MAC Filtering: How It Works & Should You Use It
MAC filtering allows or blocks devices by hardware ID. Here is how to set it up and why it should not be your only protection.
MAC filtering lets your router allow or block devices by their MAC address. A whitelist lets only listed devices join. A blacklist blocks specific ones.
MAC filtering lets your router allow or block devices by their MAC address: a whitelist lets only listed devices join, and a blacklist blocks specific ones. It is useful to kick out a known device, but it is not real security, because MAC addresses are easy to copy.
It is useful to kick out a known device, but it is not real security, because MAC addresses are easy to copy. Here is how to use it well.
How to set up MAC filtering
- Log in to your router admin page. Find the address with our Router IP Finder, or try 192.168.1.1 or 192.168.0.1.
- Open Wireless, MAC Filter, Access Control or Wireless MAC Filtering.
- Choose Allow (whitelist) or Deny (blacklist).
- Add devices from the connected list, or type their MAC addresses.
- Save. Test that your own devices still connect.
Before turning on a whitelist, add every device you own, including TVs and smart plugs, or they will drop off.
The whitelist-first mistake is the one I warn people about before they switch it on.
Private MAC addresses can break filters
Phones and Windows can use a random MAC per network. Turn this off for your home network, or the filter will treat the device as new. The random MAC is the setting I check first when a known device stops connecting.
Whitelist vs blacklist
| Mode | Use when | Effort |
|---|---|---|
| Blacklist (deny) | Blocking a neighbor or old device | Low |
| Whitelist (allow) | Small, stable set of devices | High, every new device must be added |
The whitelist is the mode I pick for a small, stable home.
Better security steps
- Use WPA2 or WPA3 with a long password.
- Change the WiFi password if someone unknown is connected.
- Use a guest network for visitors.
- Turn off WPS PIN.
The guest network is the step I take before I touch MAC filtering.
Why MAC filtering is weak security
MAC filtering sounds secure: only listed devices can join. But MAC addresses are sent in plain view over the air, and anyone with basic tools can see an allowed address and copy it to their own device in seconds.
It’s a useful tool for keeping honest people off, like a child’s second tablet, but it doesn’t replace a strong WPA2 or WPA3 password. A copied MAC is the trick I have seen beat a whitelist in seconds.
Find a device’s MAC address
- Windows: run
ipconfig /alland look for Physical Address under the WiFi adapter. - Mac: System Settings, Network, WiFi, Details, Hardware.
- iPhone: Settings, WiFi, tap (i). The WiFi Address shown is the one used on that network.
- Android: tap the network, then look for MAC address (choose Device MAC if you want the real one).
- Router: the connected devices list shows the MAC for each.
The router’s connected list is where I look first for a MAC address.
Better alternatives for controlling access
- Guest network for visitors, with a password you change often.
- Parental controls or pause in the router app for specific devices.
- WPA3 with a long password for real security.
- Device approval features on some mesh systems.
The guest network with a rotating password is the setup I recommend most.
MAC filtering in shared houses and offices
MAC filtering still has a place where you want a simple list of approved devices, like a small office printer network or a shared house where only tenants’ laptops should join a particular network. It keeps casual users off and makes it obvious when a new device appears.
Just remember the upkeep: every new phone, laptop or replacement device needs adding, and private MAC addresses on phones need switching off for that network. The upkeep is the part I warn about before anyone picks a whitelist.
Locked yourself out with MAC filtering
- Connect a computer to the router with an Ethernet cable, which usually bypasses WiFi MAC filtering.
- Log in and either add your device or turn the filter off.
- If that doesn’t work, factory reset the router and set it up again.
Always add the device you’re using to the allow list before you switch whitelist mode on.
The Ethernet cable is the rescue I reach for when WiFi locks me out.
Router access control features
Many routers now offer friendlier alternatives to raw MAC filtering, such as “Block new devices”, “Device approval” or access schedules per device. They still use MAC addresses underneath but are easier to manage from an app, and they show device names instead of strings of letters and numbers.
Device names instead of MAC strings is the change I welcome most.
