It's quite common for a third-party device to connect to your home network, or for you to restrict access for a specific user. Wireless network security is at risk if you don't control your list of authorized clients. This could be an annoying neighbor using your bandwidth, or a child who spends too much time online instead of doing their homework.
There are several effective ways block access to the access point. The method you choose depends on whether you're close to the router, whether you have access to the admin panel, and which device you want to restrict. In this article, we'll cover the technical details that will help you fully control traffic.
Using MAC address whitelisting
The most reliable method to deny a device access is to implement filtering by physical address. MAC address — is a unique identifier for a network interface assigned by the equipment manufacturer and does not change when reconnecting. The method works by providing the router with a list of authorized addresses, and automatically rejecting all other connection attempts.
To implement this scenario, you need to log into the router interface and find the section Wireless MAC Filtering or MAC address filteringThere, you should enable "Allow" mode and manually enter the MAC addresses of all trusted devices. Any device not on this list will simply be unable to establish a connection, even if it knows the network password.
Where can I find the MAC address on different devices?
On Windows, use the ipconfig /all command in the command line, on Android the path is usually in Settings -> About phone -> Status, and on iOS in Settings -> General -> About this device.
However, this method has a significant drawback: it requires manually adding each new device. If you have guests over and need to grant them access, you'll have to go into the settings and add their addresses. However, for static networks This is the best protection against unauthorized access.
Blacklisting and blocking clients
Unlike the whitelist method, Blacklist (blacklist) allows you to block specific devices while leaving access open to all others. This approach is ideal when you need to quickly disable a single intruder or restrict a child's access without reconfiguring the entire network. Modern routers, such as Keenetic, TP-Link or Asus, have built-in functions for managing the client list.
To use this feature, find the section in the router menu Client list or Client ListAll devices that are currently connected or have been connected previously are displayed there. Next to each name or IP address, there's usually a block button (often indicated by a hand or cross). Clicking it adds the device's MAC address to the blacklist.
⚠️ Note: After adding a device to the blacklist, it may remain online for a few minutes until its DHCP leases are renewed. Don't panic if the internet connection doesn't go away immediately.
This method is great for its flexibility. You can easily add and remove devices from the block list as needed. For example, if you blocked access to a game console and then decided your child could play it on the weekend, you can simply remove the block with one click, without changing the Wi-Fi password.
Setting up parental controls
If your goal is not just to turn off the Internet, but to limit the time spent online or access to certain resources, the functions parental control These are the best option. They allow you to create profiles for specific devices and set access schedules. This is a more flexible method than the complete blocking often used in families.
Find the tab in your router settings Parental ControlHere you can bind the rule to the MAC address of the child's device. Available options typically include:
- 🕒 Set time intervals when Wi-Fi works (for example, only from 18:00 to 20:00).
- 🌐 Blocking website categories (gambling, content, social networks).
- ⏳ Limit the total time of network usage per day.
- 🚫 Completely disable access according to a schedule (for example, during sleep).
Many modern systems such as Yandex Plus or KeeneticDNS, integrate directly into the router, providing detailed reports on visited websites. This allows you not only to block connections but also to understand what the user is doing online. Setting up may require registration with the router manufacturer's cloud service.
☑️ Setting up a child's profile
Guest network as an isolation method
A great way to restrict access of strangers or guests to your main resources is to use guest network (Guest Network). This feature creates a virtual access point with a separate name (SSID) and password. The main advantage is isolation: devices on the guest network cannot see your computers, NAS storage, or printers.
You can configure the guest network to have limited bandwidth or operate only during certain hours. If you want to prevent a device from accessing the main network, simply don't give it the password for the main SSID and connect only to the guest network. If the guest network password is compromised, you can change it or disable the entire guest network without affecting your personal devices.
| Parameter | Main network | Guest network | Guest network (limited) |
|---|---|---|---|
| LAN access | Full | Prohibited | Prohibited |
| Speed | Maximum | Full | Limited (eg 5 Mbps) |
| Device visibility | Everyone sees each other | Isolation of clients | Isolation of clients |
| Traffic priority | High | Short | Short |
Using guest mode is a cyber hygiene best practice. Even if a guest's device is infected with a virus, isolation will prevent the threat from spreading to your important files. Furthermore, you can always completely disable the guest network from the admin panel if you no longer want to host guests.
Disabling Wi-Fi on the device itself
Sometimes the task is not in setting up a router, but in physically or programmatically prohibit the device itself Connect to the network. This is useful for saving battery life, preventing background data transfer, or when you want to force the device to operate exclusively via an Ethernet cable. Configuration is performed directly in the client's operating system.
In Windows, you can use the Device Manager. Find your wireless adapter, right-click it, and select "Disable device." This will programmatically disable the Wi-Fi module. On Android and iOS, you can use the "Forget network" feature to prevent the device from connecting automatically, or disable the module completely in the notification shade. For a more thorough lockdown on Android, there are apps that require root access that can block Wi-Fi at the system level.
There is also a method for disabling it via the registry or group policies, which is often used in corporate environments. For example, disabling the installation of wireless network drivers or blocking the service WlanSvcThis ensures that even if the user tries to turn on Wi-Fi, the system will not allow them to do so.
⚠️ Note: If you disable your Wi-Fi adapter through Device Manager in Windows, it may re-enable automatically after you restart your computer. For a permanent disablement, it's best to use Group Policy.
Change password and reset settings
The most radical, but effective method if you suspect that a hacker or persistent neighbor has connected to your network is a complete change security keyWhen changing the password in the router settings (section Wireless Security), all connected devices will be disconnected. You will only be able to reconnect with a new code.
If you've forgotten your admin panel password or your settings have been reset, you may need to reset your router to factory settings (hard reset). There's a small button on the device for this. Reset, which you need to hold down for 10-15 seconds. After this, the router will return to its out-of-the-box state with the factory password indicated on the sticker underneath. All previously connected devices will be disconnected.
What to do if you forgot your router password?
If the default password doesn't work and you don't remember yours, the only solution is to reset it using the Reset button. After that, you'll need to set up the router again, just like when you first turned it on.
After changing your password, it is highly recommended to check the list of connected clients. Make sure there are no unnecessary devices on the network. Changing your password regularly (e.g., every six months) is a good habit to maintain. perimeter security your home network.
Frequently Asked Questions (FAQ)
Can the device connect to Wi-Fi if it is turned off?
No, the device must be turned on and have an active Wi-Fi module to connect to the network. However, some devices may have a "Wake on Wireless" feature that allows them to be turned on remotely, but this requires prior setup and power.
Will incognito mode hide my device from the router's client list?
No. Incognito mode in a browser only hides your browsing history on the device itself. The router still sees your MAC address, IP address, and the fact that data is being transmitted, as it manages the network connection.
How to prevent iPhone from connecting to Wi-Fi automatically?
Go to Wi-Fi settings, tap the "i" icon next to the network name, and turn off the "Auto-connect" switch. You can also select "Forget this network" to prevent your device from attempting to connect at all.
Does my ISP see which devices are connected to my router?
Your ISP sees your router as a single device (based on the WAN port's MAC address). The internal structure of your local network and the number of connected devices are typically invisible to the ISP unless you're using specific operator equipment.