Have you noticed your internet speed has suddenly dropped, and unknown devices have appeared in the list of connected devices? Or has a neighbor "accidentally" learned your Wi-Fi password and is now actively using it? Blocking access to your network from strangers is a challenge almost every router owner faces. But simply changing the password isn't enough: experienced users can guess it in a matter of minutes, and some devices (such as smart speakers or cameras) store old connection data.
In this article we will look at 7 working methodsHow to reliably block Wi-Fi access for other users—from basic methods (changing passwords, hiding networks) to advanced ones (MAC address filtering, guest networks, time limits). You'll also learn how identify "parasites" on your network and why some security methods may be useless against experienced hackers. All instructions apply to routers. TP-Link, ASUS, Keenetic, MikroTik and other popular brands.
1. Checking Connected Devices: Who's Stealing Your Wi-Fi?
Before you block access, you need to understand which devices exactly connected to your network. Most modern routers display a list of active clients in the web interface. Here's how to find it:
- 🔍 On TP-Link: go to
Wireless Mode → Wireless Mode Statistics. - 🔍 On ASUS: open
Network Map → Clients. - 🔍 On Keenetic: go to
Devices → Device List. - 🔍 On MikroTik: use
IP → DHCP Server → Leases.
If there are unknowns in the list IP or MAC addresses, they can be blocked directly in the router interface (more on this in the next section). Please note unusual names: for example, devices with names like android_123456 or iPhone-7plus may belong to neighbors. Also check connection time: If the gadget is active at night when you are sleeping, this is a clear sign of a “parasite”.
⚠️ Attention: Some routers show devices in the list that previously were connected to the network but are now disconnected. To see only active clients, refresh the page or reboot the router.
2. Changing your Wi-Fi password: Why it doesn't always work
The most obvious way to restrict access is change password from Wi-Fi. However, this method has several pitfalls:
- Devices with stored data. Smartphones, tablets, and laptops remember passwords. Unless you manually delete the network on each device, they will automatically reconnect after you change the password.
- Smart technology. Columns Amazon Echo, cameras Xiaomi or televisions Samsung may not support rapid network switching and will require a complete reconfiguration.
- Weak passwords. If the new password is simple (for example,
12345678orqwerty), it is easy to select using special programs.
To ensure that changing your password is effective:
- Use complex password at least 12 characters long with numbers, letters and special characters (for example,
WiFi$ecure_2026!Kot). - Change network name (SSID) - this will force all devices to “forget” the old settings.
- Turn on WPA3 encryption (if the router supports it). It's more reliable.
WPA2, but may not work with older gadgets.
Example of a strong password:M$k8!P@ss_Router26#Vpn
(combination of upper/lower case letters, numbers and symbols)
⚠️ Attention: If after changing the password some of your devices stop connecting, check if they supportWPA3In this case, go back toWPA2-PSKor update the firmware of your gadgets.
Delete the old network on all your devices|
Check the connection of smart devices (speakers, cameras) |
Update the password in the guest network settings (if any)|
Write down the new password in a safe place (not on a sticker on the router!)-->
3. Hiding a Wi-Fi network: pros and cons of the method
Many users believe that if hide SSID (network name), then no one will connect to the Wi-Fi. In practice, this works. partially:
- ✅ Pros: random users will not see your network in the list of available ones.
- ❌ Cons: Experienced hackers can detect hidden networks using programs like Wireshark or Airodump-ng.
- ⚠️ Nuance: Hiding the SSID may cause connection issues with some devices (such as printers or smart bulbs).
How to hide a network:
- Go to your router settings (usually at
192.168.0.1or192.168.1.1). - Go to the section
Wireless → Wi-Fi Settings(the name may differ). - Find the option
Hide SSID(orHide SSID,Enable Hidden Wireless) and activate it. - Save the settings and reboot the router.
After this, your network will disappear from the list of available ones, but you can connect to it manually by specifying SSID and password. This method is best combined with MAC address filtering or time limits for more reliable protection.
How to connect to a hidden network on Android/iOS
Android: Go to Settings → Wi-Fi → Add network, enter SSID, select the security type and enter the password.
iOS: Go to Settings → Wi-Fi → Other network, enter the network name and password.
4. MAC address filtering: reliable, but not ideal
Each device has a unique MAC address (For example, 00:1A:2B:3C:4D:5E). Many routers allow you to create a "whitelist" of allowed addresses, blocking all others. This is one of the most effective security methods, but it has limitations:
| Advantages | Flaws |
|---|---|
| High level of protection against accidental connections | MAC addresses can be spoofed (spoofing) |
| Works even if the Wi-Fi password is known | You need to manually add addresses of new devices |
| Suitable for offices and public networks | Does not protect against attacks through router vulnerabilities |
How to set up filtering:
- Find the MAC addresses of your devices:
- 📱 Android:
Settings → About phone → General information → Wi-Fi MAC address. - 🍎 iPhone:
Settings → General → About → Wi-Fi Address. - 💻 Windows: run the command
ipconfig /allVCMDand find the linePhysical address.
- 📱 Android:
Wireless Mode → MAC Filter.Allow only specified (or Whitelist).⚠️ Attention: If you buy a new device (such as a smartphone or smartwatch), you'll need to add its MAC address to the list manually. Also, some manufacturers (e.g., Apple) are used MAC address randomization to protect privacy, which may cause connection problems.
5. Guest Network: How to Share Access Without Risks
If you need to provide Wi-Fi access to guests but don't want to risk your main network, use guest modeThis feature creates a separate network with its own password and restrictions:
- 🔒 Guests won't be able to see devices on your primary network (such as printers or network drives).
