You're trying to add a new device to your Deco BE85 and it just won't connect. The phone says "Can't connect to network." The printer setup page never finds the WiFi. The smart plug app times out at 90 percent. The Deco BE85 is a powerhouse mesh, but Wi-Fi 7 features and aggressive defaults sometimes lock out perfectly normal devices.
Sort the device first: if it's a printer, smart plug, or anything pre-2022, the issue is almost certainly WPA3-Personal blocking it; if it's a modern phone or laptop that used to work and just stopped, look at Fast Roaming and HomeShield first. The fastest single move for the older-device case is dropping the security mode to WPA2/WPA3-Personal transition mode in the Deco app under More, Advanced, WiFi Security. Save and retry pairing.
If that doesn't do it, here's the rest of the order you should try.
Drop WPA3-Personal to WPA2/WPA3 Transition
The Deco BE85 ships in WPA2/WPA3 transitional by default, but many users tighten it to WPA3-Personal-only and forget. In More, Advanced, WiFi Security, set the mode to WPA2/WPA3-Personal. Save. Modern clients still negotiate WPA3; legacy clients fall back to WPA2 cleanly. Leave it in transition mode unless you have a specific compliance reason not to.
Create a Separate 2.4 GHz IoT Network
Many IoT devices only support 2.4 GHz, but the Deco BE85 broadcasts a single SSID and tries to steer devices to the optimal band. The phone you're using to set up the IoT device may be on 5 GHz while the IoT device is searching for 2.4 GHz, and the pairing fails.
In the Deco app, go to More, then WiFi, and create a separate IoT network on 2.4 GHz only. Connect your phone to that network temporarily, do the pairing, then switch back. This works for almost every smart home device.
Check HomeShield for Auto-Blocked Devices
HomeShield can auto-block devices it considers suspicious. Open the Deco app, tap More, then HomeShield, then Network Protection. Look at the list of blocked devices. If your new device is there, tap to unblock.
If you have HomeShield Pro, the parental controls or QoS profile may also be auto-rejecting unknown clients. The BE85's HomeShield Pro subscription locks advanced parental controls, so double-check if you're using any filtering.
Confirm MAC Filtering Isn't On
Visit tplinkdeco.net in a browser, log in, and check Advanced Settings, Network, Access Control. If MAC Filtering is enabled and set to Allow List mode, your new device's MAC isn't on the list. Either add it or switch the mode to disabled.
You probably set this up months ago and forgot, this is a frequent culprit.
Simplify Your WiFi Password Temporarily
Some smart home devices and printers don't handle special characters well. If your password contains apostrophes, semicolons, ampersands, or backslashes, change it temporarily to something simple like 12 letters/numbers, no symbols.
Pair the device, then change the password back if you want. Most devices remember the password for the network name and don't need to be re-paired when the password changes.
Disable DFS Channels for the 5 GHz Band
DFS channels (52 to 144 on 5 GHz) require the router to vacate the channel if it detects radar nearby, but some older devices can't tune to them at all. Visit tplinkdeco.net, go to Advanced, then Wireless, then Wireless Settings. For the 5 GHz band, manually set the channel to 36, 40, 44, or 48 (the non-DFS lower band). Save.
This solves a class of "network not found" issues for older smart TVs and gaming devices.
Forget the Network on the Device and Retry
If your device previously connected and now refuses, it may have a stale credential cached. On the device, go into WiFi settings, find the network, and tap Forget or Remove. Then try connecting fresh. This re-runs the full handshake and clears whatever state was wrong.
Disable Fast Roaming (TP-Link's Own First-Line Fix)
Fast Roaming (802.11k/v/r) on the Deco BE85 is one of TP-Link's most-cited causes of devices failing to associate or repeatedly bouncing during the join. Open the Deco app, tap More, then Advanced, then Fast Roaming, and turn it off. Try the pairing again. If the device joins, leave Fast Roaming off; the BE85 still hands clients between satellites without it, just less aggressively.
Disable AP/Client Isolation if the Device Talks to LAN Peers
If the device that won't connect needs to reach other LAN devices (a Chromecast, Sonos speaker, printer, or any local-network HomeKit/Matter accessory), check whether AP Isolation or Client Isolation is on. In the Deco app, More, Advanced, IoT Network or Wireless Settings, look for an isolation toggle. Off is the right setting for normal use; isolation only belongs on a guest network.
Move the Device Within Six Feet of the Gateway for Pairing
Especially for smart plugs and IoT devices, the initial pairing is much more sensitive to signal strength than normal operation. Bring the device into the same room as the gateway Deco for the pairing process. Once it's connected, you can move it back to its final location.
Update the Deco Firmware via the App
Open the Deco app, tap More, then Update Deco. Install whatever's available. New devices sometimes have compatibility quirks that get patched in firmware updates. The system reboots automatically when the update finishes.
The BE85's AI-Driven Mesh auto-optimizes channels and bands, but a firmware update can fix known bugs with AI Roaming that sometimes routes devices to weaker satellites. If you're still stuck after a firmware update, try manually moving the satellite closer or temporarily disabling AI Roaming in the app under More, Advanced, AI Roaming.
