Many people are familiar with the situation when a smartphone or laptop refuses to connect to a public Wi-Fi network. You see a list of available connections, select a network without a lock icon, but instead of the coveted "Connected" status, you get an endless wait or an error message. This happens everywhere: in airports, cafes, shopping malls, and train stations.
The reasons for this behavior can range from a simple operating system software glitch to complex security settings on the part of the ISP or access point owner. Often, the device gets stuck while obtaining an IP address or fails to authenticate via a pop-up window.
In this article, we'll take a detailed look at the technical issues that can interfere with a normal connection. You'll learn how to fix IP address conflicts, what to do about MAC address randomization, and why older encryption protocols can block access to modern networks.
Problems with automatically obtaining an IP address
The most common reason why a device won't connect to open Wi-Fi is due to the DHCP protocol. When you try to connect to the network, the router must assign a unique IP address to your device. If this process is interrupted or the router's address pool is exhausted, the connection will fail. The device will remain stuck indefinitely on the "Obtaining IP Address" status.
Sometimes the problem lies in the static settings of the gadget itself. If you previously manually entered the IP address for your home network, these parameters may conflict with the public access point's requirements. In such cases, you need to reset the TCP/IP settings to ensure automatic data acquisition.
It's worth keeping in mind that in overloaded networks (for example, at mass events), the DHCP server may simply not be able to handle all the requests. DHCP protocol has its own limits on the number of simultaneous address leases. In this situation, the only solution is to wait or try connecting later when someone leaves the coverage area.
To resolve the issue manually, you can try assigning a static IP address if you know the network's address range, but this requires advanced knowledge. The easiest way is to reset the network settings or forget the network and reconnect to initiate a new lease request.
MAC address and randomization function conflict
Modern versions of Android and iOS use MAC address randomization by default to enhance privacy. This means that each time you connect to a new network, your device presents itself to the router with a new virtual address. However, many public hotspots have strict security filters or authentication systems that block "random" MAC addresses.
If the network administrator has configured a whitelist or uses a paid access system tied to the equipment, randomization will become an obstacle. The router will simply not allow you into the network, considering the device an unauthorized guest. In such cases, you need to switch the Wi-Fi privacy setting to use the device's real MAC address.
⚠️ Warning: Changing your MAC address may affect some corporate networks where access is strictly tied to hardware. Make sure you are in a trusted zone before making changes.
There's also the concept of a MAC address "blacklist." If your device was previously blocked by an administrator for violating the terms of service (for example, downloading torrents or attempting to hack), reconnecting will be impossible even with a randomized address if the filter is deeply configured.
To check and change this setting on Android, go to Settings → Wi-Fi → Select network → Advanced → PrivacyOn iOS, the path looks like this: Settings → Wi-Fi → Tap the “i” next to the network → Hidden address (You need to turn it off). After that, try reconnecting.
Security and encryption protocol errors
Although a network is marked as "Open," this doesn't always mean there's no encryption at all or that older standards are used. Some providers use the protocol. WPA2-Enterprise or WPA3 even for guest access, requiring certificates or specific settings that your phone cannot provide automatically.
Additionally, if the access point is operating in mixed security mode or is using an older standard WEP, modern smartphones may simply refuse to connect to it for security reasons. Operating systems are becoming increasingly strict about vulnerable protocols, blocking connections at the driver level.
Another scenario is the use of Captive Portal (Login pages). The network is technically open, but all traffic is redirected to the login page. If your browser can't access this page due to DNS settings or ad blockers, it appears that the Wi-Fi is down.
What is a Captive Portal?
It is a mechanism that redirects the user's HTTP requests to a special web page for authorization, payment, or acceptance of terms of use before providing Internet access.
