Have you ever walked into a cafe, connected to their Wi-Fi, and been greeted by a beautiful page with the establishment's logo, terms of service, or a prompt to enter your phone number? That's it. welcome page A captive portal is a tool that transforms a regular internet connection into a marketing or information platform. Such a page not only gives your business a professional look but also allows you to collect customer data, inform about promotions, or even restrict internet access without authorization.
It can be configured on most modern routers, from budget home models to professional equipment for hotels and shopping centers. In this article, we'll cover three main ways Creating a welcome page: using the router's built-in functions, using cloud services, and manually on a web server. You'll also learn which routers support captive portal out of the box (without additional software), and how to avoid typical setup errors.
Important: If you plan to use the page to collect personal data (phone numbers, email), make sure that this complies with local legislation (for example, in Russia there is Federal Law No. 152 "On Personal Data"). In some cases, the user's consent to data processing will be required.
What is a welcome page and why is it needed?
Welcome page (or captive portalA "password" is a web page that automatically opens in the user's browser when they first connect to a Wi-Fi network. It blocks internet access until the user performs a required action: accepting the terms of service, entering a password, logging in via social media, or providing contact information.
The main objectives of such a page are:
- 📢 Informing: message about network usage rules, speed limits or session time.
- 📊 Data collection: receiving email or phone numbers for marketing newsletters (with the user's consent).
- 🔒 Access control: restricting internet access for unauthorized users (e.g. hotel guests only).
- 💰 Monetization: selling Wi-Fi access by time or traffic (relevant for airports and train stations).
Examples of use:
- ☕ Cafes and restaurants: a page with a menu, promotions, or a request to leave a review on social media.
- 🏨 Hotels and hostels: authorization by booking number or guest's last name.
- 🏢 Offices and coworking spaces: rules of use of the network for visitors.
- 🎭 Events: a page with the event program or links to sponsors.
⚠️ Note: If you are setting up a page for public Wi-Fi (for example, in a shopping mall), check the requirements Roskomnadzor to user identification. In some cases, connection logs may need to be stored for up to 6 months.
Three Ways to Create a Welcome Page
The method you choose depends on your router, budget, and technical skills. Let's look at each option in detail:
| Way | Complexity | Suitable for | Pros | Cons |
|---|---|---|---|---|
| Built-in router function | ⭐ | TP-Link, Keenetic, MikroTik | Free, quick to set up | Limited design, few features |
| Cloud services | ⭐⭐ | Any routers | Flexible customization, analytics | Paid subscription, service dependence |
| Your own web server | ⭐⭐⭐ | Advanced users | Full control, unique design | Requires knowledge of HTML/PHP and DNS configuration. |
For most small businesses (cafes, beauty salons), the router's built-in features are sufficient. If you need a beautiful website with a logo, contact form, and analytics, a cloud service is better. A private server is only worthwhile for large chains (hotels, business centers) with high security and design requirements.
Setting up a welcome page via a router (step-by-step instructions)
Let's look at the process using popular router models as an example. The interface may vary slightly depending on the firmware version.
1. TP-Link routers (Omada, Archer series)
Models with firmware Omada Controller (For example, TL-R605, ER605) support captive portal out of the box:
- Connect to the router at
192.168.0.1(or another one, if you changed it). - Go to the section
Wireless → Captive Portal. - Enable the feature and select the Wi-Fi network for which you want to activate the page.
- In the field
Portal Pageselect Local (local page) or External (external URL if you have your own server). - Configure authorization parameters:
- 🔑 Without authorization — just an information page.
- 📞 By SMS — the user enters a phone number and receives a code.
- 🖥️ Through social networks — authorization via Facebook, VK, Google (requires API configuration).
For models without Omada (eg. Archer C6) you will need alternative firmware, for example, OpenWRT.
2. Keenetic routers
Keenetic supports captive portals through a component Guest Network:
- Open the web interface at
my.keenetic.net. - Go to
Guest Network → Portal Settings. - Activate the option Use the portal.
- Select authorization type:
- 📄 Simple agreement — the user accepts the rules.
- 🔢 Password - a single password for everyone (for example, ask the waiter).
- 📱 SMS code — integration with services like SMS.RU.
Design Upload your logo and change the welcome text.Keenetic also allows you to limit the speed for the guest network and set the session time (for example, 1 hour of free access).
3. MikroTik routers
MikroTik offers the most flexible captive portal among consumer routers:
- Connect to the router via WinBox or web interface.
- Go to
IP → Hotspot. - Click Hotspot Setup and select the Wi-Fi interface.
- Set the IP address for the hotspot network (for example,
192.168.10.1/24). - In the section
SMTPSet up an email to send your login information (if you need to register by email). - IN
Server ProfilesCustomize the page design by adding HTML code or a logo. - Activate the hotspot and save the configuration.
