How to Completely Block Your Wi-Fi: From Basic Settings to Advanced Methods

Have you noticed your internet speed suddenly dropping, or your data usage drying up mid-month? Or do you want to restrict your children's internet access during school hours? Perhaps your neighbors are "borrowing" your Wi-Fi, or your office employees are abusing social media during work hours. In any case, there are several ways to restrict access to your wireless network, from simple to technically complex.

In this article we will look at 7 working methodsHow to block Wi-Fi access for specific devices or all users at once. You'll learn how to configure a router via the web interface, use MAC filtering, create a trap for unwanted connections, and even physically disable the network. We'll pay special attention to hidden vulnerabilities — for example, why a guest network isn't always secure, and how to bypass blocking by changing the MAC address.

Important: all instructions are universal and suitable for most router models (TP-Link, ASUS, Keenetic, MikroTik, Zyxel etc.), but exact names of menu items may differ. If your router issues proprietary software (for example, ROS at MikroTik or KeenDNS at Keenetic), look for similar functions in the manufacturer's documentation.

1. The easiest way: change your Wi-Fi password

If you urgently need to disconnect all users from the network - change password will solve the problem in 2 minutes. This method is suitable when:

• 🔄 You suspect that strangers (neighbors, guests, former employees) have learned your password.
• 👨‍👩‍👧‍👦 Do you want to reset access for all devices in your home and issue a new password selectively?
• 🔧 You need to temporarily block the network (for example, during repairs or while you're away).

How to do it:

1. Connect to the router via cable or current Wi-Fi.
2. Open your browser and type in the address bar 192.168.1.1 or 192.168.0.1 (the exact address is indicated on the router sticker).
3. Enter your login and password (by default it is often admin/admin or admin/empty).
4. Go to the section Wireless network (Wi-Fi) → Security settings.
5. In the field PSK password (or Wireless Password) enter a new password (at least 8 characters, with numbers and special characters).
6. Save the settings and reboot the router.

Warning: After changing the password, all devices (including yours) will be disconnected from the network. You'll have to re-enter the new password on phones, laptops, and smart devices (speakers, cameras, TVs).

2. MAC Filtering: How to Block Specific Devices

If you want to deny access only certain devices (for example, a neighbor's smartphone or a child's tablet), use MAC filteringThis method works at the hardware level: the router checks the unique MAC address each device and blocks those that are not whitelisted.

How to find the MAC address of the device you want to block:

• 📱 On Android: Settings → About phone → General information → Wi-Fi MAC address.
• 🍎 On iPhone/iPad: Settings → Wi-Fi → (i) next to the network → MAC address.
• 💻 On Windows: run the command in CMD:

  ipconfig /all | findstr "Physical Address"

MAC filtering setup instructions:

1. Log into your router's web interface (see section 1).
2. Go to Wireless Network → MAC Filter (or Wireless → MAC Filtering).
3. Select mode Blacklist (Deny) — to block specific devices.
4. Add the MAC addresses of the devices you want to block access to.
5. Save the settings and reboot the router.

Important: MAC addresses can be spoofed. using special programs (for example, Technitium MAC Address Changer for Windows or MacDroid (for Android). If a user knows they've been blocked, they can bypass the restriction by cloning the MAC address of an authorized device.

Make sure your router supports filtering|Write down the MAC addresses of all your devices|Add them to the whitelist|Test the connection after blocking-->

3. Scheduled Wi-Fi shutdown

If you need to prohibit the use of Wi-Fi in a certain time (for example, at night for children or during working hours for employees), set up network operating scheduleMost modern routers support this function.

Examples of use:

• 🕒 Turn off Wi-Fi from 11:00 PM to 7:00 AM to prevent children from using their phones at night.
• 🏢 Block access to social networks in the office from 9:00 AM to 6:00 PM (in conjunction with DNS filtering).
• 🏠 Turn off the network while you are away (for example, from 8:00 to 17:00, when everyone is at work).

How to set up a schedule using an example TP-Link:

1. Log into your router's web interface.
2. Go to Advanced settings → Wireless → Wi-Fi schedule.
3. Activate the feature and add a rule (for example, Off With 23:00 to 07:00).
4. Apply settings.

On routers ASUS the path will be different: Wireless Network → Schedule. U Keenetic This function is called Access rules and is located in the section Home network.

⚠️ Note: The schedule only works for wireless networks. Devices connected via cable (PC, Smart TV) will remain connected. To block them, use parental control or disable ports on the router.

4. Creating a "guest network" with restrictions

If you don't want to completely block access, but need limit user capabilities, set up guest networkIt works in parallel with the main one, but:

• 🔒 Has a separate password.
• 🌐 May limit speed or block certain websites.
• 📵 Does not provide access to local devices (printers, NAS, smart bulbs).

How to set up a guest network on Keenetic:

1. Go to the web interface.
2. Go to Home Network → Segments → Guest Segment.
3. Enable the guest network and set a name (eg. Guest_WiFi).
4. Set a password and limit the speed (optional) Speed ​​limit).
5. In the section Firewall rules Block access to local resources.

On routers ASUS The guest network is configured in Wireless Network → Guest Access. U TP-Link - V Guest network (chapter Additionally).

