By default, Windows 11 displays available Wi-Fi networks when you click the network icon on the taskbar. Though convenient because it lets you connect to networks easily, this can be a distraction and a security concern in various environments, such as schools, kiosks, branch offices, or managed desktops. In such conditions, admins may want to hide network Wi-Fi options to enhance network protections, reduce clutter, and prevent accidental connections.
This guide will walk you through hiding Wi-Fi networks in Windows 11 using the Command Prompt. Learn various methods like using netsh wlan, how to undo changes, and how to apply strict filtering when required.
How to show or hide wifi network options in Windows 11
📌 Prerequisites:
- These methods apply to all editions of Windows 11 (Home, Pro, Enterprise, Education).
- You will need administrator privileges to utilize these steps and implement the changes.
- You need to identify and correctly encode the target SSIDs (case-sensitive).
📌 Recommended deployment strategies:
| Click to Choose a Method | 💻 Best for Individual Users | 💻💻💻 Best for Enterprises |
| Method 1: Command Prompt to hide particular networks | ✓ | ✓ |
| Method 2: Unblock a previously hidden Wi-Fi network | ✓ | ✓ |
| Method 3: Viewing current network filters | ✓ | ✓ |
| Method 4: How to whitelist specific Wi-Fi networks | ✓ | ✓ |
| Method 5: Show or hide Wi-Fi networks via PowerShell | ✓ | ✓ |
💡 Note: These methods do not disable Wi-Fi; they only filter listed SSIDs.
⚠️ Always wrap SSID names in quotes, i.e., “Network Name,” especially if they contain spaces or special characters.
Method 1: How to hide specific Wi-Fi networks using the Command Prompt
This method lets you block particular SSIDs from appearing in the list of available networks. You can use this to keep unwanted Wi-Fi options out of sight or keep particular connections exclusive.
📌 Use Cases:
- You can use this method in public or shared environments to prevent users from connecting to protected networks.
- This is ideal for offices, classrooms, and branch locations where unknown SSIDs may appear.
- Best for keeping employees connected only to company-approved connections.
📌 Prerequisites:
- You need admin privileges to perform this step and implement the changes.
Here are the steps to hide a Wi-Fi network in Windows 11:
- Open the Command Prompt as Administrator.
- Run this command:
netsh wlan add filter permission=block ssid="NetworkName"networktype=infrastructure
- Replace “NetworkName” with the SSID you want to hide. Include the quotation marks.
💡 Note: The target SSID’s name should be entered exactly (case sensitive).
- Repeat the command for each SSID you want to hide.
💡 Note: This will only hide the networks on the Wi-Fi list, but users can still connect to them manually via Windows settings if they know the SSID and password.
Method 2: Unblock a previously hidden Wi-Fi network
This method will let you remove a certain SSID from the block list, making it visible in the list of available networks.
📌 Use Cases:
- You can reverse a previous block and restore access to that network.
- This method is best for letting users or employees connect to a specific SSID only.
- Suitable for adjusting and fine-tuning network policies
📌 Prerequisites:
- This requires administrator privileges.
- The SSID needs to have been blocked via Method 1.
Here are the steps to unblock a previously hidden Wi-Fi network:
- Open the Command Prompt as an Administrator.
- Run this command to remove a Wi-Fi network from the block list:
netsh wlan delete filter permission=block ssid="NetworkName" networktype=infrastructure
- Replace “NetworkName” with the exact SSID you want to unhide.
💡 Note: Enter the exact name of a previously blocked SSID.
Method 3: How to view current Wi-Fi network filters
This method uses filter rules to display all Wi-Fi SSIDs that have been blocked or allowed.
📌 Use Cases:
- You can use this to check which networks are blocked or allowed.
- It helps audit a user’s device’s Wi-Fi configuration.
- This can be used to troubleshoot why a particular network is not appearing on your list of networks.
📌 Prerequisite:
- To execute this, you need to have administrator privileges.
Here’s how to view current Wi-Fi network filters:
- Open the Command Prompt as an administrator.
- Next, run the following command:
netsh wlan show filters
- Review the Block List and Allow List in the output.
Method 4: Optional: How to only allow specific Wi-Fi networks
This method is helpful for blocking all visible Wi-Fi networks and only allowing specific SSIDs.
