The modern pace of life dictates its own rules, and internet access is becoming a necessity even in the underground passages of a metropolis. For Apple device owners, the issue of connecting to city networks is often shrouded in myths and technical difficulties, which can actually be resolved in a couple of minutes. Free Wi-Fi in the metro is not just a convenience, but a fully-fledged alternative to mobile data, allowing you to save gigabytes and maintain connection during peak hours.
The main difficulty lies in the authorization system, which requires identity verification via SMS or the government services portal. Unlike Android devices, where the process is often automatic, iOS has stricter security protocols, which sometimes blocks the login pop-up window. Understanding how network certificates work and following the correct steps will help you avoid common errors and enjoy a stable connection.
In this article, we'll cover all the details: from selecting the right network to manually entering settings if automatic login doesn't work. You'll learn why SMS messages aren't arriving, how to bypass pop-up blocking, and what to do if your phone says "No internet connection" even though you've selected a network. Follow the instructions to ensure your iPhone always remained online, even at a depth of tens of meters underground.
Selecting the right network and initial setup
The first step is to find an available signal. The Moscow metro uses a single infrastructure, but users may see several names in the list of available networks. The primary and most reliable source of free internet is the network named MT_FREEThis is the one you should connect to first, as it provides the most stable coverage on all lines.
Sometimes the list may include carrier networks such as Beeline Wi-Fi or MTS Free Wi-FiAlthough they technically offer free access, their operation is often tied to a specific carrier's SIM card or requires additional conditions. For a universal solution that doesn't depend on your mobile plan, it's best to use a local network. After selecting a network, the device will attempt to obtain an IP address automatically.
⚠️ Warning: Never connect to networks with suspicious names similar to official ones (for example, MT-FREE or MT_Free with extra characters). Attackers can create fake access points to intercept data. The official name is always written exactly as
MT_FREE.
If you're not automatically redirected to the authorization page, don't rush to switch to airplane mode. The system may simply be waiting for your manual request. Open your browser (Safari, Chrome) and try accessing any website, for example, ya.ru or apple.comThis action will force the redirection process to the authorization portal.
Wi-Fi Portal Authorization Process
After successfully connecting to the access point, the start page should open in front of you. This is a special Captive Portal, which identifies the user. In the case of the Moscow Metro, the system offers two main login methods: via a mobile phone number or via a mos.ru account (formerly mos.ru ID). The first option is the most popular and does not require prior registration with city services.
Enter your phone number in the appropriate field and click the "Get Code" button. It's important to ensure that your phone has an active SIM card capable of receiving SMS, even if you're roaming or using a dual SIM card. iPhoneThe code arrives almost instantly, but there may be a delay of up to 2-3 minutes under high server load.
- 📱 Enter the phone number in international format or without the eight, following the input mask on the screen.
- 🔢 Wait for an SMS with a confirmation code (usually 4 or 5 digits).
- ✅ Enter the code in the field on the authorization page and click "Login".
- 🌐 After successful verification, you will be redirected to the portal's main page or partner site.
There is an alternative method to log in through mos.ruIf you already have a verified account with city services, this method may be even faster, as it eliminates the need to enter codes from SMS messages each time (as long as your session is saved). Select the appropriate tab on the portal, enter your username and password, and access will be granted automatically.
☑️ Checklist for successful authorization
Solving the problem with the missing authorization window
One of the most common issues for iOS owners is that when Wi-Fi is connected, the status bar icon is lit, but the login page doesn't appear. This is due to the protocol's specific operation. Captive Network Assistant in iOS, which can block redirects if the site does not have a valid SSL certificate or if the DNS cache has stored old data.
To force the login window to appear, go to your Wi-Fi settings. Click the blue information icon. (i) next to the name of the connected network MT_FREEIn the menu that opens, find "Configure DNS." By default, it's set to "Automatic." Switch to "Manual" and add the server. 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare), deleting the remaining entries. Save your settings and try opening the browser again.
⚠️ Important: After successful authorization, remember to return your DNS settings to "Automatic." Using third-party DNS servers may slow down some local services or applications immediately after leaving the metro coverage area.
Clearing Safari's cache also helps. Go to Settings → Safari and select "Clear history and data." This will reset your current sessions and may cause the login window to reappear the next time you connect. If this doesn't help, try disabling the "Private Wi-Fi Address" feature in the specific network settings (the "Private Address" slider should be off for that network), although this is rarely a critical factor for public networks.
Why isn't Private Relay working?
iCloud Private Relay encrypts all Safari traffic, which may interfere with the redirection mechanism to login portals. If you have iCloud+ enabled, try temporarily disabling this feature in iCloud settings to ensure the login window appears correctly.
