How to completely protect your Wi-Fi from your neighbors: step-by-step instructions and secret router settings

How to check and change:

1. In the router's web interface, find the section Wireless network security (or Wireless Security).
2. In the drop-down menu Encryption type select WPA3-Personal (or WPA2-PSK, If WPA3 (not supported).
3. In the field Version or Encryption install AES (Not TKIP!).
4. Save the settings and reboot the router.

If your router does not support WPA3, update its firmware via the section System Tools → Software UpdateFor models older than 2018, you may need to manually download the file from the manufacturer's website.

3. Hiding the network name (SSID) and disabling DHCP

Hiding SSID won't make your network invisible to experienced hackers, but it will stop 90% of random connections. And disabling DHCP will force you to enter it manually IP addresses on every device - this will complicate life not only for your neighbors, but also for you.

How to hide SSID:

• 🕵️‍♂️ In the Wi-Fi settings, find the option Hide SSID (or Hide SSID) and turn it on.
• 📡 Now you can only connect to a network manually by specifying its name.

How to disable DHCP:

• 🔌 Go to LAN → DHCP server.
• 🚫 Turn off the server (Disable) or narrow the range of distributed IP-addresses to the minimum (for example, with 192.168.0.100 to 192.168.0.110).
• 📱 Manually register on all your devices IP, gateway And DNS (instructions for Windows/Android — in the spoiler below).

⚠️ Attention: Disconnection DHCP may cause connection problems Smart TV, IP cameras and other smart home devices. Check their documentation before setting them up!

4. MAC address filtering: pros and cons

Filter by MAC addresses Allows you to restrict connections to specific devices. This is an effective method, but it requires manual management: each new device (a guest's smartphone, a smart speaker) must be added to the list manually.

How to set up:

1. Find MAC addresses your devices:

   - On Windows: ipconfig /all (look for the line Physical address).

   - On Android: Settings → About phone → General information → Wi-Fi MAC address.

2. In the router's web interface, go to Wireless Network → MAC Filter.
3. Add addresses to Whitelist (or White List) and save.

Disadvantages of the method:

• ❌ Inconvenience: You will have to update the list when you purchase new devices.
• ❌ MAC spoofing: Experienced users can replace their MAC to the permitted one.
• ❌ Connection errors: some devices (eg Amazon Echo) can reset MAC after the update.

Make sure all devices are connected to the network|Take screenshots or write down MAC addresses|Check if your router supports filtering|Back up your router settings-->

5. Separating the network into guest and main (VLAN)

If you frequently host guests or rent accommodation, create guest network with a separate password and limited rights. This will allow:

• 🔐 Isolate personal devices from strangers.
• 📶 Limit the speed for guests (for example, to 10 Mbps).
• 🕒 Automatically turn off guest Wi-Fi according to a schedule (for example, from 11:00 PM to 7:00 AM).

How to set up using an example TP-Link Archer C6:

1. Go to Additional settings → Guest network.
2. Turn on the guest Wi-Fi and indicate:

   - Network name (SSID): For example, Guest_WiFi

   - Password: simple, but not the same as the main one

   - Isolate guest devices: ON

3. In the section Bandwidth control Limit speed (optional).

⚠️ Attention: Some routers (eg. Zyxel Keenetic) allow you to create up to four guest networks with different permissions. Use this to separate access for neighbors, guests, and IoT-devices.

6. Time limits and traffic control

If you suspect that your neighbors are connecting to your Wi-Fi at night or when you are not present, set up network operating schedule And traffic limitsThis will not only protect you from strangers, but also save energy.

How to limit Wi-Fi usage time:

• ⏰ Find it in your router settings Access time control (or Parental Controls).
• 📅 Specify the days and hours when Wi-Fi should be active (for example, from 7:00 to 23:00).
• 🔄 Apply the rule to all devices or only unknown ones MAC addresses.

How to limit traffic:

• 📊 In the section QoS or Bandwidth control set limits:

  - For unknown devices: 1–5 Mbps.

  - For your gadgets: no restrictions.

• 📈 Set up notifications when the limit is exceeded (if your router supports it).

7. Advanced Methods: Firewall, VPN, and Physical Isolation

If your neighbors are persistently accessing your network, despite all measures, apply advanced methods:

1. Setting up a firewall on the router:

• 🛡️ Block incoming connections from external networks in the section Firewall.
• 🚫 Ban Ping And Telnet - This will make it more difficult to scan your network.

2. Using VPN for all traffic:

• 🌍 Set up VPN server on the router (for example, OpenVPN or WireGuard).
• 🔒 Now all traffic will be encrypted, even if someone connects to your Wi-Fi.

3. Physical signal isolation:

• 📡 Change Wi-Fi channel to a less busy one (use apps like Wi-Fi Analyzer).
• 📉 Reduce transmit power in the router settings (for example, from 100% to 50%).
• 🏠 Place the router in the center of the apartment, away from your neighbors' walls.

⚠️ Attention: Some advanced features (eg. VPN server) can reduce internet speed by 10-30%. Before setting up, check if your router supports hardware encryption acceleration (AES-NI).

FAQ: Frequently Asked Questions about Wi-Fi Security