WLAN Pros Library

Explained guide By Keith Parsons, CWNE #3

Download the PDF

A plain-English guide

Captive Portals,
Explained

What that Wi-Fi sign-in page is, why it shows up, and what to do when it doesn't.
1. Join the Wi-FiFull barsWelcomeRoomAccept2. The sign-in pageNothing else loads yet3. The internetAfter you sign in
Keith Parsons · CWNE #3
September 2026
WLAN Pros
Start here

The short answer

That Wi-Fi sign-in page has a name: a captive portal. It sits between the Wi-Fi and the internet. Until you finish it, almost nothing else loads.

This guide answers three questions. What is that page? Why does it matter to you? And what do you do when it won't show up?

A word on the words

People call it a sign-in page, a login page, a splash page or a captive portal. They all mean the same page. This guide calls it the sign-in page.

Other guides in this series

Plane Wi-Fi has its own guide: Wi-Fi on Planes, Explained. For a TV stick or game console on the road, see Travel Routers, Explained.

What's inside

A gate in front of the internet3
How your phone notices5
When the page doesn't show up7
Why the page comes back9
What the network can see10
Stay safe on the sign-in page11
Devices with no screen12
Five things people get wrong13
Tips for your next trip14
Where these facts come from15
Captive Portals, Explained2
What it is

A gate in front of the internet

Joining the Wi-Fi and reaching the internet are two separate steps. A sign-in page stops you between them.

Before you sign inWi-Fi: joinedInternetHeldWaiting for the pageAfter you sign inWi-Fi: joinedInternetOpen

Figure 1. Full bars is only step one. Your phone joins the Wi-Fi first. The road to the internet stays closed until you finish the page.

That's why your phone can show full bars and still load nothing. The bars only tell you the Wi-Fi part worked.

Keith's note

“If a network ever asked you to sign in on a web page, your Wi-Fi already worked.”

Keith Parsons, Fix Your Own Wi-Fi, chapter 6, 2026

Captive Portals, Explained3
What it is

What the page asks for

Agree tothe rulesRoom numberand namePay fora passA code ora loginNever the password to your email

Figure 2. Four common asks. Most pages want one of these. Some only want you to tap Accept.

Why places use one

A place with free or paid Wi-Fi wants a say before you go online. It may check that you're a guest, show its rules, or charge for time.

HotelGuests onlyAirportAgree to the rulesPlanePay or log inCafeTime to shareSame idea everywhere: the page comes before the internet

Figure 3. Why places use one. Hotels, airports, cafes and planes each have a reason. The page always comes first.

Captive Portals, Explained4
How it works

How your phone notices

Your phone checks every new Wi-Fi network. It asks for a small test page it already knows by heart.

Normal networkYour phoneTest page?The internetThe test pageOnlineSign-in networkYour phoneTest page?The networkIts sign-in pageWelcomeRoomAcceptPops up

Figure 4. A test with a known answer. A normal network sends the test page back. A sign-in network answers differently, usually by sending you to its own page. Your phone sees the wrong answer and pops the page up for you.

You don't have to do anything for this check. It happens by itself, in a moment.

Captive Portals, Explained5
How it works

What you'll see

iPhone or iPadWelcomeRoomAcceptOpens by itselfFinish the pageAndroidTap tosign inTap the noticeIt opens the pageLaptopWelcomeRoom numberAcceptBrowser opens itFinish the page

Figure 5. Three ways the page shows up. Each kind of device brings the page to you a little differently. Either way, finish the page.

On an iPhone, tapping Cancel on the sign-in window takes you off the network. Finish the page first. If you cancel by mistake, just join again.

Email, messages and Wi-Fi Calling over that Wi-Fi wait for the page too. Regular calls over the cell network may still work.

Captive Portals, Explained6
What to do

When the page doesn't show up

Sometimes the page never pops up. You're on the Wi-Fi, but nothing loads. Try these, in order.

