Wi-Fi authentication by phone number: setup and connection

Providing internet access for visitors to cafes, hotels, or shopping centers has long ceased to be a simple matter of providing a password at the reception desk. Modern service standards dictate their own requirements: customers should access the network quickly, conveniently, and preferably without asking staff any questions. That's why Wi-Fi authorization by phone number is becoming the gold standard in the hospitality and retail industries, allowing not only to bring users online but also to build a contact base for marketing.

The essence of the technology is simple: the user connects to an open access point, after which he is redirected to a special page - the so-called captive portalThere, they enter their number, receive an SMS with a confirmation code, and are automatically authorized. For the business owner, this offers a double benefit: network protection from prying eyes and a legal way to communicate with their audience. However, the technical implementation of this process requires a wise approach to selecting hardware and software.

Implementing such a system may seem complicated at first glance. There are ready-made cloud solutions that work even on basic router models, as well as professional gateways for large networks. In this article, we'll discuss how to choose the right option, what equipment is required, and what nuances need to be considered to ensure the system operates reliably and without any issues from your guests.

The operating principle and advantages of SMS authorization

The mechanism for guest access with phone number verification is based on HTTP request redirection protocols. When a client device attempts to access a resource on the internet, the router intercepts the request and redirects the user to the local web interface instead of the requested page. This is where Hotspot A system that requires data entry. After the user enters the number and code from the SMS, the authorization server sends a command to the router to grant access to the device's specific MAC address.

Using a phone number instead of a simple password or an "I agree" button offers a number of strategic advantages for businesses. First, it significantly increases security, as each user is identifiable. Second, it's a marketing tool: you gain real customer contact information, which can be used to send promotions and news, all while complying with personal data laws.

⚠️ Attention: The collection and storage of users' phone numbers is subject to the Personal Data Protection Act. Ensure that the login page includes a checkbox for consent to data processing and a privacy policy, otherwise you risk serious fines.

Furthermore, such a system allows for flexible pricing plans. You can limit speed, allocate a specific amount of traffic, or set access time intervals. For example, in a coworking space, you could offer 30 minutes free, and then offer paid access or authorization via social media. This makes Wi-Fi authorization by phone number a universal tool for monetization or increasing loyalty.

Necessary equipment and software

To implement this, you'll need not just any router from the nearest electronics store, but a device that supports hotspot functionality or a guest portal with external authentication. The market is divided into several segments: professional networking equipment, solutions for small businesses, and cloud services that transform ordinary routers into smart access points.

The most popular solution in the professional equipment segment are devices from MikroTikTheir operating system RouterOS It has a powerful built-in Hotspot server that supports scripting and can interact with external authorization servers via an API. It's the number one choice for those who want full control over their network and aren't dependent on monthly cloud subscriptions, although setup requires technical knowledge.

For those who prefer simpler solutions, there are routers from Keenetic, TP-Link Omada or Ubiquiti UniFiThese manufacturers often offer their own cloud platforms or integration with popular authorization services. In this case, complex operational logic is moved to the cloud, and the router acts merely as an access point forwarding traffic. This simplifies network deployment across multiple locations.

Selecting an authorization service provider

Setting up an SMS processing server yourself only makes sense for very large networks with dedicated programmers. For most tasks, connecting to specialized aggregator services is the optimal solution. These companies provide a ready-made platform with pre-configured SMS gateways, page templates, and administrator dashboards.

There are many such services available on the market, for example, Wi-Fi Login Pages, Hotspot System or local Russian providers working with local telecom operators. When choosing a partner, it's crucial to pay attention to the cost of SMS traffic. Some services offer free authorization but charge per message sent, while others operate on a subscription model.

Geographic coverage is an important aspect. If your establishment is located in a tourist area, make sure the chosen service can send SMS to numbers from foreign operators or has alternative login methods (for example, via instant messaging). It's also worth checking the quality of the page templates: they should be responsive and load quickly even with a weak signal.

Hidden costs for SMS authorization

The cost of a single SMS for a business can range from 1.5 to 3 rubles. With 100 visitors per day, the cost will be approximately 4,500-9,000 rubles per month. Many services allow you to set up "free" login after the first MAC address authorization, which significantly reduces costs.

Step-by-step instructions: setup using MikroTik as an example

Let's look at the setup process based on the hardware MikroTik, as this is the most flexible and common option. To use this, you'll need a router with RouterOS version 6 or 7 installed and internet access. The first step is to create an address pool for guests and configure DNS to ensure forwarding works correctly.

Next, you need to create a Hotspot profile. In the menu IP -> Hotspot The setup wizard will launch. You'll need to specify the interface (usually a bridge-guest or a separate VLAN), network addressing, and, most importantly, the authorization server. Here, you enter the address provided by your SMS authorization service provider.

The key is setting up the Walled Garden. This is a list of addresses available to the user before authorization. This list should include the authorization service domains, telecom operator servers (for loading the payment page or checking the balance), and popular resources so the user can easily navigate to the login form.

