It's quite common for unauthorized devices to connect to your wireless network. This typically happens if you forgot to set a password when initially setting up your router or accidentally enabled the guest access feature. This results in a drop in internet speed and puts your personal data at risk, as hackers can intercept your traffic.
To block access To access Wi-Fi, simply turning off the router isn't enough. You need to access the device's control panel and change the security settings. This will give you full control over the network and allow you to block uninvited guests. In this article, we'll cover the steps for various equipment models in detail.
The first step is always to log into the router's web interface. This is done using the gateway IP address, which is usually set to 192.168.0.1 or 192.168.1.1If the default login details don't work, someone may have already changed them, and a factory reset will be required.
Diagnostics of connected devices
Before changing encryption settings, it's worth making sure the problem is truly publicly accessible. Modern routers allow you to view a list of active clients in real time. This will help you understand who exactly is using your connection right now.
Typically the list is located in the section Wireless or Wi-Fi in the status menu. It displays the MAC addresses and names of connected devices. If you see an unfamiliar device, it's a signal for immediate action. blocking access.
- 📱 Check the list of connections using the router manufacturer's mobile app.
- 💻 Log in to the web interface and find the "Clients" or "Statistics" tab.
- 🔍 Compare MAC addresses with known devices in your home.
⚠️ Note: Some smart devices (light bulbs, sockets) may have strange names in the list. Don't block them unless you're sure they belong to someone else.
Once you've identified the "redundant" connections, you can begin configuring security. It's important to understand that simply disabling the Wi-Fi button on the router won't permanently solve the problem, as re-enabling it will cause the network to become open again unless encryption settings are changed.
Setting a password and encryption type
The most effective way to close a network is to enable an encryption protocol. Modern router settings offer this mode by default. WPA2-PSK or newer WPA3These standards require entering a security key when connecting any new device.
To change the settings, find the section in the menu Wireless Security or "Wireless Security." Here, you'll need to select a security mode and enter a strong password. It's recommended to use a combination of upper- and lower-case letters, numbers, and special characters, at least 12 characters long.
Once the settings are applied, all devices will be disabled. You'll need to re-enter the password on each device. This is an unavoidable step that ensures that only those you share the key with have access.
There is no need to choose the mode WEP, as this standard is outdated and can be easily hacked with specialized software in a matter of minutes. If your router only offers WEP, it might be time to upgrade to a more modern device.
Setting up MAC address filtering
An additional layer of protection is MAC address filtering. This technology allows you to create a "whitelist" of devices that are allowed to connect, even if they know the password. All other connection attempts will be ignored by the router.
To implement this method, you need to copy the MAC addresses of all your home devices. Then, in the router settings (section MAC Filtering or "Address Filtering") you need to enable the "Allow" mode and add saved addresses there.
| Device | Type | MAC address (example) | Status |
|---|---|---|---|
| Smartphone | Android | A4:C3:F0:12:34:56 | Allowed |
| Laptop | Windows | B8:27:EB:98:76:54 | Allowed |
| TV | Smart TV | 00:1A:79:11:22:33 | Allowed |
| Someone else's phone | Unknown | C9:4D:1A:99:88:77 | Forbidden |
This method requires time for initial setup, especially if you have many devices. However, it provides maximum security. Even if an attacker learns the password, they won't be able to connect because their unique identifier isn't on the allowed list.
⚠️ Note: When you purchase a new phone or laptop, you will have to manually add its MAC address to the router settings, otherwise they will not see the network.
Disabling the WPS function
Users often struggle to understand how neighbors connect to a password-protected network. The answer lies in the technology. Wi-Fi Protected Setup (WPS). This feature allows you to connect by pressing a button on the router or entering a PIN code, often ignoring the main password.
If WPS is enabled, special programs can brute-force the PIN code within hours or even minutes. After successful WPS authentication, the program automatically gains access to the network's master password. Therefore, for complete security, this feature should be disabled.
Find the section in the menu WPS and set the switch to the position Disable or "Disable". In some router models, for example TP-Link or Asus, this option may be located in the advanced wireless settings.
Why is WPS dangerous?
The WPS protocol has a vulnerability in the PIN verification method. An attacker doesn't need to guess all eight digits; just the first half, which significantly reduces the time it takes to crack a password.
After disabling WPS, connecting new devices will only be possible by entering the standard password. This is slightly less convenient, but significantly more secure for your home network.
Hiding the network name (SSID)
Another security method is hiding the network name (SSID). This will prevent your Wi-Fi from appearing in the list of available networks on phones and laptops. To connect, users must manually enter the network name and password.
To do this, you need to find the option in the wireless settings Enable SSID Broadcast and uncheck it (or select "Hide"). After saving the settings, the network will disappear from the general list, creating a "private" effect.
However, it's important to understand that this isn't complete protection. Specialized network scanners can easily detect hidden SSIDs. Furthermore, this creates inconvenience for guests, who will have to dictate the exact network name to connect.
- 🔒 Hides the network from the average user looking for free Wi-Fi.
- 📉 May slightly reduce the usability of your devices.
- 🛡️ Does not protect against targeted attacks by hackers using professional software.
SSID hiding is best combined with strong WPA2 encryption. This method is not recommended as a reliable security method, as it only provides an illusion of security.
☑️ Network security check
Limiting the number of connections
Some routers allow you to strictly limit the number of simultaneously connected clients. For example, you can set a limit of five devices. Even if someone learns the password, the sixth device will simply be unable to obtain an IP address and access the internet.
This feature is often found in the section DHCP Server or in the wireless settings. The maximum number of users is specified there (Max Users). This is an effective way to prevent neighbors from "swinging" the channel.
It's important not to overdo it with restrictions. If you have a lot of smart devices, tablets, and phones in your home, set a reasonable limit. Otherwise, you might find yourself in a situation where your new gadget can't see your network.
⚠️ Note: Router interfaces are constantly being updated. The layout of menu items may differ from those described. Always consult the official documentation for your device model.
This method is great because it doesn't require complex address manipulation. You simply set a "ceiling" based on the number of guests. This is especially true for small apartments, which can only accommodate 10-15 devices.
Frequently Asked Questions (FAQ)
Can my neighbor hack my complex password?
If a modern encryption standard is used WPA2/WPA3 If the password is more than 12 random characters long, brute-force attacks would take hundreds of years to crack. However, the risk remains if the client devices are infected with viruses or if you disclose the password to others.
What should I do if I forgot my router settings password?
If you haven't changed the factory password, try the default combinations (admin/admin). If they don't work, you'll have to reset the router using the button on the case. After that, the router will return to factory settings, and you'll need to set up your internet connection again.
Does the number of connected devices affect the speed?
Yes, the bandwidth is shared among all active users. If several people connect to your network and start watching 4K videos or downloading files, your internet speed will drop dramatically, and your gaming ping will increase.
Should I change my password regularly?
From a security standpoint, yes, this is a good practice, especially if you suspect a leak. However, for home use, it's sufficient to set a very complex password once and not change it for years unless there's evidence of a breach.