Pitfall: A guest network doesn't protect against traffic leaks. If you give your neighbor the password, they can use it without restrictions (unless you configure additional rules).

How to bypass the guest network?

Some routers allow you to connect to the primary network by manually entering its name (SSID) and password, even if it's hidden. To avoid this, disable broadcasting of the primary network's SSID in the settings (Hide network).

5. Completely disable Wi-Fi: physical blocking

If you need completely ban Wi-Fi use (for example, in an office or at a business), you can:

• 🔌 Physically disable the wireless module on the router (if it is removable).
• ⚡ Turn off the router's power (radical method).
• 📡 Use special signal jammers (prohibited in most countries!).

The easiest way is Disable Wi-Fi in your router settings:

1. Go to the web interface.
2. Go to Wireless Network → Basic Settings.
3. Uncheck the box Enable wireless broadcasting (or Enable Wireless).
4. Save the settings.

After this, Wi-Fi will stop working, but wired connection will remain active. To block it, disable the LAN ports or configure Port Security (available on advanced routers).

⚠️ Attention: on some routers (for example, MikroTikDisabling Wi-Fi via the web interface may not work due to firmware issues. In this case, use the following command in the terminal:

/interface wireless disable wlan1

(Where wlan1 — name of the wireless interface).

6. Advanced Methods: Blocking via DNS and Firewall

If you want to not only block access to Wi-Fi, but also control traffic, use:

Method	How it works	Complexity	Suitable for
DNS filtering	Blocks access to certain websites (social networks, torrents, adult content).	Average	Parental control, office networks.
Firewall	Denies connections to specific IPs or ports.	High	Advanced users, admins.
VPN blocking	Disables the use of VPN (bypassing other restrictions).	High	Corporate networks.
Qos (Quality of Service)	Limits speed for certain devices.	Average	Traffic restrictions for guests.

Example of setup DNS filtering on Keenetic:

1. Go to Internet → DNS servers.
2. In the field Primary DNS Enter the address of the filtering server, for example:
   • 185.228.168.168 (CleanBrowsing - blocks adult content).
   • 1.1.1.3 (Cloudflare Family - filters malicious websites).

Save the settings and reboot the router.

For blocking through firewall on MikroTik use the rule:

/ip firewall filter add chain=forward src-address=192.168.1.100 action=drop comment="Block Device" disabled=no

(Where 192.168.1.100 — IP address of the blocked device).

arp -a

or check the list of connected clients in the router's web interface (DHCP clients).-->

7. Special programs for blocking Wi-Fi

If the router settings are not enough, use third-party programs for access control:

• 🖥️ NetCut — blocks devices in the local network by MAC or IP.
• 👨‍💻 GlassWire — monitors traffic and blocks suspicious connections.
• 📊 OpenDNS FamilyShield — filters content at the DNS level.
• 🔒 Windows Firewall Control - Advanced firewall management.

Example of use NetCut:

1. Download and install the program from official website.
2. Launch NetCut on behalf of the administrator.
3. From the list of devices, select the one you want to block.
4. Click Cut Off (disable).

Restrictions:

• The programs only work on the device where they are installed (they do not block the network completely).
• May conflict with antiviruses or firewalls.
• Some functions are paid (for example, remote control in NetCut).

FAQ: Frequently Asked Questions about Wi-Fi Blocking

Is it possible to block Wi-Fi for everyone but your devices?

Yes, for this:

1. Turn on MAC filtering in mode Whitelist.
2. Add only your devices' MAC addresses to the list.
3. Save the settings - all other devices will not be able to connect.

Disadvantage: If you buy a new device, you will need to add its MAC address manually.

How do I know who is connected to my Wi-Fi?

There are 3 ways:

1. View the list of clients in the router's web interface (DHCP clients or Wireless Clients).
2. Use programs like Wireless Network Watcher or Fing (scan the network from a phone/PC).
3. Check your router logs for suspicious activity (section System log).

My neighbor hacked my Wi-Fi. How can I block it permanently?

Follow the algorithm:

1. Change your password to a complex one (12+ characters, with letters, numbers and symbols).
2. Turn on WPA3 (if the router supports it).
3. Add the neighbor's MAC address to Blacklist.
4. Turn it off WPS (vulnerable to brute-force attacks).
5. Hide SSID (disable network name broadcasting).

If the neighbor continues to connect - Change the Wi-Fi channel and reduce the transmission powerto make your network less accessible outside your apartment.

How to block internet access but keep the local network?

Configure the firewall on your router:

1. Create a rule that blocks access to WAN (Internet).
2. Allow traffic inside LAN (local area network).

On MikroTik This is done with the command:

/ip firewall filter add chain=forward out-interface=ether1-gateway action=drop

(Where ether1-gateway — an interface leading to the Internet).

Is it possible to block Wi-Fi on a child's phone remotely?

Yes, there are several ways:

• Use parental control on the router (for example, Keenetic or ASUS AiProtection).
• Install an app like this on your child's phone. Google Family Link or Kaspersky Safe Kids.
• Set up Wi-Fi schedule (see section 3).

Some routers (eg. TP-Link Deco) allow you to block devices via a mobile application.