How to Kick an Unknown Device Off Your Home Wi-Fi (2026) Complete Guide

Seeing an unknown device on your home Wi-Fi is unsettling. I wrote this guide because I’ve helped neighbors remove freeloaders from their networks more times than I can count, and the same questions come up every time: how do I kick an unknown device off my WiFi without breaking my own connection?

An unknown device on your network is more than a minor annoyance. It can slow your speeds, expose your shared folders, and in worst cases become a stepping stone for someone to attack the rest of your devices. In this guide, I’ll walk you through how to identify the intruder, four reliable methods to remove it, and the security settings you should change so it doesn’t come back.

How to Identify Unknown Devices on Your Wi-Fi Network?

Before you kick an unknown device off WiFi, you need to know which one it is. Removing the wrong device means disconnecting your own phone, smart TV, or laptop. The first step is logging into your router and reading the connected devices list.

Signs Someone Is Stealing Your Wi-Fi

These are the red flags I watch for in my own network. If two or more apply, it is time to investigate.

• Your internet slows down during off-hours when no one is home

• The router’s connected device list shows names you don’t recognize

• You see repetitive MAC addresses from a manufacturer you don’t own (often “Espressif” or “Unknown“)

• Your data usage spikes without explanation

• Smart plugs or bulbs you never set up start appearing in your apps

How to Find Connected Devices on Your Router

Every router has an admin panel. The fastest way to reach it is to type your router’s IP address into a browser while connected to your home network.

1. Open a browser and try 192.168.0.1, 192.168.1.1, or 192.168.1.254.

2. If none work, open Command Prompt (Windows) or Terminal (Mac) and type ipconfig (Windows) or netstat -nr | grep default (Mac) to find the gateway address.

3. Log in with your router admin credentials. The default is usually admin / admin printed on the back of the router.

4. Look for a menu labeled Connected Devices, Attached Devices, DHCP Client List, or Wireless Clients.

5. Write down the device names, MAC addresses, and IP addresses you see.

Identifying Devices by Name and Manufacturer

Now that you have a list, figure out what each device is. Most routers show a hostname and a MAC address. The hostname often gives it away.

• iOS / iPadOS: Go to Settings > General > About > Wi-Fi Address to find your device’s MAC.

• Android: Open Settings > About Phone > Status > Wi-Fi MAC Address.

• Windows 10/11: Run ipconfig /all in Command Prompt and look for the Physical Address.

• macOS: Hold Option and click the Wi-Fi icon, or go to System Settings > Network > Wi-Fi > Details.

Cross-reference the MAC prefixes against your devices. If a device is called “android-xyz” and your household is all Apple, that’s almost certainly an intruder. Tools like the MAC vendor lookup tell you which manufacturer issued the MAC prefix.

How to Kick an Unknown Device Off Your Wi-Fi: 4 Proven Methods

This is the core answer. To kick an unknown device off your Wi-Fi, follow these four methods in order. The first is the most reliable; the rest are useful when you want to keep your other devices connected.

1. Change your Wi-Fi password immediately. This forcibly disconnects every device, including the unknown one. You then reconnect only your trusted devices with the new password.

2. Block the device via your router’s admin panel. Most routers have an Access Control or Block List feature that lets you deny a single MAC address without disrupting anything else.

3. Use your router’s mobile app to remove devices. Apps like TP-Link Tether, Netgear Nighthawk, and Asus Router allow you to swipe-to-block connected devices from your phone.

4. Enable MAC address filtering. This adds an extra layer by allowing only pre-approved MAC addresses onto your network.

Method 1: Change Your Wi-Fi Password Immediately

This is the method the r/Routers community agrees is the most secure. Every device will be cut off and forced to reconnect with the new password. The downside is that you also have to reconnect every device you trust.

1. Sign in to your router admin panel at 192.168.0.1 or 192.168.1.1.

2. Go to Wireless Settings or Security.

3. Replace the password with a new one that is at least 12 characters, mixing upper and lower case, numbers, and symbols.

4. Save the settings and wait 30 seconds for the router to reboot.

5. Reconnect each of your devices using the new password.

Once the intruder doesn’t have the new password, they are functionally kicked off your Wi-Fi.

Method 2: Block the Device via Your Router’s Admin Panel

If you don’t want to disconnect your own devices, this is the cleanest method. You block just the one MAC address belonging to the unknown device.

1. Log in to your router and open Connected Devices.

2. Find the unknown device and copy its MAC address.

3. Navigate to Access Control, Block List, or Parental Controls.

4. Add the MAC address to the block list and save.

5. Most routers will apply the rule within 30 seconds. The unknown device will see “no internet” even if it stays connected.

Note: on some routers, blocked devices stay connected but lose internet access. That’s fine for security, but the device may still show up in your list until you reboot the router.

Method 3: Use Your Router’s Mobile App to Remove Devices

Many people prefer the mobile app route because it requires no typing of gateway addresses. The TP-Link guide confirms that on Wi-Fi 6, 6E, and 7 routers, you can simply tap to block intruders.

1. Download your router’s official app: TP-Link Tether, Netgear Nighthawk, Asus Router, or Linksys.

2. Sign in with the same admin credentials you use on the web.

3. Tap Clients or Devices to see connected hardware.

4. For Wi-Fi 6 routers, tap More > Block List > + and select the device.

5. For older TP-Link routers, swipe left on the device row to reveal the block option.

This method is great when you spot an unknown device in real time and want to disconnect it immediately.

