How to Remove Devices From a Wi-Fi Router: Device Management Guide

To remove one device from a Wi-Fi router, open the router app or admin page, select the device under Connected Devices, and choose Pause, Block, or Access Control. But the right option depends on your goal: change the Wi-Fi password to revoke access from an unknown device or former guest, use Forget This Network on your own phone or computer to delete its saved profile, and use Delete offline device only to clean an old entry from the router list.

First, decide what you mean by remove

A router usually cannot erase a device from existence. It can disconnect the device, deny future access, revoke the Wi-Fi password it used, remove a saved network profile from the device itself, or hide an old entry from the router’s management screen. These are different operations.

As an Amazon Associate I earn from qualifying purchases.

What you want	Use this control	What happens
Temporarily stop Internet access	Pause, kick, or disable Internet	The device loses Internet access. It may remain connected to Wi-Fi or the local network.
Stop one known device from reconnecting	Block, deny list, or access control	The router applies a rule against that client. The exact effect varies by router.
Remove access from a former guest or unknown device	Change the Wi-Fi password	Devices using the old credentials must authenticate again.
Stop your own phone or computer from auto-joining	Forget this network	The device deletes its saved Wi-Fi profile and password.
Clean an old router-list entry	Delete or clear offline device	The record disappears from the management list, but the device may reconnect later.
Prepare the router for a new owner	Unbind, remove it from your account, then factory reset	The router’s configuration and account association are removed.

For a known device, pause it for a temporary restriction or block it for a device-specific rule. For an unknown device or former guest, changing the Wi-Fi password is the most dependable consumer-level way to revoke access. If you only want to tidy the app, delete the offline record—but do not confuse list cleanup with security.

How to remove a device from most Wi-Fi routers

Before you start

• Keep another device connected to the router if possible. If you block the phone or computer you are using to manage the router, you may lose access to the control panel.
• Record the target device’s name, IP address, MAC address, connection type, and whether it appears online or offline.
• Do not enable an allow-list or whitelist until your own administrator device and every required client have been added.
• If the router is in bridge or access-point mode, the upstream gateway may be the device that must enforce the rule.

Using a router or ISP app

1. Open the router manufacturer’s or Internet provider’s app.
2. Open Devices, Clients, Connected Devices, Network Map, or Device Manager.
3. Select the correct client. Confirm it using the MAC address and connection details rather than its name alone.
4. Choose Pause, Block, Disable Internet, Deny, or Access Control.
5. Confirm and save the change.
6. Refresh the device list and test from the target device if you can.
7. Check whether the device is offline, blocked but still locally connected, or simply retained as an offline historical record.

Using a browser-based router page

1. Connect to the router’s network, preferably from a second device.
2. Open the router’s management address or manufacturer hostname. There is no universal address such as 192.168.1.1.
3. Sign in with the router administrator credentials. These are separate from the Wi-Fi password on many routers.
4. Open Connected Devices, Wireless Clients, Access Control, MAC Filtering, ACL, or Parental Controls.
5. Select the client and add it to a block or deny list, or disable its Internet access.
6. Click Apply or Save, then verify the result in the client list.

Menu names and behavior vary by model, firmware, app version, and operating mode. TP-Link documents different procedures for newer and older hardware, and ASUS notes that its available controls depend on the interface and firmware version. See the TP-Link blocking guide and ASUS connected-device documentation for model-specific differences.

How to remove devices by router brand

eero

Block one device

1. Open the eero app.
2. Find the device under Devices.
3. Tap the device, then tap the More Options icon.
4. Tap Block device.

eero says blocking immediately disconnects an online device and prevents it from rejoining, even with the correct Wi-Fi password. eero also says device blocking is unavailable when the eero network is operating in bridge mode. See eero’s blocking instructions.

Pause instead

Select the device or its profile in the eero app and tap Pause device or Pause profile. A paused device may remain connected to Wi-Fi and appear online, but it cannot reach the Internet. That makes pause useful for schedules or temporary restrictions, but it is not equivalent to disconnecting the client from the local network. See eero’s pause documentation.

Change the password

Use Settings → WiFi name & password, edit the password, and tap Save. eero says previously connected devices must be manually reconnected with the new password. See eero’s password instructions.

TP-Link

Many current Wi-Fi 6, Wi-Fi 6E, and Wi-Fi 7 models

1. Open TP-Link Tether.
2. Select the local router.
3. Tap More, then Block List.
4. Tap +.
5. Select the client or enter its MAC address.
6. Save the rule.