The table below lists the main security types and possible reasons for connection failure:
| Security type | Description | Probable reason for refusal |
|---|---|---|
| Open (None) | Without password | DHCP flooding, MAC blocking |
| WPA2-Personal | Standard password | Incorrect password, protocol incompatibility |
| WPA3-SAE | Enhanced protection | The old device does not support the standard |
| WPA2-Enterprise | Corporate access | Missing certificate or domain login |
Temporary failures and router memory overflow
Equipment in public spaces often operates under extreme conditions. Cheap access points or overloaded routers can freeze when attempting to handle too many simultaneous requests. In this case, the device sees the network but is unable to complete the handshake.
The router's buffer memory may be full of error logs or temporary session files that weren't closed properly. This results in new clients being ignored. Client limit - This is a hard limitation that cannot be bypassed by the user.
Waiting 1-2 minutes often helps. During this time, the router can reset old, dead connections and free up resources for a new connection. If the access point is completely frozen, the only solution is a reboot by the administrator, which is impossible in a public place.
☑️ What to do if your router freezes
Interestingly, sometimes the problem isn't with the router itself, but with the communication channel. If neighboring access points operate on the same frequency, packet collisions occur. Your phone sends a request, but due to interference, the router doesn't hear it, or the response is lost in the air.
The influence of third-party software and antiviruses
Internet speed boosters, VPN services, or aggressive antivirus software installed on a smartphone or laptop can block connections to open networks. They scan traffic in real time and, if they detect an unsecured connection, may terminate it, deeming it potentially dangerous.
This happens especially often with VPN clients configured in "Always On" mode. When attempting to connect to Wi-Fi, the system immediately attempts to initiate a tunnel, but since there's no internet connection yet (it won't appear until you connect), a logical deadlock occurs, and the connection is dropped.
⚠️ Important: Before connecting to public Wi-Fi, we recommend temporarily disabling VPN and antivirus traffic scanning to avoid software conflicts.
Some memory cleaners can also aggressively terminate background system processes responsible for network activity. This can lead to unstable Wi-Fi performance. Check the power saving settings for system services.
Specifics of DNS and proxy settings
If your device's DNS servers are hardcoded (for example, Google DNS 8.8.8.8 or Cloudflare 1.1.1.1), this may cause a conflict with your ISP's local network. Many public hotspots require DNS requests to go through their gateway to redirect to the login page. If you use an external DNS, the login page won't open, and your internet connection won't work.
The situation is similar with proxy servers. If a proxy is set up in the Wi-Fi settings or in the system, it will attempt to route all traffic through itself. Since there's no internet connection when you connect, the proxy is unavailable, and the system reports a connection error.
For diagnostic purposes, try resetting your network settings to factory defaults. This will delete all saved profiles, static IP addresses, DNS, and proxies. After this, the device will automatically request all settings from the router, which is the most appropriate behavior for guest networks.
In some cases, manually changing the DNS on your phone after connecting can help if the login page doesn't load. However, it's still best to connect initially with the "Default" settings.
Frequently Asked Questions (FAQ)
Why does my phone say "Failed to obtain IP address"?
This means the router's DHCP server hasn't assigned a digital address to your device. This could be due to an address pool overflow, a router malfunction, or a MAC address conflict. Try resetting the Wi-Fi on your phone.
Is it possible to connect to an open Wi-Fi without entering a password if it asks for a code?
If the network is open but requires a code, it's most likely not a Wi-Fi password, but a Captive Portal authorization page. Enter the code in your browser. If the system requires a password specifically for connection (WPA2), the network isn't completely open.
Is it safe to connect to open networks?
No, traffic on open networks is not encrypted. Attackers can intercept transmitted data. Use a VPN to encrypt your traffic, but only connect after successfully logging into the network.
What should I do if the Wi-Fi login page doesn't open?
Try entering any HTTP address in the browser address bar, for example neverssl.com or example.comThis will force a redirect to the authorization portal. Also, temporarily disable HTTPS in your browser settings.
Why does the laptop connect but the phone doesn't?
It's likely a privacy setting (MAC randomization) on your phone or a frequency incompatibility (the laptop sees 2.4 GHz, but the phone is only trying to connect to 5 GHz, which isn't configured at this point).