Wi-Fi Connection Registration Window: How to Create and Configure

Have you ever walked into a cafe, connected to their Wi-Fi, and instead of internet access, seen a pretty page asking you to enter your phone number, social media login, or accept the terms of service? That's it. registration window when connecting to Wi-Fi — a tool that solves several problems at once: from collecting customer contacts to protecting the network from unauthorized access. You can set up this window not only for your business but also for your home network if you want to control who's using your internet.

In this article we will look at all methods of implementation registration windows: from simple solutions based on standard router functions to professional systems with captive portal (intercepting portal). You will learn what equipment is required, how to avoid common mistakes during setup, and why some methods may not work on modern devices (for example, on iPhone or Android 14+). We will also compare free and paid services for creating such pages - from MikroTik Hotspot to cloud platforms like Social WiFi or Purple WiFi.

It's important to understand: the technical implementation depends on the purpose. For a home network, basic router settings will suffice, while a hotel or shopping center will require a full-fledged access management system with CRM integration. We'll explore both scenarios so you can choose the best option.

1. What is the Wi-Fi login window and how does it work?

Registration window (or captive portal) is a web page that automatically opens when your device first connects to a Wi-Fi network. before that, how the user will access the internet. The mechanism is based on redirection all HTTP/HTTPS requests to the authorization server until the user performs the required actions:

• 📝 Acceptance of the terms of use (mandatory for public networks according to the laws of many countries, including the Russian Federation).
• 📱 Authorization via social networks (VK, Facebook, Google) or SMS.
• 🔑 Enter login/password (for corporate or home networks).
• 💳 Payment for access (relevant for hotels, airports).

Technically the process looks like this:

1. The device connects to Wi-Fi, but receives internet instead IP address from the local network.
2. Any request (for example, opening google.com) is intercepted by a router or server.
3. The user is shown a registration page (stored on the router or in the cloud).
4. After successful authorization, the server "releases" the device to the Internet, adding it MAC address to the white list.

⚠️ Attention: On modern devices (especially iOS 17+ And Android 14) The registration window may not open automatically due to security policies. In such cases, the user will have to manually open the browser and navigate to any website (for example, neverssl.com) to initiate a redirect.

Why doesn't the registration window open on some phones?

Modern operating systems block automatic redirection to the captive portal if they deem the network "untrusted." This is to protect against phishing attacks. The solution: either configure HTTPS certificates (complicated) or require users to open the browser manually.

2. Methods for implementing a registration window: from simple to complex

The choice of method depends on your goals, budget, and technical skills. Below is a comparison of all available options, from free to professional:

For most home users it will be enough guest network with simple password authentication. If you need customization (logo, email collection), these are suitable. cloud servicesFor full control (for example, in a hotel with a pay-per-access system), you will need professional equipment like MikroTik or Ubiquiti UniFi.

3. Setting up the guest network registration window on the router

The easiest way is to use your router's built-in features. Most modern models (for example, TP-Link Archer, ASUS RT-AX, Keenetic) support guest network with the ability to redirect to an external page. Let's look at a step-by-step example. Keenetic:

Login to the admin panel (usually 192.168.1.1)

Update firmware to the latest version

Create a guest network name (SSID) and password

Connect your router to the Internet (if an external registration page is required) -->

Step 1. Enable guest network:

1. Go to Wi-Fi Network → Guest Network.
2. Activate the option Enable guest network.
3. Specify a network name (eg. Cafe_Free_WiFi) and password.
4. In the section Isolation of clients Enable the option to prevent users from seeing each other.

Step 2. Set up redirection to the registration page:

• 🌐 In the section DNS and redirects add a rule to redirect all HTTP requests to your server (e.g. 192.168.1.1/hotspot).
• 📄 Create a simple HTML page with an input form (you can host it on your hosting service or directly on your router, if supported).
• 🔄 In the DHCP settings, specify Default Gateway as the address of your router.