- 💳 Paid access through integration with payment systems.
- ⏳ Traffic limits (eg 100 MB free, then payment).
- 📡 Redirect to social networks after authorization.
- 🎨 Ready-made design templates with the possibility of customization.
- 📈 Visitor analytics: how many users connected, how many left contacts.
- 🔄 Integration with CRM (For example, Bitrix24, AmoCRM).
- 📱 SMS gateways to send authorization codes.
MikroTik supports advanced features such as:
⚠️ Attention: When setting up MikroTik via WinBox do not use the function Quick Set For a hotspot, it creates a basic configuration that may conflict with other firewall rules. It's best to configure it manually.
The correct IP address has been specified for the captive portal|
Authorization is in test mode|
The page opens on all devices (iOS/Android/Windows)|
There are no conflicts with other services (DHCP, DNS)-->
Cloud services for creating a welcome page
If your router's built-in features aren't enough, you can use specialized services. They offer:
Popular services:
| Service | Price | Peculiarities |
|---|---|---|
| WiFiGuest | From 500 ₽/month | Easy setup, integration with 1C |
| MyWiFi | From 300 ₽/month | Templates for cafes and hotels, SMS authorization |
| Purple WiFi | From $20/month | Social login (Facebook, VK), advanced analytics |
| Yandex.WiFi | For free | A simple captive portal with phone number authorization |
Example of setup via WiFiGuest:
- Register on the service website and create a new project.
- Select a design template (for example, "Cafe" or "Hotel").
- Set up fields for data collection (name, email, phone number).
- Generate a unique URL for your page (e.g.
https://yourbrand.wifiguest.ru). - In your router settings, specify this URL as the external captive portal.
- Test the connection from your phone.
Cloud services typically charge based on the number of connections or active users per month. For example, a plan for 500 unique connections can cost around 1000 rubles/month.
Creating your own welcome page on a web server
This method is suitable if you need a unique page with non-standard logic (for example, integration with a loyalty system or POS software). Basic knowledge is required. HTML, PHP and access to hosting.
Step 1: Preparing the Server
You will need:
- 🌐 Hosting with PHP support (for example, Beget, Timeweb).
- 🔐 SSL certificate (required! Browsers block HTTP pages in the captive portal).
- 📂 Domain or subdomain (For example,
wifi.yourdomain.ru).
Example of file structure:
/var/www/wifi/├── index.php # Main page
├── auth.php # Authorization handler
├── success.html # Page after successful authorization
└── assets/
├── style.css
└── logo.png
Step 2: Basic Page Code
File index.php may look like this:
<?php// Check if the user is authorized
session_start();
if (isset($_SESSION['authorized']) && $_SESSION['authorized'] === true) {
header("Location: success.html");
exit;
}
?
>
<!DOCTYPE html>
<html>
<head>
<title>Welcome to our cafe!</title>
<link rel="stylesheet" href="assets/style.css">
</head>
<body>
<div>
<img src="assets/logo.png" alt="Logo">
<h1>Connect to our Wi-Fi</h1>
<p>To access the Internet, please accept the terms of use:</p>
<form action="auth.php" method="post">
<label>
<input type="checkbox" name="agree" required>
I agree with <a href="/terms.html">the rules</a>
</label>
<button type="submit">Connect</button>
</form>
</div>
</body>
</html>
File auth.php (authorization handler):
<?phpsession_start();
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['agree'])) {
$_SESSION['authorized'] = true;
header("Location: success.html");
exit;
} else {
header("Location: index.php?error=1");
exit;
}
?>
Step 3: Configuring the Router
In the router interface, specify the address of your page as the external captive portal:
- For TP-Link Omada:
Wireless → Captive Portal → External Portal URL. - For MikroTik:
IP → Hotspot → Server Profile → Login Byselect HTTP CHAP and specify the URL.
After authorization, the user should be redirected to the page success.html, where you can place:
- 🎉 Welcome message.
- 📢 Promotions or news about the establishment.
- 🔗 Links to social networks.
⚠️ Warning: If you use shared hosting, make sure your ISP doesn't block outgoing connections to port 80/443 from your router. Some hosting services (for example, Hostinger) may require confirmation to unlock.
How to check if the redirect is working?
Open Wi-Fi settings on your phone and connect to your network.
In your browser, enter any address (for example, http://neverssl.com).
If the welcome page does not open automatically, please go to the address manually. http://1.1.1.1 or http://captive.apple.com (for iOS).
If you see your page, the setup is successful!
