Pay Now

Mac Address Filter On Tplink Deco M4 →

The TP-Link Deco M4 Go to product viewer dialog for this item.

manages device permissions through a feature called Wi-Fi Access Control, which functions as a MAC address filter. Unlike traditional routers that often use a web-based interface, the Deco series primarily utilizes the Deco app for these configurations. Setting Up MAC Address Filtering

You can restrict or allow specific devices by following these steps in the Deco app:

Open the App: Navigate to the Security tab and select the Wi-Fi Access Control module. Choose a Mode:

Block List (Blacklist): Prevents specific devices from connecting while allowing all others.

Allow List (Whitelist): Blocks all devices except those explicitly added to the list.

Add Devices: You can choose from currently connected clients or manually enter a device's unique 12-digit MAC address.

Save Settings: Ensure the Access Control toggle is enabled for the rules to take effect. Key Considerations

Availability: The "Wi-Fi Access Control" option only appears if all Deco units in your mesh network support the feature.

Security Limitations: While useful for administration, MAC filtering can be bypassed by "MAC spoofing" and does not replace strong WPA2/WPA3 encryption.

Guest Network: If using Allow List Mode, you can enable a Guest Network Exception to let guests connect without needing to be added to the whitelist manually.

Alternative Access: For some firmware versions, you may also be able to access limited settings via a web browser by entering 192.168.0.1 or tplinkwifi.net.

Are you trying to block a specific intruder from your network, or are you looking to set up a strict whitelist for your household devices? How to configure Wi-Fi Access Control on TP-Link Deco

The TP-Link Deco M4

handles MAC address filtering through its Blacklist (now often called Wi-Fi Access Control), which allows you to block specific devices from your mesh network. While older firmware for Deco units primarily supported only blacklisting, recent updates to the Deco ecosystem have begun introducing Allow List (Whitelist) modes for various models. How to Set Up MAC Filtering on Deco M4 mac address filter on tplink deco m4

You can configure these settings through either the Deco mobile app or the web management interface. Option 1: Using the Deco App (Recommended)

Open the App: Launch the TP-Link Deco app and go to the Security tab.

Access Control: Tap the Wi-Fi Access Control module. Note that this option is only visible if all Deco units in your network support the feature.

Choose Mode: Tap Mode to select how you want to filter devices:

Block List Mode: Prevents specific devices from connecting. You can select currently connected clients or manually enter a MAC address.

Allow List Mode: Only allows specific devices to connect. This is a stricter security measure, but TP-Link experts note that guests can still use the Guest Network Exception to connect without being on the allow list. Option 2: Using the Web Interface

Log In: Open a web browser and go to 192.168.0.1 or tplinkwifi.net. Use your admin credentials to log in.

Navigate to Security: Click the Advanced icon in the top right, then select Security from the left-hand menu and choose Access Control.

Enable and Configure: Toggle Access Control on. Select Whitelist or Blacklist and add devices by name and MAC address. Critical Considerations

Whitelisting Limitations: Community feedback has historically highlighted that whitelisting was missing on many Deco models, forcing users to rely solely on blacklisting. Check for the latest firmware updates (such as version 1.4.1 or higher for similar models) to ensure you have the full "Allow List" functionality.

MAC Spoofing: Users on the TP-Link Community forums warn that MAC filtering is not foolproof. Modern devices like iPhones and Androids use Random MAC addresses to enhance privacy, which can bypass fixed MAC filters unless "Private Wi-Fi Address" is disabled for your home network.

Security Context: While MAC filtering adds a layer of control, security experts from Portnox suggest it should be used alongside strong WPA2/WPA3 encryption rather than as a standalone security measure. How to configure Wi-Fi Access Control on TP-Link Deco

TP-Link Deco M4 primarily handles MAC address filtering through a feature called Access Control , which traditionally only supported a

mode to block specific devices. However, recent firmware updates for many Deco models have begun introducing an Allow List (Whitelist) The TP-Link Deco M4 Go to product viewer

mode, though its availability depends on your specific firmware version. TP-Link Community Methods to Configure MAC Filtering

You can manage MAC address filtering for the Deco M4 using either the mobile app or the web interface. 1. Using the Deco App (Recommended) This is the most common method for managing mesh systems. Open the App : Launch the TP-Link Deco app on your mobile device. Access Security tab at the bottom, then select the Wi-Fi Access Control Set the Mode and choose between: Block List (Blacklist) : Prevents specified devices from connecting. Allow List (Whitelist)

: Only permits specified devices to connect (if supported by your firmware). Add Devices

to select currently connected clients or manually enter a device name and its MAC address. 2. Using the Web Interface

For more advanced users, you can access settings through a browser. : Navigate to

TP-Link Deco M4 you can manage MAC address filtering using the Access Control feature in the Deco app . This allows you to either block specific devices ( ) or permit only certain ones ( www.tp-link.com How to Set Up MAC Filtering (Access Control)