  1. Give it a moment. The page can take a few seconds to appear.
  2. Open your web browser and type an address that starts with http://, such as http://example.com. The network can then show you its page.
  3. Forget the network, then join it again. Your phone checks again from the start.
  4. Turn off your own VPN for a moment. Turn it back on once you're signed in. For a work or school VPN, ask your IT team.
  5. Still stuck? Ask the front desk or the staff.
  6. Need the internet right now? Turn Wi-Fi off and use cell data, if your plan allows it.
Do: an http:// addresshttp://WelcomeRoomAcceptThe sign-in pageshows upType it, then press GoNot this: a warninghttps://Not privateA warningDon't click past itType it, then press Go

Figure 6. Start with http://. A plain http:// address lets the network show its page. A secure https:// site can't be swapped, so your browser warns you instead.

Captive Portals, Explained7
What to do
1HotelForget thisnetworkForget this networkIn Wi-Fi settings2HotelOtherJoin it againPick it from the list3WelcomeRoomAcceptThe page appearsFinish it

Figure 7. Forget, then join again. This makes your phone check the network from the start.

If you use a VPN or private DNS

A VPN (virtual private network) is an app that wraps up everything your phone sends. That can keep the sign-in page from reaching you. On Android, if Private DNS is set to a provider hostname, switch it to Automatic while you sign in. On an iPhone, a Private Relay message means you can turn it off for that one network.

1OffTurn it offYour VPN app2WelcomeRoomAcceptSign inFinish the page3OnTurn it back onStay protected

Figure 8. Off for a moment, then back on. Switch the VPN off only long enough to finish the page, then turn it back on.

Captive Portals, Explained8
Why it matters to you

Why the page comes back

You signed in yesterday, and today the page is back. That's normal.

Your time runs outSign inOnlineTime's upThe page comes backYour phone looks newAddress ALaterAddress B"Who's this?Please sign in."

Figure 9. Two reasons the page returns. Your time or pass ran out. Or your phone now shows the network a new Wi-Fi address, so it looks like a new guest.

Some phones change their Wi-Fi address from time to time. It makes you harder to follow from place to place. When the address changes, the network may not know you, so you sign in again.

Captive Portals, Explained9
Why it matters to you

What the network can see

Any Wi-Fi network can see some of what you do on it. A network with a sign-in page is no different.

The network can seeIt can't seeWhich sites you visitWhen you use itHow much you useInside a secure pageWhat you readWhat you typeYour passwords

Figure 10. Outside and inside. Most sites now use secure pages, marked with a padlock. The network usually sees which site you visit, unless a VPN or a privacy setting hides it. It doesn't see what's on the page.

A real sign-in page is a gate, not a window into your secure pages. Still, type only what the place needs.

Captive Portals, Explained10
Watch out

Stay safe on the sign-in page

Fine to fill inWelcomeRoom numberAcceptRoom, code, or a passStop: a trapWelcomeYour emailEmail passwordLog inEmail password? Close it

Figure 11. A real page, and a trap. A real page asks for a room number, a code, a login the place gave you, or a pass. A trap asks for the password to your email.

Stop

Never type your email password into a sign-in page.

A hotel or cafe doesn't need it. Fake networks use fake sign-in pages to catch passwords.

What your phone listsHarbor Hotel GuestHarbor Hotel Guest FreeHarbor Hotel StaffOnly one is the guest networkAsk, or read the signWi-Fi:Harbor HotelGuestJoin the namethey give you

Figure 12. Check the network name. A look-alike name can be a trap. Join the one the staff or the sign names.

Captive Portals, Explained11
Special cases

Devices with no screen

A TV stick, a game console or a smart speaker can join Wi-Fi. But many can't show you a sign-in page.

No screen, or no browserTV stickGame consoleSmart speakerAsk the front deskSome places can addyour device for youOr use a travel routerSigns in once

Figure 13. No screen, no sign-in. Ask whether the front desk can add your device. Or bring a travel router: it signs in once, and your devices join it.