Many older models

Open Clients, swipe left on the target device, and tap Block. TP-Link warns that behavior varies by model. On some older products, a blocked device may still associate with Wi-Fi while being denied Internet access. Use the current TP-Link blocking guide to match the path to your hardware.

On supported web interfaces, access control commonly appears under Advanced → Security → Access Control. Enable access control, select Blacklist or Deny List, add the device, and apply the settings. The exact labels differ by model and firmware.

NETGEAR Nighthawk and Orbi

Block a connected device

1. Connect to the network.
2. Open routerlogin.net or routerlogin.com for many NETGEAR routers. For Orbi, use orbilogin.com; some recent Orbi models also support orbilogin.local.
3. Sign in.
4. Go to Advanced → Security → Access Control.
5. Turn on Access Control.
6. Select Block beside the target device and apply the setting.

NETGEAR notes that clearing the Access Control checkbox allows all devices—including devices in the blocked list—to connect again. Its mode for blocking all new devices may deny Internet access while still allowing local-network access. Ethernet and Wi-Fi interfaces on the same physical device can also have different MAC addresses. See NETGEAR’s Access Control guide.

Delete an offline device record

1. Open the Nighthawk or Orbi app.
2. Open Device Manager.
3. Select an offline device.
4. Tap Delete This Device.

NETGEAR says the device must be offline to remove it from the list. If it reconnects later, it can appear again. This is list maintenance, not a permanent access-control rule. See NETGEAR’s offline-device instructions.

ASUS

Block a device

In the ASUS Router app, open Devices, select the device from the online or offline list, and tap Block. In the web interface, look for a device-level Block Internet Access control. ASUS recommends changing the Wi-Fi password when an unknown device is found instead of relying on the block control alone. See ASUS connected-device guidance.

Clean an offline entry

1. Open Devices.
2. Expand the offline-device list.
3. Select the device.
4. Tap Delete → Clean offline list.

ASUS explicitly says deleting an offline device from the list does not stop it from reconnecting. Blocking and deleting are separate actions. See ASUS’s offline-device documentation.

Google Nest Wifi and Google Wifi

Google’s documented device control is primarily pause:

1. Open the Google Home app.
2. Tap Home → Wi-Fi → Devices.
3. Select the device.
4. Tap Pause device.
5. Choose a duration and save.

Google warns that Family Wi-Fi may have difficulty identifying devices that use private or randomized MAC addresses. The Google Wifi app is no longer the full configuration interface; Google says network changes should be made in Google Home. See the Google pause instructions, Family Wi-Fi limitations, and Google Home app guidance.

If a device still knows the Wi-Fi password, changing that password is the dependable way to revoke its credentials. A Google support-community product expert has described removing an inactive entry as cosmetic rather than a block; treat that as community guidance, not a universal official product guarantee.

Xfinity xFi and other ISP-managed gateways

ISP-managed routers commonly use Pause, Profiles, Downtime, or Parental Controls instead of a generic delete button. In Xfinity xFi, look for the device under Wi-Fi, Connected Devices, or a person/profile, then use pause or scheduled downtime. See Xfinity’s device-management documentation.

For other ISP gateways, identify the exact gateway model and search its app for Wi-Fi, Connected devices, People, Profiles, Pause, Parental controls, Access control, or Blocked devices.

How to identify a device before blocking it

Do not assume an unfamiliar name represents an intruder. Router names are often incomplete or manufacturer-generated, and a legitimate phone can appear under a new name or address.

Common explanations include:

• A phone using a private or randomized MAC address.
• The same device appearing separately on 2.4 GHz, 5 GHz, 6 GHz, Ethernet, or a mesh node.
• A smart TV, printer, console, streaming stick, camera, thermostat, speaker, or appliance using a generic hostname.
• A guest-network client shown in a separate list.
• A modem/router, range extender, access point, or mesh satellite.
• A device connected through a second router broadcasting the same SSID.
• An old device retained in the router’s offline history.

A reliable identification workflow

1. Record the device name, manufacturer, IP address, MAC address, band, connection type, and online/offline status. ASUS, TP-Link, and Linksys document client details such as these.
2. Turn off Wi-Fi on a suspected household device.
3. Refresh the router’s client list.
4. If an entry disappears, compare its MAC address with the address shown by that device for this specific Wi-Fi network.
5. Repeat for phones, tablets, TVs, consoles, speakers, cameras, printers, and appliances.
6. Check both the primary and guest networks.
7. Check whether you use a second router, extender, access point, or mesh system.