Method 4: Enable MAC Address Filtering

MAC filtering creates an allow-list of devices. Anything not on the list cannot connect, even with the password.

1. Open your router admin panel and find Wireless MAC Filtering or Access Control.

2. Switch the mode from Disabled to Allow.

3. Add the MAC address of every trusted device in your home.

4. Save. Unknown devices will be rejected even if they know the password.

Security experts on Security Stack Exchange note that MAC filtering alone is not bulletproof, because a determined attacker can spoof a MAC address. Combine it with WPA2 or WPA3 encryption for real protection.

How to Block Unknown Devices Without Changing Your Password

Many users want to remove a single device without forcing every smart bulb, TV, and phone to reconnect. If that’s your situation, use the block list or MAC filtering methods above instead of a password change.

Most modern routers from the last five years include one of these features:

• Block List / Access Control – blocks specific MAC addresses while keeping others connected.

• Time-based access control – lets you set hours when certain devices can connect.

• Connected devices menu with a “block” button – one-tap removal from the device list.

If your router lacks any of these, your ISP may be locking down the firmware. In that case, a password change is your only option, or you can install third-party firmware like OpenWrt if your router supports it.

How to Identify Unknown Devices by Name and Manufacturer

Sometimes the unknown device is actually yours. Smart home gear, streaming sticks, and IoT devices often connect with generic names that don’t match a brand you recognize.

Tips to figure out what the mystery device is:

• Look up the MAC prefix on a vendor database. If the manufacturer is Amazon, Google, Espressif, or Sonos, you probably own the device.

• Check whether unplugging your smart speaker or TV makes the device disappear from the list.

• Match the connection time. If the device appeared right after you set up a new gadget, it is almost certainly that gadget.

• Use a free scanner like Fing (mobile) or Angry IP Scanner (desktop) to label what you see.

When the manufacturer is unfamiliar, especially names like “Unknown,” “android-xyz,” or unfamiliar Chinese vendors, it is worth treating it as an intruder and removing it.

Preventive Security Measures to Stop Unauthorized Access

Removing the device is only half the job. If you don’t fix the underlying weakness, the intruder will come back the moment they crack your password again. These are the four steps I take on every router I set up.

Disable WPS (Wi-Fi Protected Setup)

WPS is a convenience feature that lets you pair devices with an 8-digit PIN. The security community has called it “ridiculously vulnerable” because the PIN can be brute-forced in hours. Disable it.

1. Log in to your router admin panel.

2. Find WPS in the wireless settings.

3. Switch it to Off and save.

Set Up a Guest Network

A guest network isolates visitors and IoT devices from your main network. Even if a guest device is compromised, it can’t reach your laptop or NAS. Most routers let you enable this in under a minute.

1. Go to Guest Network in your router admin panel.

2. Enable a 2.4 GHz and 5 GHz guest SSID.

3. Set a separate password and disable Allow guests to see local network.

4. Connect smart home devices to the guest network if you want maximum isolation.

Update Router Firmware and Use WPA2 or WPA3 Encryption

Outdated firmware is one of the most common attack vectors. Check for updates every 3 months, or turn on auto-update if your router supports it.

Also confirm your encryption is set to WPA2-AES or WPA3. WEP and WPA have been broken for over a decade and should never be used.

Use Network Scanning Tools to Monitor Your Network

Free tools make it easy to monitor your network and catch intruders early:

• Fing (iOS/Android) – quick scan that shows every device connected to your Wi-Fi.

• Angry IP Scanner (Windows/Mac/Linux) – desktop tool that lists every active IP on your subnet.

• Wireless Network Watcher (Windows) – lightweight utility that alerts you when new devices appear.

Run a scan once a month. If something new appears that you don’t recognize, you can deal with it before it becomes a problem.

ISP Router Instructions: Xfinity, AT&T, and Spectrum

ISP-provided routers often have stripped-down interfaces. Here is how to access connected devices on the three largest US ISPs.

Xfinity (Comcast)

1. Open the Xfinity app or go to 10.0.0.1 in a browser.

2. Sign in with your Xfinity credentials.

3. Tap Connection Hub or Devices on the web admin panel.

4. Select the unknown device and click Block.

AT&T

1. Open the Smart Home Manager app.

2. Tap Network > Devices.

3. Toggle Pause next to the unknown device to disconnect it immediately.

Spectrum

1. Sign in at spectrum.net or open the My Spectrum app.

2. Go to Services > Internet > Manage Network.

3. Find the device under Connected Devices and select Remove.

If your ISP router doesn’t have a block feature, call support and ask them to push a firmware update or swap the router. A two-year-old ISP router often lacks modern security controls.

Frequently Asked Questions

Conclusion

Knowing how to kick an unknown device off your home Wi-Fi is one of the most practical skills for any home network owner. The four methods I covered, password change, block list, mobile app, and MAC filtering, give you options whether you want a quick clean sweep or a surgical removal that doesn’t disturb your other devices.

Pair those methods with WPS disabled, a guest network, and WPA2 or WPA3 encryption, and you dramatically reduce the chance of an unauthorized device showing up again. Run a quick Fing scan once a month, and you’ll catch intruders before they have a chance to do real damage.