⚠️ Attention: On routers without support captive portal (for example, budget models TP-Link) this method won't work. In this case, you'll need either firmware with support OpenWRT, or an external server.

Important: If you're using an external registration page (for example, on a hosting service), make sure it supports HTTPS. Modern browsers block insecure login pages.

4. Professional solutions: MikroTik Hotspot and Ubiquiti UniFi

For business applications (hotels, restaurants, shopping centers), simple guest networks are insufficient. They require systems with:

• 📊 Connection statistics (number of users, session time).
• 💰 Pay for access (integration with payment systems).
• 📧 Collecting contacts (email, phone for marketing).
• 🔒 Multi-level authorization (SMS, social networks, coupons).

The two most popular solutions are: MikroTik Hotspot And Ubiquiti UniFiLet's look at their features:

MikroTik Hotspot

MikroTik — is a Latvian manufacturer of network equipment, whose routers (for example, RB4011 or hAP ac²) support built-in Hotspot with extensive customization options. Benefits:

• 🎨 Full customization of the registration page (you can upload your own HTML/CSS).
• 📈 Built-in statistics and billing.
• 🔌 Support for external authorization systems (RADIUS, SMS gateways).

Disadvantages: complex interface Winbox, requires knowledge of network technologies.

Ubiquiti UniFi

Ubiquiti offers an ecosystem UniFi, where the registration window is configured via the controller UniFi NetworkPros:

• 🖥️ User-friendly web interface with a visual page editor.
• 📱 Mobile application for management.
• 🔄 Integration with Google Analytics and CRM.

Cons: The equipment is more expensive MikroTik, cloud controller is paid.

🔹 Which one to choose?

• MikroTik — for experienced users who are ready to understand the settings.
• Ubiquiti — for businesses where simplicity and integration are important.

5. Cloud services for the registration window: Social WiFi, Purple, WiFi Marketing

If you don't want to bother with setting up your equipment, you can use cloud services, which provide a turnkey solution. How it works:

1. You register with the service and customize the registration page (design, input fields).
2. The service provides you with a link or script for integration with the router.
3. When connected to Wi-Fi, users see your page and log in through it.
4. All data (emails, phone numbers) is stored in the service's personal account.

Top 3 services with comparison:

🔹 How to connect a cloud service to a router?

1. Register with the service and create an access point (hotspot).
2. Download the configuration file or copy the redirect URL.
3. In the router settings, specify this URL in the section Captive Portal or Hotspot.
4. Configure DHCP so that the gateway is the cloud service address.

⚠️ Attention: When using cloud services, all user data (emails, phone numbers) is stored on their servers. Make sure the service complies Federal Law No. 152 (about personal data) and GDPR (if you work with European clients).

6. Creating your own authorization server (for advanced users)

If you need completely independent solution You can deploy your own authorization server without a subscription fee. To do this, you'll need:

• 🖥️ Server (it can be virtual, for example, on DigitalOcean or home PC).
• 🐧 OS Linux (Ubuntu/Debian).
• 📦 Captive portal software: Pfsense + Nodogsplash or CoovaChilli.

Step-by-step instructions using Nodogsplash:

1. Install Nodogsplash to the server:

   sudo apt update
   sudo apt install nodogsplash

2. Set up the configuration file /etc/nodogsplash/nodogsplash.conf:

   GatewayInterface eth0
   MaxClients 50
   AuthIdleTimeout 5

3. Create an HTML login page in the folder /etc/nodogsplash/htdocs/.
4. Configure your router to forward traffic to your server's IP.

🔹 Advantages of a self-hosted server:

• 💰 No subscription fee.
• 🔧 Full control over data and logic.
• 🛡️ You can integrate any authorization system (SMS, 1C, your own database).

🔹 Cons:

• ⚙️ Complex setup (requires knowledge of Linux and networks).
• 🔄 You need to update and maintain the server yourself.
• 🛑 Risk of vulnerabilities due to improper configuration.

