Many home network owners are familiar with the experience of internet speeds dropping due to unauthorized connections. Users often notice their router is running slower and its lights are flashing more rapidly than usual, even when they're not downloading anything. This is a sure sign that a neighbor or passerby may have accessed your network, especially if you're using a weak password.
You don't need to be a programmer or network engineer to block Wi-Fi access from other users. Modern routers offer convenient tools for managing connected devices directly from your browser. In this article, we'll explore effective protection methods, from simply changing the security key to professional MAC address filtering.
The first step should always be to diagnose the current state of the network. You need to know exactly who is using your line to understand the scale of the problem. Without this information, any action may be in vain, as you won't know whether your protection has worked or whether the intruder still has access.
Analysis of connected devices via a web interface
Before taking any active blocking steps, you need to log into your router settings. To do this, open any browser on a device connected to the network and enter the gateway IP address in the address bar. Most often, this is 192.168.0.1 or 192.168.1.1, but the exact address is always indicated on the sticker under the device body.
After entering your login and password (often admin/admin by default), you need to find the section responsible for the network status. It may be called "Wireless Statistics," "Client List," "DHCP Client List," or "Client List." This is where you'll see a complete picture of which devices are currently consuming your bandwidth.
Carefully examine the list of device names and their MAC addresses. Unrecognizable names like "Android-xyz" or "Unknown Device" should raise red flags. If you see a device that definitely doesn't belong to you or your family, it means your Wi-Fi is being accessed by unauthorized people.
⚠️ Attention: Router interfaces from different manufacturers (TP-Link, ASUS, D-Link, Keenetic) may vary. If you can't find the menu item you need, consult your model's manual, as menu locations often change after firmware updates.
It's important to understand that simply seeing a device isn't enough—you need to be able to identify it. A MAC address is a unique identifier for a network interface, consisting of six pairs of hexadecimal digits separated by colons. Write down the MAC addresses of all your gadgets to avoid accidentally blocking your laptop or TV.
Changing your WiFi network password as a radical method
The easiest and most effective way to instantly disable all unauthorized users is to change your wireless network password. Once you change the security key in your router settings, all devices will lose their connection and will be unable to reconnect without entering new information.
To implement this method, go to the "Wireless" section, then select "Wireless Security." Find the "Password" or "PSK Password" field, enter a new, strong password, and save the settings by clicking "Save." The router may reboot, which is normal.
After changing your password, you'll need to reconnect all your trusted devices. This may take time, but you're guaranteed to get rid of any "spooks" that might have remembered your old password. Use a combination of upper- and lower-case letters, numbers, and special characters.
Avoid using simple words or sequences of numbers. Attackers often use automated password-guessing programs, and complex keys significantly increase the time required to crack a password, making it pointless.
MAC address blocking (Blacklist)
A more flexible method that doesn't require reconnecting all your devices is to use the "Black List" or "MAC Address Filter" feature. This mechanism allows you to block access to specific devices while leaving the network open to everyone else who knows the password.
To configure a blacklist, find the "Wireless MAC Filtering" or "Client Filtering" section in the router menu. You'll need to add the offending MAC address to the blacklist and enable the "Deny" or "Blacklist" rule.
- 📱 Find the MAC address of the unknown device in the list of clients.
- 🚫 Copy the address and add it to your filtering settings.
- ✅ Activate the blocking rule and apply the settings.
- 🔄 Reboot your router for the changes to take effect.
The advantage of this method is that your devices continue to operate without interruption. However, it has a drawback: the MAC address can be spoofed (cloned). An experienced user can change the MAC address of their network card to an authorized one and bypass the block.
☑️ Network security check
Setting up a whitelist
The "White List" or "Allow Only" mode provides the highest level of security. In this case, the router blocks absolutely all connections except those devices whose MAC addresses are added to a special trusted list.
This method is ideal for home networks where the device list is constant. If guests come over, you'll have to manually add their phones to the list or temporarily disable filtering. However, none of your neighbors will be able to physically connect, even if they know your password.
To configure the settings, select the "Allow" filtering mode and add the MAC addresses of all your devices: smartphones, laptops, smart TVs, and light bulbs. Any device not included in this list will be ignored by the router.
| Method of protection | Difficulty of setup | Security level | Guest convenience |
|---|---|---|---|
| Change password | Low | Average | Low (needs to be re-entered) |
| Black List | Average | Average | High (doesn't interfere with others) |
| White List | High | Maximum | Low (manual addition) |
| Disabling WPS | Low | Additional | It doesn't affect |
⚠️ Attention: Be extremely careful when setting up the Whitelist. If you add your computer to it and then lose access to the router (for example, if the WiFi module burns out), you won't be able to access the settings to fix the error without resetting the device.
Disabling the WPS function to protect against hacking
One of the most vulnerable features of modern routers is WPS (Wi-Fi Protected Setup). It's designed to quickly connect devices with the press of a button, but it often contains security holes that allow attackers to recover passwords through brute-force attacks.
Even if you have a strong password, enabling WPS can still be a security vulnerability. We recommend going to "Wireless" -> "WPS" and setting it to "Disable" or "Off." This will close one of the most common loopholes for hackers.
After disabling WPS, new devices will only connect using the standard method—by entering a password. This is slightly less convenient, but significantly more secure for your home network.
Why is WPS dangerous?
The WPS protocol uses an 8-digit PIN code that is verified by the router. Attackers can use programs to automatically brute-force this code. Because the code is short, it can be cracked in a few hours, gaining full access to the network, even if the main WiFi password is very complex.
Additional network security measures
In addition to blocking users, it's worth paying attention to general security settings. Make sure you're using a modern encryption standard. WPA2-PSK or WPA3Outdated WEP and WPA protocols can be easily cracked in minutes.
Also, don't forget to regularly update your router's firmware. Manufacturers release updates that patch software vulnerabilities. You can check for updates in the "System Tools" or "Administration" sections.
If you're using a router provided by your ISP, it often comes with default passwords for the admin panel. Be sure to change the password for accessing your router settings to prevent your neighbors from changing your filtering settings.
Frequently Asked Questions (FAQ)
Can my neighbor steal my internet if I hide my network name (SSID)?
Hiding the SSID isn't a reliable security method. Specialized programs easily detect hidden networks, and an experienced user can connect simply by knowing the name. This only creates the illusion of security and can cause problems connecting your own devices.
What should I do if I blocked myself when setting up White List?
The only solution is to perform a hard reset of the router. Find the small hole marked "Reset" on the router's case and press it with a paperclip for 10-15 seconds while the power is on. The router will return to factory settings, and you'll be able to log in using the credentials on the sticker.
Does the number of connected devices affect internet speed?
Yes, the bandwidth is shared among all active users. If your neighbor is downloading large files or watching 4K videos, your page loading and browsing speeds may drop significantly, especially on lower-speed plans.
Should I change my WiFi password regularly?
It's recommended to change your password at least every six months or if you suspect it may have been compromised. Regularly changing your access key is a good digital hygiene practice.