A sudden drop in internet speed or an unstable connection often indicates that someone has accessed your network. This isn't just annoying when you're trying to watch a movie, but also poses real security risks to your personal data. Neighbors or even hackers could use your data. bandwidth to download large amounts of information or commit illegal actions.
Fortunately, modern routers offer powerful tools for monitoring connected devices. You don't need to be a network engineer to understand basic settings. routerAll you need is access to the administrator's web interface and know which settings to change. We'll cover proven methods that will help you regain full control of your local network.
Before you begin blocking, it's important to understand who exactly you're disabling. Users often confuse their own devices with others, which leads to unnecessary internet access issues. In this article, we'll detail how to identify a device and apply restrictions to it without affecting the operation of other devices.
Analysis of connected devices in the network
The first step is always to accurately identify all clients currently on the air. You'll need to log into your router's control panel, usually accessible at 192.168.0.1 or 192.168.1.1After authorization, look for the section with the wireless network status, which may be called Wireless Status, Client List or Client list.
A table of active connections is displayed here. Note the MAC addresses and IP addresses. If you see a device named Unknown or a name that is unfamiliar to you (for example, Espressif or Shenzhen), this is a cause for concern. Compare the number of connected gadgets with the actual number of phones, laptops, and smart speakers you own.
In some router models, for example Tp-Link or Asus, you can see the current data transfer speed for each client. This is the surest way to identify a traffic hog. If a device that should be in sleep mode is actively downloading data, it should be checked first.
Keep in mind that some devices may appear under strange names due to operating system quirks. For example, a smart kettle might simply be named after a string of numbers. Before blocking, it's best to temporarily disable Wi-Fi on your phone and see if the suspicious entry disappears from the list.
Identifying an intruder by MAC address
The primary identifier on a local network is the MAC address—a unique code embedded in the network adapter. It appears as a combination of six pairs of hexadecimal digits separated by a colon, such as 00:1A:2B:3C:4D:5EThis is how a router distinguishes your laptop from your neighbor's phone.
To be sure that you are blocking the exact device that is bothering you, you can use special utilities on your PC, such as Wireshark or Fing on a smartphone. They scan the air and show not only the MAC address but also the network card manufacturer. This helps you understand what kind of device is connected: if you don't have the equipment from Xiaomi, and there is a device with a vendor in the list Xiaomi Communications, this is a clear candidate for blocking.
Write down the intruder's MAC address. This is critical information, as it will be used in filters. A mistake in even one digit could result in you blocking the wrong user or, conversely, leaving a backdoor open.
MAC address filter blocking method
The most effective way to restrict access is to use MAC filteringThis mechanism allows you to create a whitelist or blacklist of addresses. In Blacklist mode, you specify the addresses of those who are denied access, while everyone else is allowed freely. In Whitelist mode, access is permitted only to selected devices, which provides the ultimate security measure.
To configure, find the section in the router menu Wireless -> Wireless MAC Filtering or MAC address filteringActivate the feature by selecting the "Deny" or "Allow" rule, depending on your strategy. Then add the intruder's MAC address to the list and save the settings.
Once the rules are applied, a device whose address is blacklisted will be physically unable to complete the association process with the access point. Even if it knows the correct Wi-Fi password, it will be denied connection. This is more secure than simply changing the password, as it doesn't require reconfiguring all your personal devices.
☑️ Configuring MAC address filtering
It's worth noting that advanced users can attempt to spoof (clone) their device's MAC address to match one permitted on the network. However, for typical home use, this blocking method is the gold standard for security.
Disabling the client via the router's web interface
Many modern routers, such as Keenetic, Mikrotik or new lines Tp-Link, have a simplified blocking function directly from the client list. You don't need to navigate complex filtering menus. Simply find the device in the list of connected devices and click the lock or cross icon next to its name.
This method often uses the same filtering mechanisms, but is hidden from the user's view behind a user-friendly interface. After pressing a button, the router automatically adds the device's address to the blacklist. Some models even allow you to send a special detachment packet (Death) to immediately kick the intruder out of the network, before the IP lease expires.