/ip hotspot profile
set [find] html-directory=flash/hotspot
/ip hotspot user
add name=admin password=strong_password

After setting up the basic parameters, you need to implement a script that will send a request to the SMS gateway server. Service providers typically provide a ready-made script for RouterOS, which you simply need to copy into the section. System -> ScriptsThis script processes the entered number and starts the procedure for sending the code.

⚠️ Attention: RouterOS interfaces and commands may vary depending on the firmware version. Before making changes to a running network, back up the configuration (Files -> Backup), to be able to roll back in case of an error.

Configuration via cloud services and ready-made solutions

If you don't have the time or desire to mess around with the command line and scripts, you can use cloud platforms that integrate with supported routers. For example, the ecosystem Keenetic Allows you to connect your access point to the cloud and activate the Hotspot component with one click. All authorization logic is managed through a web interface.

In such systems, the connection process looks like this: you register in the service's personal account, add your device by serial number or MAC address, and select the "SMS Authorization" template. Next, you customize the page's appearance: upload a logo, choose colors, and write a welcome text.

The advantage of cloud solutions is centralized management. If you have a chain of 10 cafes, you can change the advertising banner across all locations simultaneously from a single browser window. Furthermore, such services often provide built-in analytics: how many people connected, how many SMS messages were sent, and the average session duration.

Login Page Design and Marketing

The page the customer sees is the face of your Wi-Fi service. It should load quickly and be easy to understand. Don't overload it with text. The optimal structure includes the establishment's logo, a field for entering a phone number, a "Get Code" button, and perhaps a small advertisement for a current dish or special offer.

Wi-Fi authorization by phone number Opens up opportunities for cross-marketing. After successfully logging in, the user can be redirected (using a redirect URL) to a menu page, a social media subscription, or a discount coupon page. This transforms the login process from a technical necessity into a sales tool.

Don't forget about mobile responsiveness. 99% of users will be accessing your site from smartphones. Check how input fields and buttons appear on different screen sizes. Small fonts or buttons that are difficult to hit will irritate users and may even cause them to leave.

• 📱 Use large fonts and contrasting buttons for mobile devices.
• 🎨 Add a background image of the interior or food to enhance the atmosphere of the place.
• ⏱ Specify an approximate duration of access (e.g. "3 hours free") to manage expectations.

Common problems and solutions

During operation, you may encounter a number of common issues. One of the most common is that SMS messages aren't being received by the user. The causes can range from errors in the entered number to blocking by telecom operators. It's important to have a manual code issuance mechanism or an alternative login (e.g., using a voucher) to avoid leaving guests without internet access.

Another common issue is session "stickiness." The user logs in, but the internet connection fails. This is often resolved by clearing the DNS cache on the client device or rebooting the access point. On the server side, it's worth checking the authorization logs: perhaps the SMS provider's balance has run out or the router's concurrent connections limit has been reached.

It's also worth considering the specifics of some applications. Messengers and banks may require a persistent connection that is disconnected when the session timeout expires. Adjust this setting. Keepalive and a reasonable session lifetime (e.g. 24 hours) so that the user does not have to enter the code every hour.

Problem with iOS

Apple devices sometimes don't open the authorization page automatically. Advise users to navigate to any http address (e.g., example.com) or turn Wi-Fi off and on in the settings.

Legal aspects and data security

When working with personal data, you assume responsibility for its security. Even if you use a third-party SMS service, make sure it has the appropriate certificates and agreements. The offer on the login page should clearly state how the data will be used and how to opt out.

Network security is also critical. The guest network should be isolated from your internal network, which houses the cash registers, CCTV cameras, and accounting department. Use VLANs to separate traffic. This will prevent an attacker from accessing the guest Wi-Fi and accessing the establishment's financial data.

Update your equipment firmware regularly. Vulnerabilities in older router firmware versions are a loophole for hackers. Wi-Fi authorization by phone number — this is not a one-time action, but a process that requires periodic monitoring and maintenance.

Do I need to register an access point with Roskomnadzor?

According to current Russian legislation, information distribution organizations (IDOs), which include owners of public access points, are required to identify users. Phone number authentication is one way to fulfill this requirement, as the number is linked to a passport. Separate registration of each router is generally not required, but the contract with the telecom operator must be in the name of a legal entity.

Is it possible to log in for free without SMS?

Yes, many services offer authorization via social networks (VK, OK, Facebook) or simply by clicking a button accepting the terms of the offer. This is cheaper, as you don't have to pay for SMS, but it provides less reliable user identification. However, to comply with the ORI law in Russia, linking a phone number is often required.

How much does it cost to connect such a system?

Costs are divided into hardware (routers range from 3,000 to 20,000 rubles), software (0 to 1,000 rubles per month for a license), and SMS traffic (approximately 2 rubles per message). For small businesses, the initial investment can be around 10,000-15,000 rubles.

Does the system work without constant internet access?

The authorization itself requires access to the SMS provider's server, so the router must have internet access. However, you can configure the authorization page to be cached so it opens even during temporary outages, but it will be impossible to verify the code without a connection to the server.

What if the guest doesn’t have a SIM card (tablet)?

In this case, provide an alternative login method, such as entering a voucher code that the guest can ask the waiter for, or logging in via social media, if your configuration and legislation permits.