You can set up these filters by accessing the Deco's web management page or using the mobile app:
You can block a device even if it is not currently connected to your Wi-Fi.You will need to know the specific 12-character MAC address of that hardware.
: Many modern devices (iOS 14+, Android 10+, Windows 10+) use "Private Wi-Fi Addresses" or "Random Hardware Addresses," which can bypass your filters if they change. You may need to disable this on the specific device to ensure the filter stays effective.
Complete Guide: Setting Up a MAC Address Filter on the TP-Link Deco M4 mac address filter on tplink deco m4
Depending on your Deco M4's firmware version, you may have access to a more advanced feature called "Wi-Fi Access Control." This setting allows you to choose between a and an Allow List (also known as a whitelist).
: On any device on your network where you plan to use MAC filtering, simply go into its Wi-Fi settings for your network and disable the Private Address feature . This forces the device to use its actual, unique hardware MAC address, making it a permanent and reliable identifier for your Deco.
The (via Blacklist and Wi-Fi Access Control) is perfect for: You can set up these filters by accessing
If you prefer using a computer, you can also access the Deco's web-based management interface.
The primary way to manage MAC filtering on the Deco M4 is through the TP-Link Deco App Open the App : Launch the Deco app on your mobile device. Access Block List : Go to the tab and select Block List Add a Device in the top right corner. You have two options: Select Clients
: Only allows listed devices to connect; all others are blocked. Complete Guide: Setting Up a MAC Address Filter
Traditional routers use two types of MAC filtering: whitelisting and blacklisting.Whitelisting allows only pre-approved devices to connect to your Wi-Fi network.Blacklisting allows everyone to connect except for the specific devices you choose to block.
: Prevents specific devices from connecting. You can select currently connected clients or manually enter a MAC address.
In the landscape of modern home networking, convenience often battles with security. The TP-Link Deco M4, a popular mesh Wi-Fi system designed to eliminate dead zones, is no exception. While it boasts WPA2 encryption and easy setup, one of its more granular—yet misunderstood—security features is MAC address filtering. On the Deco M4, this tool acts as a digital bouncer, scrutinizing the unique hardware ID of every device attempting to enter the network. However, while it adds a layer of access control, its implementation on the Deco M4 reveals both practical utility and inherent limitations, positioning it less as a primary defense and more as a supplemental management feature.
Toggle the switch or tap the button labeled or Add to Blacklist . Confirm your choice if a pop-up menu prompts you. How to Manually Add a Device to the Blacklist
Turn on Connection Alerts in the app to get a notification the second a new device joins.