If you have an older router without such a button, you'll have to use the manual method via MAC filters described above. In the interface of older models D-Link or Asus This may be the only option. Just remember to click "Save" or "Apply" after completing the configuration, otherwise everything will revert to normal after a reboot.
| Router model | Path to the menu | Lock type |
|---|---|---|
| Tp-Link Archer | Wireless -> Wireless MAC Filtering | Black/White List |
| Asus RT | Wireless -> MAC Filter | Blacklist only |
| Keenetic | Client List -> Block | Instant ban |
| Mikrotik | Wireless -> Access List | Access rules |
Change your password and strengthen your network security
If you discover someone has connected to your Wi-Fi, it's a sign that your current password may have been compromised. Perhaps you shared it with guests, or it was too simple. The most drastic, yet effective, solution is to completely change your security key.
When you change your password, all devices will be automatically disconnected. You'll have to re-enter the new key on all your devices. This is inconvenient, but it ensures that no one who knows the old password will be able to connect again. Use complex combinations of mixed-case letters, numbers, and special characters.
Also make sure you have modern encryption standard enabled. WPA2-PSK or WPA3Old protocol WEP It can be hacked in a couple of minutes, even by a schoolchild with a phone. If your router supports WPA3, be sure to switch to it—it will make life significantly more difficult for those who enjoy free internet.
⚠️ Attention: Changing your password or encryption type will disable all your devices' network connectivity. Make sure you have physical access to the router or an alternate login method (e.g., cable) in case you forget the new password or make a mistake in the settings.
What should I do if I forgot my admin password?
If you haven't changed the factory password for your router's web interface, try the default combinations (admin/admin). If you've changed the password and forgotten it, you'll have to reset the router to factory settings using the Reset button, which will erase all your provider settings.
Hidden SSID and Guest Network
Another layer of security is hiding your network name (SSID). This prevents the router from broadcasting its presence, and you won't see it in the list of available networks on your phone. Connection is only possible by manually entering the network name and password. This doesn't provide 100% protection from hackers, but it will deter most random neighbors.
A more civilized approach is to use a guest network. You can create a separate access point with its own password. You grant guests access only to this one. Even if they try to hack the network or use it for illegal activities, your main home network with your personal files and smart home will remain isolated.
Guest network settings are usually located in the same section as the wireless mode. There, you can set restrictions, such as blocking access to local resources or limiting the speed. This is ideal for parties or when repairmen are visiting.
Don't rely solely on hiding your SSID. Specialized scanners can easily detect hidden networks based on their service packets. Use this as a complementary measure to MAC filtering and strong passwords.
⚠️ Attention: Router interfaces are constantly updated by manufacturers. The layout of menu items may vary depending on the firmware version. If you can't find the settings described, refer to the manual for your specific model or the manufacturer's website.
Does blocking affect internet speed?
Yes, blocking unauthorized users frees up bandwidth. You'll notice a speed boost, especially during peak hours when your neighbors are typically heavily connected.
Frequently Asked Questions (FAQ)
Can a blocked user bypass the ban?
The average user—no. An advanced hacker could try to clone the MAC address of an authorized device, but to do so, they would need physical access to your authorized device or highly sophisticated equipment to intercept packets in real time. For home use, MAC address filtering is a reliable defense.
Do I need to reboot my router after being blocked?
In most cases, changes take effect immediately. However, if the device is already actively transmitting data, it may remain online until its IP address lease expires. Restarting the router ensures that all rules are applied to new connections and that old sessions are terminated.
What should I do if I've locked my device?
If you accidentally blacklisted your phone or laptop, you will have to connect to the router via cable (Ethernet) or reset the router using the reset button. Reset on the case. After the reset, you'll have to reconfigure your connection to your provider.
Does my ISP see that I'm blocking someone?
No, your ISP provides the bandwidth and doesn't control how many devices you have connected to the local network or how you manage them. Blocking occurs at the hardware level.
Does this method work for 5GHz and 2.4GHz?
Yes, filtering rules typically apply to all router radios simultaneously. If you block a device, it won't be able to connect to any of your router's frequencies, even if they have different network names.