This is the most common setting. You add specific devices to this list to prevent them from connecting to your network. All other devices remain free to join.

You can set up these filters by accessing the Deco's web management page or using the mobile app:

The device must have connected at least once to appear in the "Online Devices" list. If it's a new device that has never connected, you cannot filter it until it attempts a connection. As a workaround, enable "Wi-Fi Access Control" (Whitelist) to block everything new by default.

Before diving into the configuration steps, it's crucial to understand the underlying technology. MAC stands for Media Access Control. A MAC address is a unique, 12-digit hexadecimal identifier hard-coded into the network interface of every device, such as a smartphone, laptop, or smart TV. Think of it as a unique digital fingerprint for your device's network adapter.

: Prevents specific devices from connecting. All other devices can access the network. Allow List Mode

While standard standalone TP-Link routers offer both traditional whitelisting and blacklisting via a web interface, the Deco mesh ecosystem uses a simplified, mobile-first approach.

Since the Deco M4 relies on the mobile app, follow these steps precisely.

Setting up MAC address filtering on your TP-Link Deco M4 is a fantastic step toward building a fortified home network. To ensure a smooth experience, make sure to collect the MAC addresses of all your devices beforehand, turn off randomized MAC addresses on your phones, and decide whether a Whitelist or Blacklist best fits your household's lifestyle. If you are interested, I can:

However, it is crucial to understand what MAC address filtering on the Deco M4 is not : it is not a robust security solution. The fatal flaw lies in the nature of MAC addresses themselves. Despite being "hard-coded," they are transmitted in plain text over the air during the connection handshake. Using easily available tools, a moderately skilled attacker can "spoof" or clone a permitted MAC address onto their own device, bypassing the filter entirely. Furthermore, the Deco M4’s interface does not alert the user to such spoofing attempts. Consequently, relying solely on MAC filtering is akin to using a flimsy padlock on a fence—it stops the honest opportunist but not a determined intruder. Encryption (WPA2/WPA3) remains the true gatekeeper.

A Media Access Control (MAC) address is a unique 12-character physical identifier assigned to every network-connected device at the factory. Traditional routers use two types of MAC filtering:

: Blocks listed devices from accessing your Wi-Fi.

is managed via the , making the process of filtering devices simple and intuitive. Unlike traditional routers, the Deco system manages this through a "Block List" approach. Step 1: Open the Deco App