How to Block Connections to Your Wi-Fi Router: A Complete Guide (2026)

Have you noticed your internet speed has suddenly dropped, and unknown devices have appeared in the list of connected devices? Or is your neighbor regularly "borrowing" your Wi-Fi without asking for the password? You can prevent strangers from connecting to your router in several ways, from a basic password change to advanced settings like MAC filtering or guest network with restrictions. In this article, we'll examine all current blocking methods, including hidden firmware features. TP-Link, ASUS And Keenetic.

It's important to understand: no single method provides 100% protection, but a combination of two or three methods will make network hacking extremely difficult for most users. For example, even a complex password WPA3 can be brute-forced if the attacker knows your SSID. And here is the combination hidden network + MAC filter + disabled WPS minimizes risks. Below are detailed instructions for each option, taking into account the nuances of different router models.

1. Changing your Wi-Fi password is a basic but effective method.

The easiest way to "kick" all strangers off the network is to change the password. This will break current connections and force even legitimate users (such as family members) to enter new information. The optimal password length is 12-16 characters with a mixture of letters, numbers, and special characters. Avoid obvious combinations like 12345678 or qwerty.

How to change your password:

• 🔧 Open your router's control panel (usually at 192.168.0.1 or 192.168.1.1).
• 🔐 Go to the section Wireless Network (Wi-Fi) → Security Settings.
• 📝 In the field PSK password (or Wireless Password) enter a new combination.
• 🔄 Save the settings and reboot the router.

On routers Xiaomi And Keenetic The menu may have a different name - look for the tabs Wi-Fi or NetIf some devices fail to connect after changing the password, check the capitalization: PassW0rd! And passw0rd! - different passwords.

⚠️ Attention: If you use WPS (quick connect button), changing the password won't help—an attacker can connect through a vulnerability in the protocol. Disable WPS in the router settings (Wireless Network → WPS).

2. MAC filtering: allowed device list

MAC address — a unique identifier of a network device (for example, 00:1A:2B:3C:4D:5E). MAC filtering allows you to allow connections only to those gadgets whose addresses you have added to white listThis method is reliable, but it requires manual control: when you buy a new smartphone or laptop, you'll have to update the settings.

How to set up a MAC filter:

1. Find the MAC addresses of your devices:
   • 📱 On Android: Settings → About phone → General information → Wi-Fi MAC address.
   • 💻 On Windows: run the command

     ipconfig /all

     and find the line Physical address.
   • 🍎 On iPhone/iPad: Settings → Wi-Fi → (i) next to the network → MAC address.

In the router panel, go to Wireless Network → MAC Filter (or Wireless MAC Filtering).

Select mode Allow only specified (Allow).

Add the MAC addresses of your devices to the list.

Save the settings and reboot the router.

⚠️ Attention: MAC addresses can be spoofed, so this method is not secure against experienced hackers. Use it in conjunction with hiding SSID and a complex password.

Find the MAC addresses of all your devices

Disable WPS

Create a backup copy of your router settings

Check firmware compatibility with filtering-->

3. Hiding the network name (SSID)

By default, the router broadcasts the network name (SSID) so that devices can "see" it and connect. If you turn off broadcasting, the network will become hidden, and to connect you will have to enter SSID Manually. This doesn't protect against targeted attacks (the network name can be determined using a traffic analyzer), but it will reduce the number of accidental connections.

How to hide SSID:

• 🔍 In the router panel, find the section Wireless Network → Basic Settings.
• 👁️ Uncheck the box Enable SSID broadcasting (or Enable SSID Broadcast).
• 💾 Save the settings. The network will then disappear from the list of available networks.

To connect to a hidden network on devices:

• 📱 Android: Settings → Wi-Fi → Add network → enter SSID and password.
• 💻 Windows: Control Panel → Network and Internet → Manage networks → Add a new network.
• 🍎 iOS: Settings → Wi-Fi → Other network.

4. Device blacklist

If you know MAC address an unwanted device (for example, a neighbor who connects without permission), you can add it to blacklistUnlike a whitelist, only specified addresses are blocked, while other devices can connect freely.

How to add to the blacklist:

1. Find the MAC address of other devices in the list of connected clients (DHCP → Client List or Wireless → Client List).
2. Copy the addresses of suspicious gadgets.
3. Go to Wireless Network → MAC Filter and select the mode Deny specified (Deny).
4. Add the copied MAC addresses to the list.

