arp -a and compare IP addresses with known devices.

If you see an unknown device, immediately change the password and set up MAC filtering.

What should I do if my neighbor hacked my Wi-Fi and changed my router settings?

If you cannot access your router control panel:

Reset the router to factory settings (button Reset on the back panel, hold for 10-15 seconds).
Connect to the router via cable and log in using the standard login/password (usually admin/admin or indicated on the sticker).
Change your administrator password and Wi-Fi settings immediately.
Check if they have been added to DMZ or Port forwarding suspicious rules - they need to be removed.

If the problem persists, update your router firmware or contact the manufacturer's support.

How do I block access to Wi-Fi on my phone (mobile hotspot)?

If you are distributing the Internet from your phone, then:

📱 On Android: go to Settings → Hotspot & tethering → Mobile hotspot → Set up hotspotHere you can change your password or disable distribution.
🍎 On iPhone: Settings → Personal Hotspot → Wi-Fi Password.

You can also limit the number of connected devices (on Android This is done in the same access point settings).

Does turning off Wi-Fi at night help with security?

Yes, this reduces the risk of nighttime attacks, especially if you live in an apartment building. However, there are some caveats:

✅ Pros: Energy savings, protection from brute-force attacks during non-working hours.
❌ Cons: "smart" devices (cameras, sensors) will stop working, and some routers may lose settings if frequently turned on/off.

The alternative is to use Wi-Fi schedule (if the router supports it) or parental control to block access during certain hours.

How to Completely Block Wi-Fi Access: From Passwords to Hidden Networks

1. Changing your Wi-Fi password: a basic but effective method

2. MAC filtering: white and black lists of devices

3. Hiding the Network Name (SSID): Pros and Cons

4. Disabling WPS: A vulnerability many forget about

5. Guest Network: Limited Access Without Risks

6. Time limits and traffic control

7. Advanced Methods: VLANs and a Separate Network for IoT

Common errors when disabling Wi-Fi access

FAQ: Answers to Frequently Asked Questions

📖 Read also