An access control method for a WiFi device, wherein said WiFi device works in a multi-service set identifier, Multi-SSID, mode, said method comprising the steps of: obtaining, at a kernel layer of the WiFi device, index values of interfaces wherein SSIDs forbidden to access the WiFi device are located; receiving, at the kernel layer of the WiFi device, a first access request for accessing the WiFi device based on a first service set identifier SSID, wherein the access request comprises a request for accessing a management interface, WEBUI, of the WiFi device; upon receiving said first access request, determining whether an index value of the interface where said first SSID is located is one of the index values of the interfaces wherein the SSIDs forbidden to access the WiFi device are located; if the determination result is positive, adding, at the kernel layer of the WiFi device, a preset tag to the first access request based on the first SSID, and sending the first access request with the added preset tag to the user layer of the WiFi device; if the determination result is negative, skipping the operation of adding, at the kernel layer of the WiFi device, the preset tag to the first access request based on the first SSID, and sending the access request without the added preset tag to the user layer of the WiFi device; receiving, at a user layer of the WiFi device, the access request with the added preset tag; and determining, at the user layer of the WiFi device, whether a tag of the received access request is the same as one of tags that are preset for SSIDs forbidden to access the WiFi device; if the determination result is positive, rejecting the access request; if the determination result is negative, accepting the access request. obtaining, at a kernel layer of the WiFi device, index values of interfaces wherein SSIDs forbidden to access the WiFi device are located; receiving, at the kernel layer of the WiFi device, a first access request for accessing the WiFi device based on a first service set identifier SSID, wherein the access request comprises a request for accessing a management interface, WEBUI, of the WiFi device; upon receiving said first access request, determining whether an index value of the interface where said first SSID is located is one of the index values of the interfaces wherein the SSIDs forbidden to access the WiFi device are located; if the determination result is positive, adding, at the kernel layer of the WiFi device, a preset tag to the first access request based on the first SSID, and sending the first access request with the added preset tag to the user layer of the WiFi device; if the determination result is negative, skipping the operation of adding, at the kernel layer of the WiFi device, the preset tag to the first access request based on the first SSID, and sending the access request without the added preset tag to the user layer of the WiFi device; receiving, at a user layer of the WiFi device, the access request with the added preset tag; and determining, at the user layer of the WiFi device, whether a tag of the received access request is the same as one of tags that are preset for SSIDs forbidden to access the WiFi device; if the determination result is positive, rejecting the access request; if the determination result is negative, accepting the access request.