- ⏱️ You can limit the speed or operating time of the guest network.
- 🔄 Easily change the guest access password without affecting the main network.
How to set up a guest network on popular routers:
| Router brand | Path to settings | Peculiarities |
|---|---|---|
| TP-Link | Guest Network → Settings |
You can limit the bandwidth |
| ASUS | Guest Network → Enable Guest Network (2.4GHz/5GHz) |
Supports separate SSID for guests |
| Keenetic | Home Network → Segments → Guest Network |
Automatic shutdown after N hours |
| MikroTik | IP → Hotspot or Wireless → Security Profiles |
Requires manual VLAN configuration |
Recommendations for setting up:
- Use for guest network separate SSID (For example,
MyWiFi_Guest). - Limit speed up to 10-20 Mbps, so that guests do not overload the channel.
- Set up automatic shutdown in 2-4 hours (if the router supports it).
- Turn it off local network access (option
AP IsolationorClient Isolation).
6. Time and traffic restrictions
If you want Wi-Fi to be available only during certain hours (for example, for children or employees), use time limitYou can also set limits on traffic volume for individual devices.
Application examples:
- 🕒 Parental control: turn off the internet after 10:00 pm.
- 📊 Limitation for smart devices: The camera transmits data only during the day.
- 🚫 Blocking "parasites": disable unknown devices permanently.
How to set up on TP-Link:
- Go to
Advanced Settings → Access Control. - Create a new rule by specifying
MAC addressdevices. - Select the days of the week and time interval (eg.
Mon-Fri, 08:00–18:00). - Save the rule and activate it.
On ASUS:
- Go to
Administration → Time Control. - Add device by
MACorIP. - Specify the schedule and apply the settings.
⚠️ Attention: Some devices (such as smart speakers or security systems) may not function properly with time restrictions. Before setting them up, check that they don't require a permanent internet connection.
7. Additional protective measures: what to do if nothing helps
If, after all these steps, strange devices continue to appear on your network, the problem may be more serious than it seems. Here's what you can do:
- 🔄 Resetting the router to factory settings. Sometimes firmware bugs can allow restrictions to be bypassed. A reset will return everything to a clean state.
- 🛡️ Firmware update. Outdated versions of your router's software may contain vulnerabilities. Check for updates in the section
System → Firmware Update. - 🔌 Disabling WPS. Technology
Wi-Fi Protected SetupVulnerable to brute-force attacks. Disable it in your security settings. - 📡 Change Wi-Fi channel. If your neighbor is using the same channel, their devices can eavesdrop on your traffic. Choose the least congested channel in
Wi-Fi Settings → Channel. - 🔗 Using VPN on a router. This encrypts all traffic, making it impossible to intercept. Supported by routers with OpenVPN or WireGuard.
If you suspect your router has been hacked (for example, settings are changing on their own or unknown port rules are appearing), follow these steps:
- Disconnect the router from the Internet (remove the cable
WAN). - Reset settings with the button
Reset(hold for 10-15 seconds). - Update the firmware from the manufacturer's official website.
- Change the login and password of the router administrator (do not use the default ones)
admin/admin). - Set everything up again by following the instructions in this article.
⚠️ Attention: If after the reset other people's devices continue to appear on the network, the problem may be physical access to the router (for example, someone connects via a cable or a button WPS). Check that you are not leaving the router unattended.
FAQ: Frequently asked questions about blocking Wi-Fi access
Is it possible to block access to a specific device by IP?
Yes, but it is less secure than blocking by MAC address. IP addresses in the local network can change (if enabled) DHCP), so the blocking will only work until the next connection. To block by IP:
- Find the device's IP in the router's client list.
- Go to
IP address filterorFirewall. - Add a block rule for this IP.
For permanent blocking it is better to use MAC filtering.
Why do some devices still connect after changing the password?
This happens for three reasons:
- Data caching. Devices (especially on Android or iOS) may retain old settings. Delete the network manually and reconnect.
- Smart technology. Some gadgets (for example, Amazon Echo or Xiaomi) automatically connect to known networks. They need to be reconfigured.
- Password leak. If you previously shared your password with a neighbor or guest, they may have saved it. In this case, changing SSID along with the password.
How do I know if my Wi-Fi has been hacked?
Signs of a hacked router:
- 🔴 Unknown devices appear in the list of devices
MAC addresses. - 🔴 Router settings change on their own (for example, ports open).
- 🔴 Internet speed drops for no apparent reason.
- 🔴 The router overheats or reboots frequently.
- 🔴 In the router logs (
System → Journal) there are suspicious entries.
If you notice at least one of these signs, reset the router to factory settings and update the firmware.
Does MAC address blocking work against hackers?
Filter by MAC address protects against accidental connections, but does not protect against targeted attacksAn experienced hacker can:
- Fake
MAC address(spoofing). - Exploit vulnerabilities in router firmware.
- Connect via
WPSor other protocols.
For maximum protection, combine MAC filtering with complex password, disabling WPS And regular firmware updates.
Is it possible to limit the speed for individual devices?
Yes, many routers support it. QoS (Quality of Service) or Bandwidth ControlFor example, on TP-Link:
- Go to
Additional settings → QoS. - Turn on
Bandwidth control. - Add a rule for
MAC addressesorIPdevices. - Specify the maximum speed (eg.
5 Mbps).
On ASUS a similar function is called Adaptive QoS and is located in the section Local area network.