How to Block Devices from Your Wi-Fi Network

Learn how to block and kick unwanted devices from your Wi-Fi using MAC filtering, router blocklists, and parental controls. Step-by-step instructions for TP-Link, ASUS, Netgear, and Linksys routers.

security

Blocking unwanted devices from your Wi-Fi router gives you control over who uses your network bandwidth and who stays off it. Whether you spotted an unknown device in your connected devices list, need to kick a guest who overstayed their welcome, or want to restrict a child’s tablet access, there are several ways to do it without changing your Wi-Fi password and disrupting every device in your home.

Every router handles device blocking slightly differently, but the core methods are the same: MAC address filtering, access control lists, and parental control schedules.

Identify the Device You Want to Block

Your router’s admin panel shows every device currently connected to the network. Log in by opening a browser and typing 192.168.1.1 or 192.168.0.1 in the address bar. Enter your admin credentials to reach the dashboard.

Look for a section labeled Connected Devices, Attached Devices, or DHCP Client List. Each entry shows the device name (if available), its IP address, and its MAC address. The MAC address is the important piece. It is a 12-character code that looks like A4:B1:C2:D3:E4:F5 and is unique to each device’s network adapter.

Some devices show up with recognizable names like “John’s iPhone” or “Living Room TV.” Others display only a manufacturer code or a generic string. If you cannot identify a device, cross-reference its MAC address with your known devices. Check each phone, laptop, and smart device’s network settings to match the MAC address. Our guide on how to check who is using your Wi-Fi walks through this in detail.

Write down the MAC address of the device you want to block before navigating away from the client list.

TP-Link routers provide an Access Control feature that lets you create a blocklist of devices. After logging in to your router at 192.168.0.1 or tplinkwifi.net:

  1. Go to Advanced > Security > Access Control.
  2. Toggle Access Control to On.
  3. Set the mode to Blacklist (this blocks only listed devices while allowing everyone else).
  4. Click Add under the device list.
  5. Select the device from the Online Devices dropdown or enter the MAC address manually.
  6. Give it a recognizable name like “Blocked Tablet.”
  7. Click Save.

On older TP-Link firmware with the green interface, the path is Access Control > Host to define the device, then Access Control > Rule to create the blocking rule. The newer Archer interface simplifies this into a single page.

You can also use TP-Link’s Tether app on your phone. Open the app, tap Clients, select the device, and tap Block.

Block Devices on ASUS Routers

ASUS routers use a MAC filter built into the Wireless settings. After logging in at 192.168.1.1 or router.asus.com:

  1. Go to Wireless > Wireless MAC Filter.
  2. Set Enable MAC Filter to Yes.
  3. Set the MAC Filter Mode to Reject (this blocks only listed devices).
  4. Click the + button to add a new entry.
  5. Enter the MAC address of the device you want to block.
  6. Click Apply.

If your ASUS router has separate 2.4 GHz and 5 GHz bands, you need to add the MAC address to the filter list on both bands. Otherwise, the blocked device can simply connect on the other frequency.

ASUS AiProtection also includes a device management feature on supported models. Under AiProtection > Parental Controls, you can block internet access for specific devices on a schedule or permanently.

Block Devices on Netgear Routers

Netgear routers offer Access Control under the Security or Advanced menu. After logging in at routerlogin.net or 192.168.1.1:

  1. Go to Advanced > Security > Access Control.
  2. Check the box for Turn on Access Control.
  3. Select Block all new devices from connecting if you want a whitelist approach, or leave it as default for a blocklist.
  4. In the list of connected devices, find the device you want to block.
  5. Select it and click Block.
  6. Click Apply.

Netgear Nighthawk routers running newer firmware show connected devices with their names, making identification easier. The Nighthawk app also supports blocking devices directly from your phone under Device Manager.

For Orbi mesh systems, use the Orbi app or log in at orbilogin.com. The Access Control feature works the same way.

