You connected to Wi-Fi in a cafe, airport or hotel, but instead of accessing the Internet you see the message "Wi-Fi requires authorization"**? This is a standard practice for public networks, but not all users know how to handle it. In this article, we'll discuss why this requirement exists, how to properly log in on different devices, and what to do if the login page doesn't open.
The problem is relevant for Android, iPhone, laptops on Windows And macOS, as well as smart devices like Smart TVWe'll cover all options, from basic browser authentication to bypassing blocking using a VPN. We'll pay special attention to common errors that leave users without internet access despite successfully connecting.
If you're a network administrator setting up this type of authorization yourself, you'll find recommendations for selecting hardware and software for guest access with logins and passwords at the end of this article.
What does "Wi-Fi requires authorization" mean?
Message "Wi-Fi requires authorization"** appears when you connect to a network where internet access is restricted authorization portal (captive portal). This is a special web page that blocks all traffic until the user performs one of the following actions:
- 🔑 Enter your login and password (for example, in hotels or corporate networks)
- 📋 Accept the terms of use (at airports or shopping malls)
- 💳 Pay for access (in some cafes or on public transport)
- 📱 Confirm your phone number (on mobile networks)
- 👤 Log in via social networks (in coworking spaces or universities)
Such networks are called "guest" or "public"Their main purpose is access control and protection against abuse. For example, a hotel might give you a login and password at reception, or at the airport, you might be offered free internet after registering via SMS.
Technically, the captive portal works like this: after connecting to Wi-Fi all HTTP/HTTPS requests are redirected to the authorization page, while all other traffic is blocked. Only after successful login does the router allow your device to connect to the internet.
Why Wi-Fi asks for authorization: the main reasons
The authorization requirement is not accidental - it serves several purposes:
| Cause | Where it is found | What is required from the user |
|---|---|---|
| Restricted access for guests | Hotels, hostels, sanatoriums | Login/password (issued at reception or in the room) |
| Traffic control | Airports, train stations, metro | Acceptance of rules or SMS confirmation |
| Monetization | Cafes, restaurants, shopping centers | Pay per hour/day or purchase at the establishment |
| Corporate network security | Offices, universities, hospitals | Authorization via LDAP/Active Directory |
| Statistics collection | Exhibitions, conferences | Registration by specifying email or phone number |
Sometimes authorization is required even in home networks — if the router is configured to isolate guest devices. For example, you can share a separate Wi-Fi connection with friends, where access is only possible by entering a password different from the main one.
⚠️ Attention: In some countries (such as the EU), public Wi-Fi networks are required to request user data to comply with logging laws. Refusing authorization may indicate that the network is operating illegally.
How to log in to Wi-Fi on different devices
The authorization process varies depending on your operating system. Below are step-by-step instructions for the most popular platforms.
📱 Android (Samsung, Xiaomi, Google Pixel, etc.)
On Android the algorithm is as follows:
- Connect to a Wi-Fi network in Settings.
- Open any browser (Chrome, Firefox, Samsung Internet).
- The system will automatically redirect you to the authorization page. If this does not happen, enter in the address bar
http://neverssl.comorhttp://captive.apple.com. - Fill in the fields (login/password, phone number, etc.) and click Connect or «Submit».
If the page does not open:
- 🔄 Restart your phone.
- 📶 Forget the network in the Wi-Fi settings and reconnect.
- 🛠️ Disable your VPN or proxy (they may be blocking the redirect).
☑️ Pre-login verification on Android
🍎 iPhone and iPad (iOS)
On iPhone the process is similar, but there are some nuances:
- Connect to Wi-Fi in
Settings → Wi-Fi. - Open Safari (other browsers may not work!).
- Wait for automatic redirection. If not, follow this link
http://captive.apple.com/hotspot-detect.html. - Fill out the authorization form.
A common problem on iOS: After successful authorization, the Internet does not appear. Solution:
- Turn on/off the mode Airplane Mode**.
- Go to
Settings → Wi-Fi, tap the ⓘ next to the network and select "Forget this network"**, then reconnect.
💻 Windows 10/11
On laptops with Windows:
- Connect to Wi-Fi via the taskbar.
- Open any browser (Edge, Chrome, Firefox).
- If the redirection doesn't work, enter
http://1.1.1.1orhttp://neverssl.com. - Please log in.
Important! On Windows Sometimes resetting network settings helps:
netsh winsock reset
netsh int ip reset
(Run the commands in Command prompt as administrator** and restart your PC.)
🖥️ macOS (MacBook, iMac)
On Mac:
- Connect to Wi-Fi via the menu in the upper right corner.
- Open Safari (Necessarily!).
- If the page does not open, go to
http://captive.apple.com. - Fill out the form.
If the Internet does not work after authorization:
- 🔄 Restart your Mac.
- 🔧 Open
System Preferences → Network, select Wi-Fi and press "Additionally" → «TCP/IP» → "Renew DHCP"**.
What should I do if the authorization page doesn't open?
The most common problem is that the browser does not redirect to the login page. Here 7 working methods to fix this:
- Please use a different browser (for example, if it doesn't work in Chrome, try Firefox or Edge).
- Clear your cache and cookies browser.
- Enter special addresses manually:
http://neverssl.comhttp://captive.apple.comhttp://1.1.1.1
- On Windows:
Settings → Network → Configure adapter settings → IPv4 Properties→ set DNS8.8.8.8(Google) or1.1.1.1(Cloudflare). - On Android/iOS: Specify DNS manually in Wi-Fi settings.
- Reboot your device and router (if this is your network).
- Try connecting from another device — If everything works there, the problem is in your gadget.
Critical information: Some public networks (such as those in the Moscow metro or Dubai airports) block access to the captive portal if the device uses IPv6. In this case, disable IPv6 in the network settings.