On routers Keenetic The blacklist is configured via Home Network → Devices → Blocked. U ASUS there is a function Intrusion Detection, which automatically blocks suspicious MAC addresses after several unsuccessful connection attempts.

⚠️ Attention: An attacker can change their device's MAC address (spoofing), so a blacklist is only effective against "respectable" neighbors who don't know how to bypass blocking.

5. Guest network with restrictions

If you want to allow guests to use the Internet but restrict their access to local resources (such as a printer or network drives), set up guest networkIt works in parallel with the main one, but has a separate SSID, password and restrictions.

Benefits of a guest network:

• 🔒 Isolation from the main network (guests won't see your devices).
• ⏱️ Time limit (e.g. access only from 9:00 to 21:00).
• 📶 Separate bandwidth control (you can limit the speed).

How to set up:

• 🔧 In the router panel, find the section Guest network (Guest Network).
• 🔄 Enable guest network and set a unique one SSID (For example, MyWiFi_Guest).
• 🔐 Set a separate password (it can be simpler than for the main network).
• ⚙️ Set up restrictions:
  • Disable local network access (AP Isolation).
  • Limit your speed to 10 Mbps (enough for social networks).
  • Set a work schedule (for example, only during the day).

What happens if I don't disable the guest network?

If you don't limit the speed on your guest network, other devices can consume the lion's share of your traffic. For example, a torrent client on someone else's laptop can consume up to 80% of your bandwidth, leaving only the remaining bandwidth for your devices. Also, without isolation (AP Isolation) guests will be able to scan your local network and try to hack other devices (printers, IP cameras).

6. Time Limit (Parent Control)

Function Parental control (Parent Control) allows you to block network access for specific devices during specified hours. This is useful if you want to restrict access for children or guests. For example, you can only allow access between 8:00 AM and 10:00 PM.

How to set up:

• 🕒 In the router panel, find the section Parental control or Time Restrictions.
• 📋 Add a device by MAC address or IP.
• ⏰ Set a schedule (for example, a ban from 11:00 PM to 7:00 AM).
• 🔄 Apply the settings.

On routers TP-Link This function is called Access Control, at ASUS — Parental ControlsSome models (for example, Keenetic) allow you to create flexible rules with exceptions by days of the week.

⚠️ Attention: If the device receives an IP address DHCP, its address may change after rebooting the router. For stable operation, bind the MAC address to a fixed IP in the settings. DHCP Reservation.

7. Advanced Techniques: VLAN and Client Isolation

For advanced users, there are more sophisticated access control methods:

• 🌐 VLAN (Virtual LAN): dividing the network into virtual segments. For example, you can create a separate VLAN for IoT devices (smart lamps, cameras) and block their access to the main network.
• 🚫 Client isolation (AP Isolation): devices on the same network cannot see each other. Useful for public hotspots.
• 🔗 802.1X authentication: connection only after login/password verification on the RADIUS server (used in corporate networks).

These methods require support from the router and in-depth knowledge of networking technologies. For example, ASUS RT-AX88U supports VLAN, and TP-Link Omada — 802.1X. For home use, a MAC filter and a guest network are usually sufficient.

FAQ: Frequently Asked Questions about Wi-Fi Blocking

Is it possible to block a device by IP address?

Yes, but it is not reliable: the IP may change after rebooting the router (if used DHCP). It's better to block by MAC address or bind IP to MAC in the settings. DHCP Reservation.

How do I know who is connected to my Wi-Fi?

Find the section in the router panel DHCP Clients, Connected Devices or Client list. All connected devices will be displayed there, along with their MAC addresses, IP addresses, and names (if supported).

Does blocking work on routers from ISPs (for example, Rostelecom)?

Yes, but the interface may differ. For example, on Sagemcom Rostelecom's MAC filter is located in Wi-Fi → MAC Address FilterSome providers may have some features blocked. In this case, please contact technical support for access to advanced settings.

Is it possible to block access to certain websites?

Yes, through Parental control or FirewallFor example, on Keenetic this is done in Security → Traffic FilteringYou can block websites by keywords (for example, torrent) or by category (social networks, games).

What should I do if my neighbor hacked my Wi-Fi?

If you suspect a targeted attack:

1. Immediately change your password to a complex one (16+ characters).
2. Turn on WPA3 (if supported).
3. Check the list of connected devices and block unknown MAC addresses.
4. Update your router firmware (outdated versions are vulnerable).
5. If attacks continue, contact your ISP—they may be able to track the attacker's MAC address.