Follow these steps to configure access control via the Deco app: Open the Deco App

: Ensure your phone is connected to your Deco's Wi-Fi network. Navigate to Security : Tap on the tab at the bottom, then select the Wi-Fi Access Control Choose a Mode and select one of the following: Block List Mode

: Prevents specific devices from connecting. All other devices can access the network. Allow List Mode

: Only devices in this list can connect. This is the most secure "Whitelist" option. Add Devices From Connected List icon and choose Select Clients to pick from currently active devices. Add by MAC Address

to manually enter a device's name and its specific MAC address. Save Changes to apply the filtering rules. Web Management Alternative

If you prefer using a browser, you can also access settings via the web interface: tplinkdeco.net 192.168.68.1 and log in with your TP-Link ID Configuration : Navigate to Access Control to toggle the switch and manage your lists. www.tp-link.com Key Considerations Randomized MAC Addresses

: Modern smartphones (iOS and Android) often use "Private Wi-Fi Addresses" that change periodically. If you use an Allow List

, you may need to disable this feature on each device or the Deco will block them when their MAC address changes. Guest Network Exception Allow List Mode Method 1: Using the "Block" Feature (Recommended) This

, you can enable "Guest Network Exception" to let guests connect to your guest Wi-Fi without needing to add them to your main whitelist. Firmware Updates

: If you don't see these options, ensure your Deco M4 is running the latest firmware by checking Update Deco in the app. MAC address

on a specific device like a laptop or phone to add it to your list? MAC Address Filter on TP-LINK Deco M4, How To

Method 1: Using the "Block" Feature (Recommended)

This is the easiest way to set up MAC filtering if the device has already connected to your network (or is trying to).

Step 1: Open the Deco App Launch the TP-Link Deco app on your phone and log in.

Step 2: Locate the Device

  1. Tap on the Devices icon at the bottom (or top, depending on app version).
  2. Find the device you want to block. If it is currently connected, it will appear in the "Online" list. If it is not connected but has connected before, look in the "Offline" list.
  3. Tip: If you don't see the device name, look for the MAC address in the list of clients.

Step 3: Access Device Details Tap on the specific device name to open its Device Details page.

Step 4: Block the Device

  1. Look for the Block toggle switch (usually near the top or bottom of the screen).
  2. Toggle it ON.
  3. The device will immediately be disconnected and unable to access the internet.

Step 5: Manage Blocked List To see devices you have blocked or to unblock them later:

  1. Go to the Devices tab.
  2. Tap the Settings (Gear icon) or look for the menu options.
  3. Select Blocked Devices. Here you will see a list of all MAC addresses you have filtered.

Conclusion: Is MAC Address Filtering on the Deco M4 Worth It?

The TP-Link Deco M4 is a robust mesh system, but its implementation of MAC address filtering is non-standard. Because TP-Link prioritizes user-friendliness over technical granularity, you won't find a classic "MAC Filter" tab. Instead, you get the Whitelist feature.

The Bottom Line:

  • For 90% of home users, a strong Wi-Fi password + WPA2/WPA3 encryption is sufficient.
  • For power users, small offices, or homes with dozens of IoT devices, activating the Whitelist on the Deco M4 is the only true way to enforce a MAC address filter.

Remember to disable random MAC addresses on your personal devices, always add your current phone to the Whitelist before activating it, and use the Blacklist only for temporary blocks. By following this guide, you transform your Deco M4 from a simple mesh router into a fortress-like access point, granting entry only to the devices you explicitly trust.

Method 2: Blocking a Device That Has Never Connected

If you want to block a device that has never connected to your Deco M4 before (e.g., a neighbor's device you saw scanning), the process is slightly different because the device won't appear in your list.

The Workaround: The Deco app interface does not have a simple "Add MAC Address Manually" button in the Blocked List menu. You must use the Network Map feature via the web interface.

  1. Get a PC/Laptop: Connect a computer to the Deco network (Wi-Fi or Ethernet).
  2. Access Web Interface: Open a web browser and type http://tplinkdeco.net or the IP address of the main Deco (usually 192.168.0.1 or 1.1).
  3. Login: Use your TP-Link ID password.
  4. Go to Network Map: Click on the Network Map tab on the left or top.
  5. Blocked Clients: Look for the Blocked Clients section.
  6. Add Manually:
    • Here you may find an option to Add a device.
    • Enter the Device Name (for your reference).
    • Enter the MAC Address of the device you wish to block.
  7. Save: Click Save/Ok.

Note: Web interface features can vary by firmware version. If you do not see this option on the web interface, the device must attempt to connect once before you can block it via the App.

2. IoT Security (Smart Home Isolation)

Smart bulbs, plugs, and cameras from cheap brands are notoriously insecure. By using a MAC address Whitelist, you ensure that a compromised smart plug cannot invite malicious devices into your network. Only pre-approved hardware gets access.