A captive portal is the sign-in page public Wi‑Fi shows before it lets you online. If it won’t appear, a VPN, a private DNS setting or an open HTTPS page is usually in the way. Disconnect the VPN, open a plain http:// address such as http://neverssl.com, complete the sign-in page, then reconnect your VPN.
What a captive portal is
Hotels, airports, cafés and trains often put a sign-in page in front of their Wi‑Fi. Until you accept it, the network intercepts your web requests and sends you to that page instead. This is called a captive portal.
Your phone or laptop detects a portal by quietly loading a test address as soon as you join. Apple, Google and Microsoft each run one. If the test doesn’t come back as expected, your device opens a small sign-in window for you.
Why the login page doesn’t appear
- Your VPN connected first. The VPN sends the test request through its encrypted tunnel, so the network can’t intercept it and show its page.
- Private DNS is on. Settings like Android’s Private DNS or a custom DNS-over-HTTPS service can stop the network from redirecting you.
- Your browser opened an HTTPS page. Networks can’t redirect encrypted pages, so a secure site just fails to load.
- Your session expired. Many portals time out after a few hours or when your device sleeps, and the device doesn’t always notice.
- Your device address changed. Some portals remember you by a device address. Private Wi‑Fi addresses can make the network treat you as a new device.
Fix it in five steps
- Disconnect your VPN. In Waysafe, tap the connect button so it shows Not protected.
- Forget the network and join it again. This resets the connection and usually triggers the sign-in window.
- Open a plain http:// address. Type http://neverssl.com into your browser. It never uses HTTPS on purpose, so the network can redirect it to the portal.
- Complete the sign-in page. Give only what’s needed, such as a room number and surname.
- Reconnect your VPN. Tap connect again; the button turns teal when you’re protected.
Waysafe encrypts your connection with one tap and doesn’t keep activity logs. Free trial in the app.
Device-specific tips
- iPhone and iPad. If the window doesn’t open, go to Settings › Wi‑Fi, tap the network and choose Forget, then rejoin. If the portal keeps forgetting you, turn off Private Wi‑Fi Address for that one network, then turn it back on when you leave.
- Android. Tap the “Sign in to network” notification. If nothing appears, set Private DNS to Automatic or Off while you sign in.
- Mac. Open Safari and go to http://neverssl.com. If you use a custom DNS profile, pause it while you sign in.
- Windows. Open your browser at http://neverssl.com. In Settings › Network & internet, make sure the network is set to Public.
Is it safe to sign in to a captive portal?
Usually, as long as it is the real network and you give it only what it needs. Portals often run without HTTPS, so treat anything you type there as visible to the network.
- Fine to enter: a room number and surname, a booking reference, or an email address you’re happy to share.
- Never enter: a password you use anywhere else, card details for “free” Wi‑Fi, or anything the hotel didn’t tell you to expect.
- Never install: apps, certificates or “profiles” a portal asks for.
Why to reconnect your VPN straight away
The moments around the login page are when your connection is most exposed: you are on a shared network, with no VPN, often on a page without HTTPS. Reconnecting as soon as you are online keeps that window short.
Related guide: Is hotel Wi‑Fi safe? How to use it without the risk
Frequently asked questions
Why does the Wi‑Fi keep logging me out?
Portals often expire after a set time, after a period of inactivity, or when your device’s Wi‑Fi address changes. Rejoin the network and complete the sign-in page again, then reconnect your VPN.
Can I stay connected to my VPN while I sign in?
Usually not. The VPN hides the request the network needs to intercept. Disconnect for the sign-in, then reconnect — it takes a few seconds.
What is neverssl.com?
A simple website that deliberately never uses HTTPS, so public networks can redirect it to their sign-in page. It’s a common trick for making a stuck portal appear.
Can the portal see what I browse?
The network operator can see unencrypted traffic and the domain names you visit. Once your VPN is connected, it sees only a connection to the VPN server.