Common mistakes and how to avoid them
Even with proper configuration, the welcome page may not work. Here are the most common issues and their solutions:
| Problem | Possible cause | Solution |
|---|---|---|
| The page does not open automatically | Redirection is disabled in the router. | Check your settings Captive Portal or Hotspot |
| The browser shows "Not secure" | No SSL certificate | Install a free certificate from Let’s Encrypt |
| The page opens, but the internet doesn't work. | Incorrect firewall rules | Add a rule to allow traffic after authorization |
| The page doesn't appear on the iPhone. | Apple blocks captive portal | Open manually http://captive.apple.com |
| Users are complaining about slow loading times. | Heavy page design | Optimize images and minify JS/CSS |
A few more nuances:
- 📱 AndroidSome versions may cache the page. Ask users to clear their browser data.
- 🍎 iOS/macOSThese devices aggressively cache the captive portal. Changes to the server may take up to 24 hours to update.
- 🌍 Multilingualism: If you have an international audience, add a language switcher.
Legal aspects: what you need to know
The collection of user data via Wi-Fi is regulated by law. The following requirements apply in Russia:
- 📜 Federal Law No. 152 "On Personal Data"If you collect email or phone numbers, you must obtain the user's consent to process the data.
- 📡 Law "On Communications": Telecom operators (including public Wi-Fi owners) are required to store connection logs for 6 months.
- 🔞 Ban on children's advertising: If your Wi-Fi is accessible to children, you cannot collect their data without parental consent.
Recommendations for compliance with laws:
- 📄 Add to page privacy policy indicating what data you collect and how you use it.
- ☑️ Use the "I agree to the processing of personal data" checkbox (it cannot be checked by default!).
- 🗑️ Give users the opportunity deleting your data (for example, via a feedback form).
Sample consent text:
By clicking "Connect", I confirm that I have read and agree to[privacy policy](/privacy.html) and I agree to the processing
my personal data (phone number, email) for the purpose of providing
access to Wi-Fi and information about promotions.
⚠️ Please note: If you are doing business in Europe, you will also need to comply GDPRFines for non-compliance can reach 4% of the company's annual turnover.
FAQ: Frequently asked questions about the welcome page
Is it possible to create a welcome page on a home router (for example, from a provider)?
Most routers from providers (for example, Rostelecom, Beeline) do not support the captive portal. You will need:
- Buy a separate router (for example, TP-Link Omada or MikroTik).
- Connect it to the main router in mode
AP(access point). - Set up a guest network with a captive portal on a new device.
An alternative is to use a cloud service (eg. Yandex.WiFi), but this will require monthly costs.
How can I make a page open on all devices?
Some devices (especially Apple) block the automatic opening of the captive portal. To increase your chances:
- Use HTTPS (Necessarily!).
- Set up a redirect with
http://captive.apple.comto your page. - Add a meta tag for iOS:
<meta name="apple-itunes-app" content="app-id=123456789">(Where
123456789— ID of your application, if any).
On Android Usually there are no problems, but some manufacturers (for example, Xiaomi) may block automatic redirects in order to save traffic.
How much does it cost to customize a welcome page?
Cost calculation:
| Component | Cost (₽) |
|---|---|
| A router with captive portal support (e.g. TP-Link ER605) | 5 000 – 10 000 |
| Cloud service (eg WiFiGuest, 500 connections/month) | 500 – 1 500 |
| Hosting + domain for your page | 1,000 – 3,000/year |
| SSL certificate (free via Let’s Encrypt) | 0 |
| Setup by a specialist (if you can’t handle it yourself) | 3 000 – 10 000 |
Total: from 1 500 ₽ (independently with cloud service) up to 20 000 ₽ (full complex with professional setup).
Is it possible to limit the internet speed after connecting?
Yes, this is one of the key features of the captive portal. Restriction methods:
- 📉 On the router:
- IN TP-Link Omada:
Wireless → Captive Portal → Bandwidth Limit. - IN MikroTik: use
Queue Treein the sectionQueues.
- IN TP-Link Omada:
- 🌥️ In the cloud service: most platforms (eg Purple WiFi) allow you to set speed or traffic limits.
- ⚡ Through scripts: If you use your own server, you can limit the speed through
tc(Linux) or firewall rules.
Example command to limit speed to 2 Mbps on MikroTik:
/queue simple add name="WiFi-Guests" target=192.168.10.0/24 \
max-limit=2M/2M
How to collect clients' emails or phone numbers legally?
So as not to violate Federal Law No. 152, follow the algorithm:
- On the welcome page, place:
- Full name of your company (sole proprietor/LLC).
- The purpose of data collection (e.g. "to inform about promotions").
- Method of unsubscribing from the newsletter (for example, an unsubscribe link).
Example of legal form:
<form><label>Email: <input type="email" name="email" required></label>
<label>
<input type="checkbox" name="agree" required>
I agree to the processing of data in accordance with <a href="/privacy.html">the policy</a>
</label>
<button type="submit">Get access</button>
</form>
If in doubt, consult a lawyer. Fines for non-compliance with Federal Law No. 152 can reach 300 000 ₽.