Mac Address Filter On Tplink Deco M4 [OFFICIAL]

What is a MAC Address Filter? A MAC (Media Access Control) address filter is a security feature that allows you to control which devices can connect to your network. By filtering devices based on their MAC addresses, you can prevent unauthorized devices from accessing your network.

How to Set Up MAC Address Filter on TP-Link Deco M4:

Open the Deco App: First, make sure you have the Deco app installed on your smartphone or tablet. Open the app and log in to your TP-Link account.
Select Your Deco M4 Network: Tap on the Deco M4 network you want to configure.
Go to More Settings: Tap on the "More" icon (three dots) on the top right corner of the screen, then select "More Settings".
Select Advanced Settings: Scroll down and select "Advanced Settings".
Select MAC Filtering: Tap on "MAC Filtering" under the "Security" section.
Enable MAC Filtering: Toggle the switch to enable MAC filtering.
Add Devices to Allow List: Tap on "Add Device" to add devices you want to allow on your network. You can add devices by their MAC address or by scanning the QR code on the device.
Add Devices to Deny List: Tap on "Add Device" under the "Denied Devices" section to add devices you want to block on your network.
Save Changes: Tap on "Save" to save your changes.

How to Find a Device's MAC Address:

On a Windows computer: Press the Windows key + R, type cmd, and press Enter. Type ipconfig /all and press Enter. The MAC address is listed as the "Physical Address".
On a Mac computer: Go to System Preferences > Network > Advanced > Hardware.
On a mobile device: Go to Settings > About Phone > Status > Wi-Fi MAC address.

Tips and Precautions:

Make sure to add your own device's MAC address to the allow list to avoid blocking yourself from the network.
You can add up to 64 devices to the allow and deny lists.
If you forget to add a device to the allow list, it will not be able to connect to your network.

By following these steps, you can set up a MAC address filter on your TP-Link Deco M4 network to control which devices can connect to your network. mac address filter on tplink deco m4

1. The Whitelist (Allow List): The Hermit’s Approach

This is the nuclear option. When you enable "Whitelist," only the devices you manually add can connect. Everyone else—even if they have the correct Wi-Fi password—gets an automatic "Access Denied."

Best for: High-security environments. A home office handling sensitive data, or a rental property where you want to lock down access to only approved tenant devices.

The catch: Every time a friend visits and needs Wi-Fi, or you buy a new smart plug, you have to manually open the app, find the new device’s MAC address, and add it. It’s secure, but it’s high-maintenance.

Part 6: Advanced Tips – Optimizing Your Deco M4 Filtering

To go beyond basic blocking, consider these expert strategies: What is a MAC Address Filter

Combine with Guest Network: Instead of blacklisting a friend’s phone, put them on the Guest Network, which is naturally isolated. Use MAC filtering to ensure they cannot jump to your main network.
Handle Randomized MACs: To filter a modern smartphone, you have two choices:
- Go to the phone’s Wi-Fi settings for your Deco network and turn off "Private Wi-Fi Address." The phone will then use its real, permanent MAC.
- Or, use the Deco’s device list to block each new random MAC as it appears (chasing MAC addresses is tedious).
Prioritize Over Filtering: Use QoS (Quality of Service) before using a blacklist. Is your kid lagging in games? Limit their bandwidth via QoS instead of cutting them off entirely.
Logging: The Deco M4 does not offer extensive logs. If you need to know when a blocked device attempts to connect, consider a more advanced router. For most homes, the simple block/unblock is sufficient.

3. Preventing Bandwidth Theft

If you live in an apartment building with shared walls, a strong password prevents most theft, but a determined hacker with a cracked password can still get in. A MAC address filter on the TP-Link Deco M4 stops them cold—even if they have the Wi-Fi password, their unrecognized MAC address will be rejected.

Method 1: Using the "Block" Feature (Recommended)

This is the easiest way to set up MAC filtering if the device has already connected to your network (or is trying to).

Step 1: Open the Deco App Launch the TP-Link Deco app on your phone and log in.

Step 2: Locate the Device

Tap on the Devices icon at the bottom (or top, depending on app version).
Find the device you want to block. If it is currently connected, it will appear in the "Online" list. If it is not connected but has connected before, look in the "Offline" list.
Tip: If you don't see the device name, look for the MAC address in the list of clients.

Step 3: Access Device Details Tap on the specific device name to open its Device Details page.

Step 4: Block the Device

Look for the Block toggle switch (usually near the top or bottom of the screen).
Toggle it ON.
The device will immediately be disconnected and unable to access the internet.

Step 5: Manage Blocked List To see devices you have blocked or to unblock them later:

Go to the Devices tab.
Tap the Settings (Gear icon) or look for the menu options.
Select Blocked Devices. Here you will see a list of all MAC addresses you have filtered.