Apple devices use a private Wi-Fi address for each network, and Android 10 and later use randomized MAC addresses by default in client mode. These privacy features can create duplicate, unfamiliar, or changing entries. See Apple’s private-address documentation, Android’s MAC-randomization documentation, and Google Pixel’s MAC guidance.

MAC address versus IP address

A MAC address identifies a network interface on the local network. A device can have different MAC addresses for Wi-Fi and Ethernet, and modern phones may present a private or randomized Wi-Fi address for each network.

An IP address is the local network address assigned to the client, often temporarily by DHCP. It can change when the device reconnects. Use the IP address as a helpful cross-check, but use the MAC address and connection details when creating a device-specific router rule.

MAC filtering is useful as a convenience control, but it is not strong authentication. NIST explains that MAC access-control lists can be bypassed because addresses can be captured and spoofed. Address randomization also makes device identification less consistent. Use strong Wi-Fi encryption and password management as the foundation; do not treat MAC filtering as a substitute. See NIST’s wireless-security guidance.

Handling private or randomized addresses

• Check the MAC address shown for the specific Wi-Fi network, not only the hardware address under About or Device Information.
• For parental controls or an allow-list, add the address the device actually presents to that network.
• Do not disable private addressing merely to make the router list look cleaner.
• If disabling it is necessary to diagnose a legacy access-control system, restore the privacy setting afterward.
• For Pixel devices, Google advises considering both the hardware and randomized MAC addresses when configuring network parental controls.

Change the Wi-Fi password to revoke access

Change the Wi-Fi password when the device is unknown, a former guest knows the password, the password has been shared widely, or you cannot reliably identify every MAC address. This revokes the old credential for that particular SSID and is more dependable than trying to block one changing device address.

Steps

1. Open the router or ISP app, or sign in to the router’s web interface.
2. Open Wi-Fi, Wireless, Network, or SSID settings.
3. Change the password for the affected network.
4. Use a long, unique passphrase.
5. Save or apply the change.
6. Reconnect trusted devices manually.
7. Change the router administrator password separately if unauthorized router access is possible.
8. Review the guest network and other SSIDs, including IoT networks.
9. Review WPS and remote-management settings.

Changing the Wi-Fi password is not the same as changing the router administrator password. The FTC treats these as separate security controls because someone with administrator access may be able to change the Wi-Fi password and other router settings. Read the FTC home Wi-Fi security guide.

Trade-offs

Advantages: it revokes access from every device using the old credential, does not depend on correctly identifying a MAC address, and handles former guests and unknown clients.

Costs: every legitimate device on that SSID must reconnect; smart-home devices may require reconfiguration; offline devices may be difficult to update; and a second SSID, guest network, wired connection, or separate router is not automatically affected. Changing the SSID as well as the password creates a larger reset but can help distinguish your network from another router using the same name.

Forget the saved Wi-Fi network on your phone or computer

If the goal is to remove your own device’s saved Wi-Fi credentials or stop automatic reconnection, use the operating system’s Forget network control. This acts on the client, not the router.

iPhone and iPad

Go to Settings → Wi-Fi → Edit, tap the information button beside the network, then tap Forget This Network. Apple says this deletes the saved password and prevents automatic rejoining unless you connect manually again. See Apple’s instructions.

Mac

Go to System Settings → Wi-Fi → Advanced, use More Options beside the network, and choose Remove From List. See Apple’s Mac Wi-Fi guidance.

Android

On Android 12 and later, go to Settings → Network & internet → Internet, touch and hold the saved network, and tap Forget. Labels vary by Android version and manufacturer. See Google’s Android Wi-Fi instructions.

Windows 10 and Windows 11

Go to Settings → Network & internet → Wi-Fi → Manage known networks, select the network, and click Forget. Microsoft documents this as removal of the saved Wi-Fi profile. See Microsoft’s Wi-Fi troubleshooting guide.

Find the router’s management address

If you cannot find the router’s app or web address, locate the default gateway from a device already connected to the network.

Windows

Open Command Prompt and run:

ipconfig

Look for Default Gateway. Microsoft’s `ipconfig` documentation explains that the command displays the IPv4 address, subnet mask, and default gateway.

Linux

Run:

ip route

Look for the line beginning with default. The address after it is normally the default gateway. See the `ip route` manual.

macOS

Open System Settings → Network, select the active connection, open Details → TCP/IP, and look for Router. See Apple’s TCP/IP settings guide.

