How to Kick Unknown Devices Off Your Wi-Fi

To remove an unwanted device from your Wi-Fi, use your router's device controls to block it, then change the Wi-Fi password if you need to revoke its credentials. Blocking alone is not always a lasting solution.

First, make sure the device is genuinely unfamiliar. Phones with private network addresses, smart-home gadgets, and old device names can make an ordinary household connection look suspicious.

Check the router's device list

Open your router manufacturer's official app or sign in to its management page. Look for Connected Devices, Clients, Device Manager, or Network Map. Use the address printed on the router or documented by the manufacturer rather than clicking an unfamiliar search advertisement.

The list may include a device name, local IP address, hardware address, connection type, and last-seen time. A generic name such as “Android” or “Unknown” is not evidence of an intruder. Some routers also retain offline devices, so check whether the entry is currently connected.

1. Save a screenshot of the list for your own reference.
2. Separate online devices from remembered or offline entries.
3. Note whether the unfamiliar connection is wired, wireless, or on a guest network.
4. Check its last activity and any available manufacturer information.

Do not post screenshots publicly without redacting identifiers and account details. If this is a shared household, ask others before removing connections. A work laptop, medical device, or visiting relative's phone may have an unexpected name.

Match entries to your own devices

Inventory phones, computers, tablets, televisions, consoles, printers, speakers, cameras, and smart plugs. Include mesh nodes and extenders, which may appear as network equipment rather than familiar consumer devices.

Compare a device's Wi-Fi address with the router entry when possible. Many phones use a private or randomized address for each network, so the address printed on the device's packaging may not match. Some privacy modes can also change that address over time.

iPhone

Open Settings > Wi-Fi, tap the information button beside your network, and look for Wi-Fi Address and Private Wi-Fi Address settings. Compare the address shown for that network with the router's list. You generally do not need to disable privacy features just to identify the device.

Android

Open Settings > Network & internet > Internet, select the connected network, and look for network details or its MAC address. Samsung and other manufacturers use different menu labels; Settings > Connections > Wi-Fi is another common starting point.

If identification remains unclear, disconnect one nonessential device at a time and refresh the router list. Give the list time to update. Once you recognize an entry, assign it a helpful label in the router app if that feature is available.

Block the device as an immediate measure

After confirming that a device should not be connected, open its router entry and look for Block, Deny, or Pause. Read the description: some pause controls stop internet access without preventing local-network communication.

1. Select the unwanted device in the router's client list.
2. Apply the available block or access restriction.
3. Confirm the router saved the change.
4. Refresh the list and check whether access is restricted.

A device may remain visible even after blocking because the router retains its record. Conversely, disappearing from a list does not prove that all credentials have been revoked.

Hardware-address blocking is only a temporary layer. Addresses can change or be imitated, so someone who still knows your Wi-Fi password may reconnect under another identity. If you suspect unauthorized access, rotate the network password rather than relying entirely on the block list.

Change the credentials that grant access

Change the Wi-Fi password on every affected network, including guest networks or separately configured wireless bands that use the old password. Reusing the old password on a replacement network name does not reliably revoke access.

Use a long, unique password. The Password & Hash Generator can help create one; use the generated password itself, not a hash string intended for a different purpose. Store it in a password manager rather than a public note.

In the router app, look under Wi-Fi, Wireless, or Network Settings, then choose the relevant network and update its password. Saving the change normally disconnects wireless devices until they reconnect with the new credentials. Plan around calls, alarms, and other services that need connectivity.

Also change the router administrator password if it is weak, reused, or possibly exposed. This is separate from the Wi-Fi password. If your router uses a cloud account, secure that account with a unique password and multifactor authentication when supported.

For a fuller walkthrough, read how to change your Wi-Fi password and network name.

Close common paths back in

Choose WPA3-Personal where your devices support it, or WPA2-AES for compatibility. A WPA2/WPA3 transition mode may be appropriate for mixed households. Avoid obsolete WEP, WPA, and TKIP options; replace equipment that cannot support modern protection.

Disable WPS if you do not need it, especially PIN-based setup. WPS can provide another joining method separate from typing the Wi-Fi password. Also disable remote administration unless you intentionally use it and understand its protection.

Install available router firmware updates through the official app or support process. Turn on automatic security updates if supported. If the router no longer receives updates, consider replacing it rather than treating password changes as complete protection.

Create a separate guest network for visitors and enable local-network isolation when available. Our guide to setting up guest Wi-Fi explains how to limit access without handing out your household's main credentials.

Troubleshoot devices that keep returning

If an unfamiliar entry reappears, compare its address and connection type carefully. It may be one of your own devices reconnecting with a private address, or an old offline record that the router has not removed.

A wired device does not need the Wi-Fi password. Trace Ethernet connections through switches, mesh nodes, and wall ports if the router identifies it as wired. Confirm that guest credentials and any separate access points were updated too.

If router settings change unexpectedly or you cannot trust the administrator account, contact the manufacturer or provider. A factory reset may help restore a known configuration, but it erases settings and can interrupt service. Obtain setup instructions and required provider credentials before resetting, then configure the router securely rather than blindly restoring a suspect backup.

Keep a recognizable network

After reconnecting trusted devices, label them and save a private household inventory. Review the list occasionally and remove guest access you no longer need.

The most reliable approach is simple: identify first, block immediate access, rotate exposed credentials, and update the router. An unfamiliar name deserves a check, not an automatic assumption that your network has been hacked.