Many users are familiar with the situation where a smartphone or laptop shows "Connected" but the internet isn't working and the system requires authorization. This message often appears in public places, hotels, or when the home router settings are incorrect. The device has successfully connected to the access point, but the ISP or router is blocking access to the global network until the user is authorized.
This could be due to a password requirement on a special provider page, or a technical conflict with IP addresses or DNS servers. In some cases, the problem lies in outdated security protocols or a software glitch in the operating device itself. Understanding the nature of this status is the first step to quickly restoring the connection.
In this article, we'll detail the steps for various operating systems and usage scenarios. You'll learn to distinguish between when manual login to your account is required and when tweaking your network adapter settings is necessary. We'll also cover specific cases specific to modern encryption standards and mobile operators.
The nature of the error and the mechanism of the Captive Portal
The phenomenon the user experiences is technically called Captive PortalThis is an authentication method used in Wi-Fi networks to redirect the client to a special web page before granting internet access. It works by intercepting the device's HTTP requests and redirecting them to a local authorization server.
Modern operating systems such as Android And iOS, have built-in detectors that automatically send a request to a special server (for example, clients3.google.com or captive.apple.com) to check for internet connection. If the server's response differs from the expected one or a redirect is received, the system blocks regular traffic and displays a notification requiring authorization.
The problem occurs when the verification mechanism fails. This can happen due to the use of default HTTPS sites, which prevent the router from spoofing the login page, or due to static DNS settings that bypass the local gateway. As a result, the device gets stuck in a waiting state, preventing the user from seeing the data entry form.
⚠️ Attention: On public networks (cafes, airports), never enter bank card information or passwords for important services until you're sure the connection is secure. Login pages on public networks can be fake.
Step-by-step instructions for Android and iOS
On mobile devices, the problem is most often resolved by forcing the login page to open. The system may not display the pop-up automatically if the background verification process is blocked by power-saving features or a certificate conflict. The first step should always be opening the browser and attempting to navigate to any HTTP site, such as neverssl.com or example.com.
If the page doesn't open, try clearing the DNS cache or temporarily disabling your mobile internet (3G/4G/5G), as your smartphone may be trying to use cellular data to test the connection, ignoring the Wi-Fi gateway. Another effective method is to "forget" the network: go to Wi-Fi settings, select your network, and tap Forget the network or Delete network, then reconnect.
In some cases, manually entering the gateway address into the browser's address bar can help. To find it, go to the Wi-Fi connection properties and look for "Gateway" or "Router." Enter this IP address (often 192.168.0.1 or 192.168.1.1) in the address bar of Chrome or Safari. This action often forces the provider's authorization interface to open.
☑️ Checklist for mobile devices
For users iPhone There is a specific trick: if the page does not appear, try following the link captive.apple.comThis domain is reserved by Apple specifically for testing the availability of Captive Portal and is guaranteed to trigger an authorization pop-up if the network requires confirmation.
Troubleshooting on Windows and macOS
On computers running Windows or macOS The detection mechanism can also malfunction. Often, the browser refuses to open the login page due to HTTPS Everywhere enabled or extensions blocking redirects. In this case, it's best to use incognito mode or launch the system browser (Edge or Safari) without additional plugins.
If your browser is silent, you need to check your TCP/IP settings. Sometimes a manually entered static IP address conflicts with the requirements of a network that expects dynamic address allocation via DHCP. Open the network adapter properties and find the protocol. Internet Protocol version 4 (TCP/IPv4) and make sure that the "Obtain an IP address automatically" and "Obtain DNS server address automatically" boxes are checked.
Resetting network settings via the command prompt is also a powerful tool. In Windows, open the command prompt as administrator and enter the command to flush the DNS cache and reset the TCP/IP stack. This will clear any temporary network errors that may have accumulated from previous connections.
ipconfig /flushdnsnetsh winsock reset
netsh int ip reset
After running the commands, be sure to restart your computer. On macOS, similar actions can be performed via the Terminal command. sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponderThis will clear the local name cache and force the system to re-query the access point for routing.
Setting up a router: if you are a network administrator
If the "Authorization Required" issue occurs on your home network, it means the Hot Spot or Captive Portal feature is accidentally enabled on your router, or the DHCP server settings are incorrect. You need to log in to the router's control panel, which is usually located at 192.168.0.1 or 192.168.1.1 via the web interface.