⚠️ Attention: If you are deploying a server on a home PC, make sure that your ISP does not block incoming connections (many plans for individuals have restrictions).

7. Common mistakes and how to avoid them

Many people encounter common problems when setting up the registration window. Here are the most common ones and how to solve them:

🔹 Additional tips:

• 📶 Test on different devices (iPhone, Android, Windows). On Apple There are frequent problems with the captive portal.
• 🔄 Update your router firmware — Older versions may contain vulnerabilities.
• 📝 Obey the laws — If you collect personal data, please indicate this in your privacy policy.

How do I check if the captive portal is working on my router?

Connect to the guest network from your phone and open it in your browser. http://neverssl.comIf the registration window appears, everything is working. If not, check your redirect settings.

8. Legal aspects: what you need to know before setting up

The collection of user data through the registration window is regulated by law. The following requirements apply in Russia:

• 📜 Federal Law No. 152 "On Personal Data" — If you collect emails or phone numbers, obtain the user's consent to process the data.
• 📋 Privacy Policy — the registration page must contain a link to a document that describes how you use the data.
• 🔒 Data protection — If you store information on your server, ensure its protection (encryption, backups).

🔹 What happens if you ignore the laws?

• 💸 Fines up to 75 000 ₽ for individual entrepreneurs and 500 000 ₽ for legal entities (under Article 13.11 of the Code of Administrative Offences of the Russian Federation).
• 🚫 Blocking a website or service by Roskomnadzor (if there are user complaints).

⚠️ Attention: If you use a cloud service (eg. Social WiFi), make sure it has a certificate of compliance with Federal Law No. 152. Otherwise, you will be held liable for any violations.

🔹 How to properly formalize consent to data processing?

• The text of the consent must be a separate checkbox (not hidden in the general conditions).
• Please specify purposes of data collection (for example, "to inform about promotions").
• Give the user the opportunity refuse from data collection (even if access is not provided without it).

FAQ: Frequently asked questions about setting up the registration window

Is it possible to create a registration window on a regular home router without firmware?

Yes, but with limitations. Most home routers (for example, TP-Link or ASUS) support a guest network with redirection to an external page. However, a full-fledged captive portal with authorization is available only on professional equipment (MikroTik, Ubiquiti) or via cloud services.

Why doesn't the registration window open automatically on my iPhone?

Starting from iOS 14Apple has tightened its security policy for captive portalThe system now checks HTTPS certificates, and if the registration page is not secure or has errors, the window will not open. Solutions:

• Use HTTPS for the registration page (for example, via Let’s Encrypt).
• Ask users to manually open their browser and go to any website (e.g. http://neverssl.com).

How to limit internet speed for guest users?

This can be done in the router settings:

• On MikroTik: use Queue Tree in the section Queues.
• On TP-Link: turn on Bandwidth Control and specify restrictions for the guest network.
• On Ubiquiti UniFi: set up Traffic Shaping in the controller.

Recommended speed for guest users: 2-5 Mbps to the device.

Is it possible to collect clients' phones via Wi-Fi without their consent?

No, this is a violation. Federal Law No. 152Even if you ask your phone "to connect to Wi-Fi," this is considered processing personal data. Mandatory conditions:

• Get explicit consent (check mark in the checkbox).
• Specify purpose of collection (for example, "to inform about promotions").
• Provide an opportunity data deletion upon request.

Exception: If you don't store phone numbers (for example, you send a one-time SMS code for authorization), consent is not required.

What equipment is needed for a check-in window in a small cafe?

Minimum set:

• Router with support captive portal (For example, MikroTik hAP ac² or Ubiquiti UAP-AC-LR).
• Cloud service for collecting contacts (for example, Social WiFi or WiFi Marketing).
• Access point (if the router is weak enough to cover the entire room).

Budget: from 10 000 ₽ (router + service subscription fee).