What to do when an unknown device is confirmed

An unfamiliar entry is not automatically proof of hacking. First identify it and check whether it is an old record, private address, mesh equipment, or a household device. If you confirm that it does not belong on the network, take these steps:

1. Record the device name, IP address, MAC address, and timestamps.
2. Block or pause it immediately if your router offers that control.
3. Change the Wi-Fi password.
4. Change the router administrator password separately.
5. Review every SSID, including guest and IoT networks.
6. Review wired clients and any second router or access point.
7. Disable WPS if you do not need it.
8. Disable remote administration unless you deliberately require it.
9. Update the router firmware.
10. Use WPA3 where all important clients support it; otherwise choose the strongest compatible WPA2 option.
11. Reconnect only trusted devices.
12. Monitor the device list after the password change.

The FTC recommends changing default administrator credentials, enabling encryption, updating the router, checking connected devices, disconnecting devices no longer in use, and using a separate guest network. CISA likewise recommends changing default router credentials and using strong wireless security. See the FTC home Wi-Fi guide, FTC connected-device guide, and CISA wireless-security guidance.

Why the device still appears after removal

It was deleted from history, not blocked

Many apps show online clients and previously connected clients together. A deleted offline record may disappear temporarily but return when the device reconnects. ASUS explicitly distinguishes cleaning the offline list from blocking, and NETGEAR requires a device to be offline before deleting its record.

The device is using a new private MAC address

Phones and computers may present a different address after connecting to a network or changing network privacy settings. The router can then treat one physical device as a new client. Identify the address shown for that particular network.

It connected to the guest network

Blocking or changing the password on the main SSID may not affect a device using the guest SSID. Review guest-network clients and change that password separately if necessary.

There are two routers using the same SSID

A modem/router combination and a mesh system may broadcast the same network name. A device can connect to the other access point while appearing to be on the expected Wi-Fi. Google recommends disabling the old router’s Wi-Fi or using distinct network names during diagnosis. See Google’s duplicate-network guidance.

The device is wired or using cellular data

A Wi-Fi rule does not necessarily affect an Ethernet connection. A phone can also continue using cellular data after its Wi-Fi Internet access is paused. Linksys notes that parental controls apply to devices using the home Wi-Fi connection, not mobile data, and that wired and wireless interfaces can appear as separate clients. See Linksys parental-control guidance.

The router is in bridge mode

In bridge mode, the mesh system may not be acting as the network gateway. Configure access control on the upstream ISP gateway or primary router. eero specifically says blocking is unavailable when its network is in bridge mode.

The block only denies Internet access

Some routers permit a blocked device to associate with Wi-Fi or communicate locally while denying Internet access. NETGEAR documents this behavior for some access-control modes, while eero distinguishes its stronger Block device control from Pause. Check the manufacturer’s definition of block before assuming local-network access has also been removed.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

If you block your own device

1. Use another administrator device to open the router app or control panel.
2. Connect a computer by Ethernet if the router permits wired management.
3. Use cellular data to reach a cloud-managed router app, if supported.
4. Open the blocked-device or access-control list and undo the rule.
5. Factory-reset the router only as a last resort.

A factory reset erases custom SSIDs, passwords, guest networks, port forwards, parental-control rules, and other configuration. Google describes it as a destructive operation that requires the network to be set up again. See Google’s factory-reset guidance.

When to use an allow-list or whitelist

An allow-list permits only explicitly approved devices. It can work for a small, stable household with a complete device inventory, but it is easy to misconfigure.

• Add the device you are currently using to administer the router before applying the rule.
• Inventory Wi-Fi and Ethernet clients separately.
• Account for private and randomized MAC addresses.
• Keep a second management path available.
• Understand that an allow-list is still dependent on the router’s client-identification behavior.

NETGEAR specifically warns administrators to allow the device currently being used before applying access-control settings. For most homes, a strong unique password, current encryption, guest networking, and targeted blocking are easier to maintain than a permanent whitelist.

Use a guest network for visitors and less-trusted devices

Do not share the primary Wi-Fi password with every visitor. Create a guest network with separate credentials, and use an IoT or guest network when your router supports isolation for less-trusted smart-home devices. The FTC recommends guest networking because separate credentials can reduce the risk that a guest device exposes the primary network. Remember that a guest-network device must be managed and removed from the guest SSID, not only from the main network.