Block Devices on Linksys Routers

Linksys routers provide MAC filtering under the Wireless Security section. After logging in at 192.168.1.1 or myrouter.local:

  1. Go to Wireless > Wireless MAC Filter (classic interface) or Wi-Fi Settings > MAC Filtering (smart router interface).
  2. Enable MAC filtering.
  3. Select Deny to block the listed devices.
  4. Enter the MAC address of the device.
  5. Click Save or Apply.

Linksys Velop mesh systems use the Linksys app for device blocking. Open the app, go to Device List, tap on the device, and select Block Internet Access.

Use Parental Controls for Scheduled Blocking

Parental controls offer a more flexible approach than outright blocking. Instead of permanently cutting off a device, you can set schedules that restrict internet access during specific hours. This is useful for managing children’s screen time or limiting guest access to certain periods.

Most modern routers include built-in parental controls:

TP-Link HomeShield lets you assign devices to family member profiles, set daily time limits, and block access during bedtime hours. Access it through the Tether app or the router’s web interface under HomeCare > Parental Controls.

ASUS AiProtection provides time scheduling and content filtering per device. Go to AiProtection > Parental Controls and toggle the feature on. You can set internet access times for each day of the week.

Netgear Armor (powered by Bitdefender) includes device-level scheduling and content filtering. Access it through the Nighthawk app or through Advanced > Security > Parental Controls.

For a detailed walkthrough, see our parental controls setup guide.

What to Do if Blocking Does Not Work

Sometimes a blocked device reconnects despite being on the filter list. Here are common reasons and fixes:

The device changed its MAC address. Modern iPhones, Android phones, and Windows 11 laptops use randomized (private) MAC addresses by default. Each time the device reconnects, it may present a different MAC address. To fix this, either disable private MAC addressing on the device or change your Wi-Fi password instead.

You only blocked one band. If you filtered the 2.4 GHz band but not the 5 GHz band (or vice versa), the device connects on the unfiltered frequency. Add the MAC address to both band filters.

The access control is set to the wrong mode. Double-check that your filter is set to “Reject” or “Deny” mode, not “Accept” or “Allow.” The accept mode does the opposite, blocking everything except the listed devices.

Firmware needs updating. Outdated firmware occasionally has bugs in MAC filtering. Log in to your router admin panel and check for available firmware updates under Administration or System settings.

If none of these solutions work and you cannot identify the intruder, the most effective approach is to change your Wi-Fi password entirely. Yes, you will need to reconnect all your devices, but it guarantees that anyone without the new password is locked out.

Frequently Asked Questions

How do I block someone from my Wi-Fi?

Log in to your router at 192.168.1.1 or 192.168.0.1, go to Access Control or MAC Filtering, find the device you want to block in the connected devices list, and add it to the blocklist. The device will be disconnected immediately and cannot reconnect until you remove it from the list.

Can I block a device without changing my Wi-Fi password?

Yes. MAC filtering and access control blocklists let you block individual devices by their MAC address without affecting other connected devices. Changing the Wi-Fi password disconnects everyone, but blocking targets only the specific device.

Will a blocked device know it has been blocked?

The blocked device will see your Wi-Fi network but fail to connect. It will show an error like 'Unable to connect' or 'Authentication failed.' There is no notification sent to the blocked device telling it that it was specifically blocked.

Can someone bypass MAC filtering?

Technically, yes. A knowledgeable user can spoof (fake) their MAC address to get around MAC filtering. For most household situations this is not a concern. For stronger protection, combine MAC filtering with a strong WPA2 or WPA3 password and change the Wi-Fi password if you suspect someone has it.

How do I find the MAC address of a device I want to block?

Log in to your router and check the Connected Devices or DHCP Client List. Each device is listed with its name, IP address, and MAC address. You can also find a device's MAC address in its network settings: on iPhone go to Settings > Wi-Fi > tap the (i) icon. On Android go to Settings > About Phone > Status.