How to Hide WiFi Networks in Windows 11
The WiFi network settings in Windows 11 are under Settings Network & internet > Wi-Fi , but hiding networks from your list is done with netsh filters in an elevated Command Prompt, not from that page. The filters only hide other people’s networks from this PC’s list. They do not change what your router broadcasts.
The other half of the job is hiding your own SSID (service set identifier, the public name of a wireless network ), which adds a little privacy for your home network. This helps if you live in a busy apartment building or a crowded area where passersby can see your network name. Keep the two jobs apart. The filters change what this PC shows in its own list, and other people’s devices can still see your network unless you disable SSID broadcast in your router. Both are covered below, along with how to check and undo each change.
You can hide WiFi networks in Windows 11 by opening Command Prompt as administrator and using netsh wlan add filter commands. Use ssid=YYYYYYYY to block specific networks or ssid=ZZZZZZZZ with permission=allow after permission=denyall to show only your network.
Why hide WiFi networks?
In a dense area the available connections list can show dozens of neighbouring networks. Filtering out the ones you never use makes it much faster to find and join your own. Nothing is uninstalled and no network is disabled. Windows simply stops listing the names you filter.
What happens when you are done?
Once the filters are in place, the blocked entries disappear from the quick settings menu as well as from the full list. This keeps the Windows 11 network interface tidy. Blocked networks vanish from view as soon as the commands in the later sections finish. If one still shows, close and reopen the Wi-Fi list, or turn Wi-Fi off and on again.
Warning: Administrative Privileges
If you run the commands without elevated permissions, Windows blocks them and shows an “Access Denied” message. If you see that message, close the window and reopen it with Run as administrator.
How to block specific networks
To hide specific WiFi networks in Windows 11 so they do not show up in your available connection list, use the built-in network commands. A few short commands in an elevated Command Prompt tell Windows to ignore the broadcasts from unwanted routers. You do not need any extra apps.
This works on Home, Pro, Enterprise and Education, because netsh is part of every edition. The steps below use Command Prompt, but the same commands also run in Windows Terminal or PowerShell if you open them as administrator.
- Click the Start button and type cmd. Command Prompt appears at the top of the results.
- Right-click Command Prompt and select Run as administrator. Click Yes if User Account Control asks for permission. A black window opens with "Administrator: Command Prompt" in the title bar. You can also right-click the Start button and choose Terminal (Admin) to use Windows Terminal instead.
- Run these commands to block specific network names (SSIDs). Press Enter after each one. Windows should confirm each command with a short success message.
To hide WiFi networks in Windows 11, replace "YYYYYYYY" and "AAAAAAAA" with the exact names of the networks you want to hide. Type the names exactly as they appear in your list, because the filter matches the name and is case-sensitive. The netsh wlan command removes only those names from this device's view. You can add as many names as you need, one command per name.
How to block everything except your own
You can also block every surrounding wireless signal except your own. With this setup your computer does not list any other router in your area. You set up a strict filter in Command Prompt that hides every network except the single trusted access point you allow.
Use this only on a PC that stays on one network, such as a desktop at home. It is not a good fit for a laptop that you carry around.
1. Open the Command Prompt as an administrator, as shown in the previous section.
Warning before you continue: the deny-all filter in the next step hides every network that is not explicitly allowed. That includes your other saved networks, such as a phone hotspot, a work WiFi or the network at a friend's house. They stop appearing in the list and you cannot connect to them from this PC. Add the allow filter for your own network in step 3 straight away. To bring everything back later, remove the deny-all filter with the delete filter command, as described in the section on removing filters.
2. Run this command to block all networks:
netsh wlan add filter permission=denyall networktype=infrastructure
3. Next, run this command to allow only your specific network to show:
Replace the placeholder "ZZZZZZZZ" with your WiFi network's actual name. Your trusted network then appears in the list while all other networks stay hidden from this PC.
To really hide your own network, you have to change the router. The netsh filter only affects what this PC shows. To stop your router from broadcasting its name:
- Sign in to your router's admin page with the address and login printed on the router or in its manual.
- Open the wireless settings. The exact name varies by brand.
- Turn off SSID broadcast, which some routers label as Hide SSID or Enable SSID Broadcast. Save the change.
- Reconnect each device. Hidden networks do not appear in lists, so on every phone, laptop and TV you must enter the SSID manually, along with the password.
Keep in mind that this is weak security. Anyone with a basic scanning tool can still find a hidden SSID. What actually protects your network is WPA2 or WPA3 encryption with a strong, unique password. Treat the hidden name as a way to reduce clutter and casual attention, not as a lock.
How to verify your changes
After you set up filters, check them to confirm your blocked connections are really hidden. A quick command in the Command Prompt lists every rule that is currently active. Your unwanted networks should appear under the deny list.
netsh wlan show filters
The output is a full list of the filters on this PC. Finding the SSIDs you targeted under the "Deny" heading confirms the procedure worked. If you used the deny-all filter, you should also see your own network listed as allowed. If a name is missing, run the matching add command again and check that you spelled the SSID exactly.
How to revert your changes
Deleting a filter makes the network visible again. Open an elevated Command Prompt or Windows Terminal (Admin) and run the following command to remove a specific block rule:
netsh wlan delete filter permission=deny ssid="NetworkName" networktype=infrastructure
This deletes the restriction and returns the target network to the standard connection list. Repeat the command for each blocked name you want to restore.
If you used the deny-all filter, the single-name delete does not undo it. Run the same delete filter command again, but for the deny-all rule rather than a specific SSID, and remove the allow rule for your own network too if you want a clean slate. Then run the show command from the checking section to confirm the list is empty. Your phone hotspot, work WiFi and other saved networks should reappear in the list. If they do not show straight away, turn Wi-Fi off and on again.
Summary
Command line tools give you full control over wireless visibility rules in Windows 11. Filters and saved networks are separate things. If you only want Windows to forget a network it has saved, go to Settings Network & internet > Wi-Fi Manage known networks, select the network and click Forget. You can reconnect later by choosing it from the list and entering the password again.
Have a question about this guide?
Answered by AI from this guide. Good questions may be added to this page — please don't include personal details.
Did this guide fix your problem?
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!