In the interface TP-Link, Asus or Keenetic Find the section related to the guest network or hotspot. Make sure "User Authorization" or "Credential Portal" is disabled unless you plan to create a paid Wi-Fi zone. Also, check your DHCP settings: the address pool should be sufficient for all devices, and the lease time shouldn't be too short.
What to do if you forgot your router password?
If you haven't changed your router's admin panel password, try the standard combinations: admin/admin, admin/password, or admin/1234. These are often listed on a sticker on the bottom of the device. If the password has been changed and forgotten, a full reset using the button on the device will help, but this will erase all provider settings.
It's important to check the encryption type. Using an outdated standard WEP or mixed mode WPA/WPA2 may cause authorization issues on new devices. It is recommended to install Clean Mode. WPA2-PSK (AES) or WPA3, if all your devices support this standard.
⚠️ Attention: Router interfaces from different manufacturers (Mikrotik, Zyxel, D-Link) vary significantly. Specific menu names may vary, so consult the official documentation for your model before changing critical settings.
Table: Comparison of solution methods
To quickly navigate through possible solutions, use the following table. It will help you determine the most likely cause and solution depending on your situation and device type.
| Symptom | Probable cause | Solution method | Complexity |
|---|---|---|---|
| The page doesn't pop up | Blocking HTTPS redirects | Go to http://neverssl.com | Low |
| Infinite connection | IP address conflict | Reset network settings (TCP/IP) | Average |
| Authentication error | Incorrect password or encryption type | Forget the network and check the password | Low |
| A code from an SMS is required | Provider Policy (Captive Portal) | Entering data on the provider's page | Low |
| No access for all devices | DHCP failure on the router | Rebooting the router or resetting the settings | High |
DNS and MAC address issues
Access blocking is often related to DNS servers. If your ISP or router expects you to use their DNS to redirect to the login page, but you have Google DNS configured (8.8.8.8) or Cloudflare (1.1.1.1), then requests will bypass the authorization portal. The solution is to temporarily switch to automatic DNS retrieval.
Another common reason is filtering by MAC addressSome corporate networks or parental controls restrict access to a specific list of devices. If you've purchased a new phone or updated the OS, the MAC address may have changed (this is due to the MAC randomization feature in Android and iOS). In this case, you should either disable randomization for the network in the Wi-Fi settings or add the new MAC address to the router's whitelist.
To disable randomization on Android, go to Settings → Wi-Fi → (network gear) → Privacy and select "Use device MAC address." On iPhone, this setting is called "Private Wi-Fi Address" and is found in the properties of a specific network. This will make your network card's address permanent and recognizable for security purposes.
Specifics of public networks and providers
In the networks of large providers (for example, Rostelecom, Beeline, MTS Wi-Fi) Authorization by phone number or through your personal account is often used. If the page doesn't load, try disabling your VPN. Proxy servers and VPN tunnels encrypt all traffic, making it impossible to be redirected to the provider's portal to enter the code from the SMS.
Time limits are also worth considering. Some providers block access if your data plan or paid period has expired, even if there's technically a Wi-Fi signal. In this case, the "Authorization required" message is a signal that you need to top up your balance. Check your account status through the operator's mobile app.
Hotels and hostels often require authorization using a room number and last name. If the form doesn't appear, contact reception: the administrator may need to authorize your device in the control panel, or they may have updated the Wi-Fi password, which hasn't been changed at the information desk yet.
What to do if nothing helps?
If none of the above methods work, perform a full reset of your device's network settings. This will delete all saved Wi-Fi passwords and Bluetooth settings, but often resolves underlying software conflicts. On Android, this can be found under "System → Reset Settings → Reset Network Settings." On iOS, go to "General → Transfer or Reset iPhone → Reset → Reset Network Settings."
Can a virus require authorization?
Yes, there are types of malware that spoof DNS or create fake login screens to steal data. If the login screen appears suspicious, requires you to install an app, or enter your card details for "age verification," disconnect from the network immediately and scan your device with an antivirus.
Does date and time affect authorization?
Yes, if the date and time on your device are incorrect, security certificates (SSL/TLS) will be invalidated, and the browser will block access to the login page. Make sure automatic time synchronization via the network is enabled.
Why does the laptop see the network, but the phone does not?
This may be related to the frequency range. If the router only broadcasts 5 GHz and the older phone only supports 2.4 GHz, it won't see the network. Conversely, some older routers don't work correctly with the new Wi-Fi 6 standards, requiring manual mode switching in the router settings.