⚠️ Attention: If you're connecting to a corporate network and the login page doesn't open, contact your IT department. Your device may not be added to the allowed list (for example, by MAC address).
How to bypass Wi-Fi authentication (if allowed)?
Bypassing authorization may violate network usage rules, but in some cases it is acceptable. For example, if:
- 🏨 You pay for a hotel room, but Wi-Fi requires an additional fee.
- 🎓 The university is blocking access to educational resources without authorization.
- ☕ In a cafe, the internet only works after you make a purchase, but you are already a customer.
Here legal methods get access:
1. Using a VPN
Some VPNs (eg. ProtonVPN or Windscribe) allow you to bypass the captive portal by connecting to** authorization. Procedure:
- Install a VPN client on your device.
- Connect to Wi-Fi, but do not pass authorization**.
- Activate your VPN and select a server in another country.
- Try opening any website - sometimes it works.
2. Change MAC address
Some networks block devices by MAC address** After several unsuccessful login attempts, to reset the restriction:
- On Android (with root): use apps like Mac Changer.
- On Windows:
- Open
device Manager. - Find your network adapter → "Properties" → "Additionally".
- Select «Network Address» or «Locally Administered Address» and enter the new MAC (for example,
00:1A:2B:3C:4D:5E).
- Open
3. Connecting via another protocol
Some captive portals only block HTTP/HTTPS**, but they let other traffic through. Try:
- 📧 Set up your email client (for example, Outlook or Apple Mail) with servers
imap.gmail.com/smtp.gmail.com. - 🎮 Launch an online game (for example, Among Us or Brawl Stars), which uses its own protocols.
- 💬 Send a message to Telegram or WhatsApp — sometimes messengers bypass blocking.
- Set up a separate one guest network (VLAN)** on the router.
- Activate captive portal and specify the authorization page (you can create your own in HTML or use a template).
- Set up access policies (for example, time or traffic restrictions).
- Integrate with a billing system (if paid access is required).
- Test the connection from different devices.
⚠️ Attention: Bypassing authorization on corporate or paid networks may be considered a violation of the user agreement. In extreme cases, the network administrator has the right to block your device by MAC address or IP.
How do unauthorized blocking systems work?
Most modern routers (for example, Cisco Meraki or Ubiquiti UniFi) use a combination of methods:
- Redirect DNS requests to the captive portal.
- Block all traffic except ports 80 (HTTP) and 443 (HTTPS).
- Restriction by MAC address or IP after several unsuccessful attempts.
- Integration with billing systems (for example, MikroTik Hotspot or Pfsense), which require payment.
Setting up Wi-Fi with authorization for administrators
If you are setting up Guest Wi-Fi with authorization** For an office, cafe, or hotel, here's the minimum set of equipment and software:
| Component | Recommendations | Approximate prices (2026) |
|---|---|---|
| Router | Ubiquiti UniFi, MikroTik hAP, TP-Link Omada (with Hotspot support) | from 5,000 to 30,000 ₽ |
| Captive portal software | Pfsense + plugin Captive Portal, CoovaChilli, MikroTik Hotspot | Free (for Pfsense) or included in the price of the router |
| Authentication server | Local (FreeRADIUS) or cloudy (Cloud4Wi, Purple WiFi) | from 0 to 15,000 ₽/month |
| Billing system | MyHotspot, WiFiDog, integration with 1C or CRM | from 3,000 ₽/month |
Basic setup diagram:
For small establishments (cafes, beauty salons) a ready-made solution like TP-Link Omada with cloud management. For hotels or large offices, it is better to use Ubiquiti UniFi + FreeRADIUS.
FAQ: Frequently asked questions about Wi-Fi authentication
🔒 Why isn't the internet working after logging in?
There are several reasons:
- 🕒 The time limit has expired (some networks provide access for 1–2 hours).
- 📵 Error on the provider's side (restart the router or contact support).
- 🔄 IP address has not been updated (on Windows complete
ipconfig /releaseAndipconfig /renew(in the command line). - 🛡️ Blocking by MAC address (if you changed it).
Try connecting from another device - if everything works there, the problem is with your gadget.
📱 How to log in to Wi-Fi on a Smart TV (Samsung, LG, Sony)?
On the majority Smart TV there is no browser, so:
- Connect to Wi-Fi via settings.
- Use mobile device** (phone/tablet) for authorization:
- Connect to the same network.
- Log in to your browser.
- Turn off Wi-Fi on your phone - Smart TV should get access automatically (if the router binds authorization to IP/MAC).
If it doesn't work, try connecting the TV via Ethernet (cable) or use miracast/AirPlay to broadcast the Internet from your phone.
🛂 Is it possible to connect to this Wi-Fi without authorization?
Technically yes, but it violates the network's rules. Legal methods:
- 📞 Ask the administrator (at the hotel or office) for your login/password.
- 💳 Pay for access if it's a paid network.
- 🔄 Use mobile internet and share it through access point** on the phone.
Illegal methods (such as MAC or DNS spoofing) may result in your device being blocked.
🔄 How do I reset my authorization if I forgot my password?
Depends on the network type:
- 🏨 Hotel/inn: Contact reception - they will reset your access or issue a new password.
- ☕ Cafe/restaurant: Authorization is usually valid for 24 hours - please reconnect.
- 🏢 Office/university: Contact your IT department or use your corporate portal to restore access.
🛠️ How to set up Wi-Fi at home for guests?
In your home router:
- Turn on guest network (usually in the section
Wi-Fi → Guest Network). - Activate the option "Authorization via web portal"** (if any).
- Set up login/password for guests (e.g.
guest/welcome123). - Limit access speed or time (optional).
On budget routers (for example, TP-Link TL-WR840N) such a function may not exist - firmware like OpenWRT.