WPA3 and older devices

WPA3 improves wireless security, but some older clients do not support WPA3-Personal or mixed WPA2/WPA3-Personal modes. ASUS documents compatibility problems with legacy devices, which may need a compatible IoT or legacy network. Microsoft recommends WPA3 when both the router and client support it. See ASUS’s Wi-Fi security guidance and Microsoft’s wireless-network guidance.

Removing, transferring, or resetting the router itself

If you are selling, returning, or giving away the router, removing a client is not enough. Remove or unbind the hardware from the manufacturer’s account if the app supports that option, then follow the manufacturer’s factory-reset procedure. A reset removes the router’s configuration rather than merely removing one device.

Before resetting, save any information you will need to rebuild the network, including the ISP connection details, Wi-Fi names and passwords, guest-network settings, port forwards, DNS settings, parental controls, and mesh-node configuration. Afterward, the new owner should claim the router with their own account. The precise unbind and reset steps vary by manufacturer.

Frequently Asked Questions

Can I remove a device without changing the Wi-Fi password?

Usually, yes. A router can block or pause one identified device without changing the password for everyone. However, the device may still reconnect if it uses a different randomized MAC address, another SSID, a second router, Ethernet, or a router control that only blocks Internet access. If you cannot identify every address or suspect the password was shared, change the Wi-Fi password.

Does deleting a device from the router list block it?

Not necessarily. Deleting an offline device from an app often removes only its historical record. ASUS explicitly says cleaning the offline list does not prevent reconnection, and NETGEAR says a deleted device can reappear when it reconnects. Use block or access control to deny access, or change the Wi-Fi password to revoke the old credential.

Can a blocked device reconnect?

That depends on the router and the exact control. eero says its Block device feature disconnects the client and prevents it from rejoining. Other systems may use block to mean Internet access only, leaving local Wi-Fi access available. Confirm the manufacturer’s behavior and test the result.

Why do I see the same phone twice?

The device may use a private or randomized MAC address, or it may appear separately on different bands, mesh nodes, or Ethernet. It could also be a TV, printer, appliance, extender, or stale offline record. Turn off Wi-Fi on suspected household devices one at a time and refresh the router list.

Does pausing Wi-Fi block cellular data?

No. Pausing a device’s Wi-Fi Internet access does not disable its cellular connection. The device may also be using a different Wi-Fi network, a hotspot, Ethernet, or another router.

How do I remove a device from a guest network?

Open the router app or management page, switch to the guest-network device list, and pause or block the client there. If guests know the guest password, change the guest-network password. Changing the primary Wi-Fi password does not necessarily revoke access to the guest SSID.

How do I know whether an unknown device is mine?

Compare its MAC address, IP address, manufacturer, connection type, and band with your household devices. Turn off Wi-Fi on suspected devices and refresh the list. Check mesh nodes, extenders, guest networks, wired devices, and old offline records before treating the entry as an intruder.

What is the difference between a MAC address and an IP address?

A MAC address identifies a local network interface, while an IP address is a local network address assigned to the client and may change. Wi-Fi and Ethernet interfaces can have different MAC addresses, and phones may use private or randomized Wi-Fi addresses.

Should I disable private Wi-Fi addresses?

Normally, no. Private addressing improves privacy, and disabling it just to make a router list cleaner is not recommended. If a legacy parental-control or allow-list system requires it for diagnosis, use the network-specific address and restore private addressing afterward.

Do I need to remove the device from the router and from its own Wi-Fi settings?

Only if you need both outcomes. Forgetting a network on the device deletes its saved password and stops automatic joining, but it does not block the router from accepting that device later. Blocking or changing the Wi-Fi password acts on the router side.

What if my router is in bridge mode?

Possibly. A bridged mesh system may not be the gateway enforcing network access. Configure the rule on the upstream modem/router or primary gateway. eero, for example, says device blocking is unavailable in bridge mode.

Should I factory-reset the router?

No, not for normal device removal. A factory reset erases the router’s SSIDs, passwords, guest networks, port forwards, parental controls, and other settings. Use it only for recovery, transfer of ownership, or a serious router-compromise situation after saving the configuration details you need.

The Bottom Line

Use Pause for a temporary Internet restriction, Block for a known device-specific rule, Forget network on a phone or computer to delete its saved Wi-Fi profile, and Delete offline device only to clean the router’s list. If an unknown device or former guest must lose access, change the Wi-Fi password—and change the router administrator password too if compromise is possible.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.