How to Enable MAC Address Filtering
MAC filtering creates a whitelist of devices allowed to connect to your network. It adds a layer of access control, though it is not a replacement for a strong Wi-Fi password.
What Is MAC Address Filtering?
Every network device (phone, laptop, smart TV) has a MAC (Media Access Control) address - a unique hardware identifier in the format XX:XX:XX:XX:XX:XX. MAC filtering lets you build a list of approved MAC addresses in your router. Only devices on the approved list can connect, even if they know your Wi-Fi password.
The practical value is limited because MAC addresses can be spoofed by anyone monitoring your network traffic. An attacker can see the MAC addresses of connected devices and clone one. However, MAC filtering does stop casual, opportunistic connections and adds friction for non-sophisticated attempts.
Realistic expectation: MAC filtering is a supplementary measure, not a primary security control. A strong WPA3 password matters far more. Use MAC filtering as an additional layer, not as a replacement for proper encryption.
How to Set Up MAC Filtering
Windows: run ipconfig /all in Command Prompt, look for Physical Address. Mac: System Preferences > Network > Advanced > Hardware. iPhone: Settings > Wi-Fi > tap your network > Hardware Address. Android: Settings > About Phone > Wi-Fi MAC Address.
Go to http://192.168.1.1. Navigate to Wireless > MAC Filter, Advanced > Security > Access Control, or similar.
Set the filter mode to Allow List or Whitelist. Add each approved device MAC address one by one. Make sure you include every device that needs to connect to your network.
Save and enable the MAC filter. Confirm your own device is still connected. Test with a device not on the list to verify it is blocked.
Add your own device to the list before enabling the filter. Enable-first-add-later is the classic self-lockout, and if you did it over Wi-Fi you'll need an Ethernet cable (usually exempt from wireless MAC filters) or a factory reset to get back in.
The Modern Problem: MAC Randomization
Here's what makes MAC filtering genuinely painful to live with in the 2020s: phones no longer present their real MAC address. iOS (Private Wi-Fi Address), Android (randomized MAC, default since Android 10) and Windows (optional random hardware addresses) all generate a per-network MAC to prevent stores and airports from tracking devices between visits. Good for privacy. Terrible for your allowlist.
The symptoms are maddeningly intermittent: a phone works for months, then iOS rotates the address ("rotating" mode appeared in iOS 18) or a "forget network and reconnect" generates a fresh MAC, and the phone silently can't connect while every other device is fine. Nobody connects the dots because the allowlist "hasn't changed". If you run MAC filtering, you either turn off randomization per device for your home network (possible on iOS and Android, per network), or you add every new random MAC as it appears, forever. This maintenance tax is the main reason we don't recommend the feature for households with modern phones.
So Is It Ever Worth Using?
As a security control, honestly no. Every Wi-Fi frame carries its source MAC in the clear, encrypted network or not, so an attacker with a laptop sees valid MACs the moment any of your devices transmits, and cloning one takes a single command. MAC filtering stops exactly the attackers who weren't getting in anyway, and its real-world cost lands on you, not them (see the randomization section above).
Where it earns a modest living instead is housekeeping, not security: a fixed-device network like a shop's till and printers where nothing new ever joins, keeping the kids' friends' phones off the main network without changing the password (a guest network does this better), or IoT wrangling on a separate SSID. If you want the security outcome people usually seek from MAC filtering, the checklist is short: WPA2/WPA3 with a long password, WPS off, and an occasional look at the connected devices list.