How to Block a Device From Your WiFi Network: MAC Address Filtering, Access Control, and Parental Controls on TP-Link, ASUS, Netgear, and Eero

Blocking a device from your WiFi network is a straightforward task on every modern router, but the menu path varies significantly by brand. The two main methods are MAC address filtering — a blocklist or allowlist keyed to each device’s hardware identifier — and per-device access control, which most newer routers expose through a companion app. Both approaches let you cut off a single device without changing your WiFi password or disrupting anyone else. Run a speed test before and after to confirm the blocked device is no longer consuming bandwidth.

Why You’d Want to Block a Device

The most common reasons to block a specific device include: an unfamiliar device showing up in your router’s connected-device list; a child’s phone or tablet that needs time-limited internet access; a guest who knew your old password and is still connecting without your knowledge; or a smart home device you no longer use that is still consuming a DHCP lease. Blocking is also useful during troubleshooting — removing a suspected problem device from the network to see whether speeds or stability improve for everyone else. If you want to set up a completely separate access point for guests rather than blocking individual devices, our guide on how to set up a guest WiFi network covers that approach.

Method 1: MAC Address Filtering

Every network adapter has a MAC (Media Access Control) address — a 12-character hexadecimal identifier like A4:C3:F0:7B:2E:11 — that is broadcast to your router whenever the device associates with your network. MAC filtering lets you maintain either a blocklist (deny specific addresses, allow everyone else) or an allowlist (allow only specific addresses, block everyone else). For blocking a single device while leaving the rest of your network untouched, the blocklist mode is simpler and less disruptive.

Before enabling filtering, find the MAC address of the device you want to block. On most routers, it appears on the “Connected Devices” or “DHCP Client List” page in the admin interface alongside the device’s hostname. You can also find it on the device itself — iPhone: Settings › Wi-Fi › (i) › Wi-Fi Address; Android: Settings › About Phone › Status › MAC Address; Windows: run ipconfig /all in Command Prompt and look for the “Physical Address” of your wireless adapter.

TP-Link Routers

Log in to your router at 192.168.0.1 or tplinkwifi.net. Navigate to Advanced › Wireless › Wireless MAC Filtering. Enable the feature and select Blacklist mode. Click Add, enter the MAC address of the device you want to block, and save. The device will be deauthenticated from your network within seconds and will not be able to reconnect. TP-Link also exposes a faster path through the Tether mobile app: tap a device in the “Clients” list, then tap the block icon — this adds the MAC to the blacklist automatically.

ASUS Routers

Log in at 192.168.1.1 or router.asus.com. Go to Wireless › Wireless MAC Filter. Set “Enable MAC Filter” to Yes, set the filter mode to Reject, and click the + button to add the target MAC address. Apply the settings. Devices on the Reject list are blocked from associating with your wireless network on that band. Repeat for the 5 GHz or 6 GHz radio if your router lists separate filters per band. You can also use the ASUS Router app to block a device directly from the client list without navigating the admin panel. ASUS’s AiProtection parental controls (under AiProtection › Parental Controls) also let you schedule internet access per device if time-based blocking is what you need.

Netgear Routers

Log in at routerlogin.net. Navigate to Advanced › Security › Access Control. Check Turn on Access Control to activate the feature. In the “Allowed” device list, find the device you want to block (it will be listed if it has connected recently) and click Block. Blocked devices appear in the “Blocked” section and cannot reconnect. If the device doesn’t appear in the list, select “Add” and enter the MAC address manually. Netgear’s Orbi routers use the same interface through the Orbi web UI or the Orbi app under the “Devices” tab.

Eero

Eero manages device blocking entirely through the eero mobile app — there is no web-based admin panel. Open the eero app, tap Devices at the bottom, select the device you want to block, and tap Block Device. This removes the device from the network immediately and prevents it from reconnecting. The block is tied to the device’s MAC address under the hood. If you want scheduled blocking — for example, turning off a child’s phone at 9 PM — that requires an eero Plus subscription ($9.99/month), which adds profile-based parental controls with time schedules and content filtering.

Method 2: Time-Based Blocking With Parental Controls

If your goal is screen time management rather than a permanent ban, parental controls give you more nuance than a static MAC block. TP-Link HomeCare (Advanced › Parental Controls) lets you set daily time limits and bedtime schedules per device at no extra cost. ASUS Family Controls under AiProtection offers per-device time scheduling and content filtering, also free. Netgear Smart Parental Controls are included with select routers and accessible from the Nighthawk or Orbi app. All of these block internet access during restricted hours while allowing the device to remain connected to the local network — useful if you want the device to reach local printers or media servers but not the internet.

The Limitation of MAC Filtering

MAC filtering is not a security control — it is a convenience tool. A determined user can spoof their MAC address (change it in software to match any allowed device) on Windows, macOS, Android, and Linux in under a minute. iOS randomizes MAC addresses by default per network, which means a blocked iPhone may reconnect with a new address after the next iOS update or if the user resets network settings. For security-critical blocking, MAC filtering alone is insufficient. The right response to an unauthorized user on your network is to change your WiFi password (Settings › Wireless › Security) and enable WPA3 encryption. Our guide on WPA2 vs WPA3 security explains why WPA3 makes brute-force password attacks significantly harder. MAC filtering works well for its intended use case — blocking a known device you want to exclude — as long as the user of that device is not technically sophisticated enough to spoof their address.

Quick Reference: Block a Device by Brand

• TP-Link: Advanced › Wireless › Wireless MAC Filtering › Blacklist, or Tether app › Clients › Block.
• ASUS: Wireless › Wireless MAC Filter › Reject mode, or ASUS Router app › Clients › Block.
• Netgear: Advanced › Security › Access Control › Turn on › Block Device.
• Eero: eero app › Devices › select device › Block Device.
• Time-based blocking: TP-Link HomeCare, ASUS AiProtection, or Eero Plus parental controls.