📌 Use Cases:
- This is best for schools, kiosk setups, and sensitive environments like corporate environments.
- This will prevent employees from connecting to guest SSIDs or unknown SSIDs.
- Ensures devices will only connect to authorized and secure networks.
📌 Prerequisites:
- This method requires administrator privileges.
Here is how to whitelist specific Wi-Fi networks:
- Open the Command Prompt as an Administrator.
- To block all networks by default, run this command:
netsh wlan add filter permission=denyall networktype=infrastructure
- To allow specific SSIDs, run this command (repeat for each network you want to allow):
netsh wlan add filter permission=allow ssid="AuthorizedSSID"networktype=infrastructure
💡 Note: SSIDs must be entered exactly as they are (case-sensitive).
Method 5: How to use PowerShell to show or hide Wi-Fi networks
PowerShell cannot directly support SSID filtering, but it can use the netsh wlan commands to apply filters.
📌 Use Cases:
- This is best for automated deployments where Group Policy isn’t used.
- IT teams can use this method with tools like Intune and login scripts to apply tweaks on multiple devices automatically.
📌 Prerequisites:
- You need to run PowerShell as an Administrator.
- Must know and encode the exact SSID.
Here’s how to use PowerShell to apply Wi-Fi network filters:
- Open PowerShell as an Administrator.
- Run this command:
Start-Process netsh -ArgumentList 'wlan add filter permission=block ssid="NetworkName" networktype=infrastructure' -Verb RunAs
- Replace “NetworkName” with the SSID you want to block.
- Replace block (in permission=block) with allow to whitelist a network, or use denyall to block all networks.
⚠️ Things to look out for
| Risks | Potential Consequences | Reversals |
| Encoding the command incorrectly | The commands won’t work or lead to undesired Wi-Fi settings tweaks. | Double-check the commands and ensure you have entered them correctly. |
| Filters do not show up in the user interface | Users in managed environments might think a network disappeared due to a bug. | Inform users or the entire network of intentional filtering. |
| Inaccurate SSID input | The filters will not work if SSID names are misspelled or improperly capitalized. | Double-check SSID spelling and capitalization. Rerun the command with the correct input. |
| Accidental use of denyall | Users may be locked out of all Wi-Fi networks unless tweaked otherwise. | netsh wlan delete filter permission=denyall networktype=infrastructure |
Additional considerations when showing or hiding Wi-Fi networks
Methods do not disable network adapters
The abovementioned steps do not disable your computer’s Wi-Fi network adapter. The system may still detect and connect with allowed Wi-Fi networks.
Useful for locking down endpoints in managed environments
Filtering Wi-Fi networks is essential in various environments like school exam rooms, public terminals, and offices. It’s best added in security rollouts to prevent unauthorized networks from showing up.
No GUI toggle
This is a command-line-only function. You cannot toggle visible networks in Windows Settings, Registry Editor, or Group Policy.
Applied per user profile
This method only applies to a user profile. For consistency, it will need to be applied per user or via a login script.
Hide or show available Wi-Fi networks in Windows 11 to secure endpoints
Controlling which Wi-Fi networks appear in Windows 11 is a simple but effective way to secure endpoint devices. It can prevent users from connecting to unapproved and potentially dangerous networks and enhance security in managed environments, protecting information. Whether you’re an IT admin for a school, an office with a fleet of computers, or managing kiosks, these filters are easy to implement and are a quick solution to show or hide network Wi-Fi options.
Related topics:
- How to Change Wireless Network Connection Priority Order in Windows
- How to Backup and Restore Wireless Network Profiles in Windows 10
- How to Restrict Background Data Usage for Wi-Fi and Ethernet in Windows
Quick-Start Guide
Here are a few methods to hide or show available Wi-Fi networks in Windows 11:
1. Using Command Prompt (for hiding specific networks):
– Open Command Prompt as administrator
– Use the command: netsh wlan add filter permission=block ssid=”WIFI NAME”
2. Through Network Settings:
– Go to Settings > Network & Internet > Wi-Fi
– Click on “Manage Known Networks”
– You can hide or remove specific networks from the list
NinjaOne itself doesn’t have a direct feature for hiding Wi-Fi networks, but Windows 11 provides built-in options to manage network visibility.
