An apparatus for accessing a network, comprising: an obtaining module, configured to obtain an access request message sent by a terminal device, wherein the access request message comprises an access password, and a device identifier of the terminal device; a matching module, configured to perform matching between the access password obtained by the obtaining module and each preset access password in an access password list, wherein at least two preset access passwords are stored in the access password list, a relatively simple preset access password is bound to a device identifier of a terminal device frequently used by a user, and a relatively complex preset access password is used to limit network access of a terminal device not frequently used by the user; a determining module, configured to: when the matching module determines by means of matching that the access password matches a preset access password in the access password list, determine whether the preset access password which the access password matches is bound to the device identifier list, wherein at least one device identifier is stored in the device identifier list; and when the preset access password which the access password matches is bound to the device identifier list, determine whether the device identifier of the terminal device exists in the device identifier list; and a processing module, configured to: when the determining module determines that the device identifier exists in the device identifier list, allow the terminal device to access the network, wherein the processing module is specifically configured to: when the determining module determines that the preset access password which the access password matches is not bound to the device identifier list, allow the terminal device to access the network. an obtaining module, configured to obtain an access request message sent by a terminal device, wherein the access request message comprises an access password, and a device identifier of the terminal device; a matching module, configured to perform matching between the access password obtained by the obtaining module and each preset access password in an access password list, wherein at least two preset access passwords are stored in the access password list, a relatively simple preset access password is bound to a device identifier of a terminal device frequently used by a user, and a relatively complex preset access password is used to limit network access of a terminal device not frequently used by the user; a determining module, configured to: when the matching module determines by means of matching that the access password matches a preset access password in the access password list, determine whether the preset access password which the access password matches is bound to the device identifier list, wherein at least one device identifier is stored in the device identifier list; and when the preset access password which the access password matches is bound to the device identifier list, determine whether the device identifier of the terminal device exists in the device identifier list; and a processing module, configured to: when the determining module determines that the device identifier exists in the device identifier list, allow the terminal device to access the network, wherein the processing module is specifically configured to: when the determining module determines that the preset access password which the access password matches is not bound to the device identifier list, allow the terminal device to access the network.