Some TV sticks let you finish the page on your phone instead. Check the device's help pages before you travel.

Travel routers have their own guide: Travel Routers, Explained.

Captive Portals, Explained12
Straight facts

Five things people get wrong

MythFull bars means I'm online.
FactThe bars only show the Wi-Fi part. A sign-in page can still be holding back the internet.
MythThe page broke, so the Wi-Fi is broken.
FactThe page reached you over the Wi-Fi, so the Wi-Fi works. Open a browser to bring the page back.
MythThe sign-in page can read everything I do.
FactOn secure pages, the network sees the site's name, not what you read or type.
MythOnce I sign in, I'm set for the whole trip.
FactTime limits and a new Wi-Fi address can bring the page back. Just sign in again.
MythA network with a sign-in page is a safe network.
FactThe page is about who gets in, not about keeping you safe. Check the network name. A padlock means the link is private, not that the site is honest.
The bars measure thisNot this

Figure 14. What the bars measure. Full bars say you hear the Wi-Fi well. They say nothing about the internet.

Captive Portals, Explained13
What you can do

Tips for your next trip

Arriving: finish the pageWelcomeRoomAcceptLeaving: forget itHarbor Hotel GuestForget this networkYour phone won't joina copycat by itself later

Figure 15. Arriving and leaving. Finish the page before you count on your apps. Forget the network when you go.

  1. Get the network name from the staff or a sign. Don't guess from the list.
  2. Join, and give the page a moment. It usually pops up by itself.
  3. Finish the page before you count on email, messages or calls.
  4. No page? Open a browser and type an http:// address.
  5. Never give your email password to a sign-in page.
  6. When you leave, forget the network.
Captive Portals, Explained14
Sources

Where these facts come from

Checked on 28 September 2026. Menus change with updates, so look for the same words nearby.

  • Apple Support, "Use captive Wi-Fi networks on your iPhone or iPad", 23 April 2026
  • Apple Developer, "How to modernize your captive network," 22 June 2020
  • Apple Support, "About iCloud Private Relay"
  • Google, Pixel Phone Help, "How to fix Wi-Fi connection problems"
  • Google, Chrome Help, "Fix connection errors"
  • Google, Pixel Phone Help, "Control airplane mode, private DNS & other network settings"
  • Apple Support, "Manage iCloud Private Relay for specific websites, networks, or system settings", 15 September 2025
  • Apple Support, "Use private Wi-Fi addresses on Apple devices", 5 December 2025
  • Android Open Source Project, "MAC randomization behavior" and "Implement MAC randomization"
  • Microsoft Learn, "An Internet Explorer or Edge window opens when your computer connects to a corporate network or a public network," 12 February 2026
  • Microsoft Learn, "Network Connectivity Status Indicator FAQ for Windows," 6 February 2025
  • US Federal Trade Commission, "Are Public Wi-Fi Networks Safe? What You Need To Know," February 2023
  • US Cybersecurity and Infrastructure Security Agency (CISA), "Securing Wireless Networks," 1 February 2021
  • CISA, Eviction Strategies Tool, "Evil Twin," 15 April 2025
  • Government of Canada, Get Cyber Safe, "Public Wi-Fi," 27 October 2021
  • Electronic Frontier Foundation, Surveillance Self-Defense, "What Should I Know About Encryption?", reviewed 2025
  • Roku Support, "How do I use Hotel & Dorm Connect to connect to the internet?", 13 February 2026
  • TP-Link, FAQ 4087, 23 June 2026
  • Keith Parsons, Fix Your Own Wi-Fi, chapter 6, 2026

About this guide

This guide is independent. It isn't affiliated with or endorsed by any hotel, airline, phone maker or government agency. Companies are named here only as sources.

About the author

Keith Parsons, CWNE #3, has designed and fixed Wi-Fi for over 25 years. He runs Wireless LAN Professionals and the WLPC conferences.

Captive Portals, Explained · Keith Parsons · CWNE #315