Setting up security certificates for iOS
In some cases, especially when updating the operating system to new versions of iOS, your phone may require manual verification of the Wi-Fi provider's root certificate. This is an Apple security measure to prevent man-in-the-middle attacks. If you see a message when connecting that the connection is not secure, or your browser reports a certificate error, you need to install the profile.
The system usually prompts you to download a configuration profile. If this doesn't happen, you can download the official profile from the portal. wifi.mos.ru (available via mobile internet). After downloading, go to Settings → Profile loaded and follow the on-screen instructions. You will be asked to enter your screen unlock code.
| Action | Path to the iOS menu | Necessary action |
|---|---|---|
| Loading profile | Safari / Browser | Click "Allow" when prompted. |
| Installation | Settings → Profile | Click "Install" and enter the code |
| Activation | Settings → General → About | Click "Certificates" → Enable Trust |
| Examination | Settings → Wi-Fi | Reconnect to the network |
After installing the certificate, it is important to go to the section Settings → General → About → Certificates (at the bottom of the list). A new certificate may appear there, marked "Not Trusted." Tap it and select "Enable Trust." Without this step, the connection will be interrupted or unstable, as iOS will block traffic.
Typical errors and methods for eliminating them
Even with the correct settings, errors can still occur. A common error is "Incorrect password" when entering the code from an SMS. This happens if you entered the code on a page that is no longer valid (the session has expired). Refresh the page in your browser and request the code again. Another issue could be that the phone number is already authorized on another device or the session wasn't closed correctly the last time.
Another scenario: the phone connects, but the internet doesn't work, even though the login page confirms success. In this case, try switching airplane mode for 10 seconds. This will force the Wi-Fi module to reconnect to the nearest tower with updated routing parameters. At deeper stations, the signal may be weak, and the phone may "hang" at the limit of the signal strength, not transmitting data.
- 🔄 Reset network settings:
Settings → General → Transfer or reset iPhone → Reset → Reset Network SettingsThis will delete all saved Wi-Fi passwords, but often resolves IP conflict issues. - 📶 Make sure your VPN isn't enabled. VPNs often block local redirects to ISP portals.
- 🕒 Check the date and time. A discrepancy between the device's time and the actual time zone can interfere with SSL certificates.
⚠️ Note: Resetting network settings will affect all Wi-Fi connections, not just the Metro network. You'll have to re-enter your home and work network passwords. Use this method only if other methods fail.
Wi-Fi Features on Different iPhone Models
Owners of older models such as iPhone 6 or iPhone 7, may experience more frequent connection drops. This is due to the fact that the antenna modules in older devices only operate in the 2.4 GHz band, which is very noisy in densely populated areas and with many passengers. Newer models (iPhone 12, 13, 14, 15) support the Wi-Fi 6 standard and the 5 GHz band, which provides a more stable connection.
On devices with two SIM cards (physical + eSIM or two physical ones), a priority conflict sometimes occurs. The phone may attempt to send an SMS for authorization via a SIM card that is currently unavailable or blocked. Before entering the metro, make sure your primary SIM card is active and visible to the network.
New versions of iOS (16, 17, and later) introduce a "Limit IP Address Tracking" feature for Wi-Fi. This is a useful feature for public networks, but it can sometimes conflict with provider billing systems that use IP for session identification. If you're experiencing constant authorization resets, try disabling this option for that specific network. MT_FREE in the Wi-Fi settings.
Why is Wi-Fi in the metro slow even after connecting?
Speed depends on the number of simultaneously connected users. During peak hours, a single access point can be loaded with hundreds of users. Furthermore, train movement causes constant handovers (transferring connections between towers), creating micro-interruptions. For video playback, use buffering, and for calls, use Wi-Fi Calling, if supported by your carrier.
Is it possible to use the Internet without a SIM card on an iPhone?
SMS authorization is impossible without an active SIM card. However, if you have a mos.ru account linked to a number that's not currently on your phone (but is available for receiving SMS on another device), you can use this method. Simply enter the number, receive the code on the other phone, and enter it on your iPhone.
Is it safe to transfer banking information over metro Wi-Fi?
Public networks always pose potential risks. Although authentication traffic is protected, the public channel can be eavesdropped on. We recommend using the bank's mobile app only with a VPN enabled or over mobile data (4G/5G), not public Wi-Fi. For everyday tasks (news, music), the network is secure.
How to automatically connect to Wi-Fi in the metro?
Your iPhone automatically connects to previously used networks. After the first successful SMS authorization, your phone will connect automatically for 90 days (the standard session period) without re-entering the code as long as you're in the coverage area. If the session expires, you'll have to repeat the process.
What should I do if the login page is white or doesn't load?
Try opening a website with the HTTP protocol in your browser, for example http://neverssl.comModern browsers use HTTPS by default, which blocks redirects to the portal. Navigating to an unsecured HTTP site often forces the browser to display a login window.