How to Permanently Block Your Neighbors' Wi-Fi: Step-by-Step Instructions for Any Router

Have you noticed that your internet connection is slowing down in the evenings, even though your plan hasn't changed? Or have you seen unknown gadgets with names like Android-123456 or Guest's iPhone? Most likely, your neighbors are using your Wi-Fi, either knowingly or unknowingly. According to Kaspersky, every fifth home router in Russia has vulnerabilities that allow unauthorized access to the network.

The problem isn't just traffic theft. Other people's devices can:

• 🔍 Intercept your data (passwords, bank details, correspondence) if the network is not protected by encryption.
• 🐢 Slow down — especially if your neighbors are downloading torrents or watching 4K videos.
• 🚨 Spread viruses over your local network, infecting connected PCs and smartphones.
• 📡 Use your IP for illegal activities (such as downloading pirated content).

In this article - 7 proven methods close Wi-Fi from strangers, from basic (change password) to advanced (settings VLAN And guest network). All instructions are adapted for routers. TP-Link, ASUS, Keenetic, Xiaomi And MikroTik, but the principles are universal. We'll also dispel myths (for example, about the "uselessness of hiding the SSID") and provide a checklist for quickly checking the security of your network.

1. Check your current connections: Who is on your network?

Before shutting down the network, make sure the problem actually exists. Many routers display a list of connected devices, but it's not always obvious which ones are "foreign."

How to check:

1. Open the router's web interface (usually at 192.168.0.1 or 192.168.1.1). The default login and password can be found on the device sticker (usually admin/admin).
2. Go to the section DHCP, Clients or Wireless (the names are different). Look for tabs like Device List or Active Connections.
3. Compare MAC addresses (unique device identifiers) with your gadgets. Unknown addresses are a warning sign.

An example of a list of connections in a router Keenetic:

In this example the device Android-98d4f2 raises suspicions - if you don't have such a gadget, it could be your neighbor. MAC addresses are easy to spoof, so their presence in the list does not always mean a hack – but it is a reason to check the network security.

⚠️ Attention: Some routers (eg. Zyxel Keenetic) show not only active ones, but also previously connected devices. Clear this list every 1-2 months to avoid missing "guests."

2. Changing your password: why your current one is no longer secure

The most common cause of Wi-Fi leaks is a weak password. According to NordPassIn 2026, the top 5 most popular passwords for routers were:

• 🔐 12345678 (used in 12% of cases)
• 🔐 qwerty or password
• 🔐 admin or the model name of the router (for example, tplink)
• 🔐 Date of birth or apartment number

Such passwords can be cracked in less than a minute using special programs (for example, Aircrack-ng). Even if your neighbor isn't a techie, he can simply pick a combination of popular options.

How to create a strong password:

• 🔒 Length not less than 12 characters (optimally 16+).
• 🔒 A combination of uppercase and lowercase letters, numbers, and symbols: !@#$%.
• 🔒 Do not use dictionary words or personal information (name, pet name, address).
• 🔒 Example of a strong password: k7#pL9!vR2$mQ1.

How to change your password (using an example) TP-Link):

1. Go to the router's web interface (192.168.0.1).
2. Go to Wireless → Wireless Security.
3. In the field Password (PSK) enter a new password.
4. Save your settings and reconnect all your devices.

Make sure the new password is not used on other resources|

Write your password in a safe place (for example, a password manager)|

Reconnect all your devices manually (not via WPS!)|

Check your internet speed after changing your password (sometimes routers reset QoS settings)

-->

⚠️ Attention: After changing the password, all devices (including smart bulbs, speakers, and cameras) will be disconnected from the network. Make sure you have access to their settings to reconnect them.

3. Selecting encryption type: WPA3 vs. WPA2 vs. WEP

Even the most complex password is useless if you use an outdated encryption protocol. Three standards are currently in use:

What to choose?

• 🛡️ WPA3 — the best option if all your gadgets were released after 2018. It protects against dictionary attacks and password leaks through KRACK.
• 🔄 WPA2 (AES mode only) - if you have old devices (for example, a set-top box Dune HD or a 2015 smartphone). Never use WPA2 in TKIP mode - it is vulnerable to attacks.
• ❌ WEP If your router only offers this option, urgently update the firmware or replace the device.

How to change the encryption type (using an example) ASUS RT-AX88U):

1. Open Wireless Network → General.
2. In the field Authentication method select WPA3-Personal (or WPA2/WPA3 for compatibility).
3. In the field Encryption install AES.
4. Save the settings and reboot the router.

4. Hiding SSID: Myths and Real Benefits

Many people advise hiding the network name (SSID) so it doesn't show up in the list of available Wi-Fi networks. But it doesn't work as it seems:

• ✅ Plus: It's harder to connect accidentally (for example, a neighbor won't see your network and try to guess the password).
• ❌ Cons:
  • Experienced users will still find the network using programs like NetStumbler.
  • Your devices will be constantly broadcast the network name when connected, making it detectable.
  • Some gadgets (for example, Amazon Echo) do not work well with hidden networks.

When hiding the SSID makes sense:

• 🏠 If you live in an apartment building with dozens of visible networks, your network won't be visible in the general list.
• 🔍 You combine this with other measures (WPA3, MAC filtering).
• 📱 You don't have devices that don't work well with hidden networks.

How to hide SSID (using example) Xiaomi Mi Router 4A):

1. Go to Wi-Fi Settings → Basic Settings.
2. Uncheck the box Enable SSID broadcasting (or Broadcast SSID).
3. Save the settings. The network will no longer appear in the list, but you can connect to it by entering its name manually.

5. MAC address filtering: reliable or not?

Filter by MAC addresses Allows you to restrict connections to specific devices. This adds a layer of security, but there are some caveats:

Pros:

• 🔐 Even if a neighbor finds out the password, he won’t be able to connect without permission.
• 📊 Easily control which devices are on the network.

Cons:

• 🔄 MAC addresses are easy to spoof (spoiler).
• 📱 When adding a new gadget (for example, a guest phone), you will have to go to the router settings.
• 🔧 Some devices (eg. Smart TV) may change the MAC address after updating.

How to set up filtering (using an example) MikroTik hAP ac²):

1. Go to Wireless → Security Profiles.
2. Create a new profile or edit an existing one.
3. Turn on MAC Address Filter and add your device addresses to the whitelist.
4. Set the mode Accept (allow only specified MACs).

Example of MAC address whitelist:

00:1A:79:4E:2B:11  # Samsung TV
A4:83:E7:12:F5:89  # iPhone 12 Pro
7C:BB:6D:98:D4:F2 # Lenovo Laptop

⚠️ Warning: If you are using Mesh systems (For example, TP-Link Deco or Google Nest Wi-Fi), MAC filtering may not work correctly due to roaming between nodes. Check the documentation for your model.

Settings → Wi-Fi → WPS → Disable

Settings → Wireless Networks → Guest Network → Enable "Client Isolation"