1. Introduction
If you offer WiFi to customers, guests, or tenants, you have probably asked yourself a few practical questions. How do I decide who gets online? How do I stop people from using the network without any control? And how do I turn free access into something that supports my business?
A captive portal answers all three. In this guide, you will learn what a captive portal is, how it works, and why it matters for any business that offers customer WiFi. If you are asking what is a captive portal because your network feels too open, you are in the right place.
The three problems we hear about most are uncontrolled access, no control over logins, and missed revenue. Without a sign in step, anyone nearby can join and stay connected. You cannot ask guests to accept your rules, and you cannot offer paid options. If you are also curious about the billing side, our guide on what hotspot billing means is a helpful companion to this article.
2. What a Captive Portal Is
A captive portal is the sign in page guests see before they get internet access. Think of it as a front desk for your network. Guests connect to your WiFi, but they cannot browse until they check in at the portal.
That is why captive portal WiFi is so common in cafes, hotels, shops, clinics, and community networks. The portal gives you access control for guest WiFi. You decide what a guest must do before the connection opens up.
2.1 The Sign In Page Guests See First
When a guest first connects, a page appears on their device. What it shows depends on how you set it up. In general terms, the page can offer:
- A simple button to connect after reading your terms
- A place to enter a voucher code
- A login with a username and password
- A checkout for paid access
You can use one of these options or a mix. A small cafe might only ask guests to accept terms. A venue that sells access might show a payment option. The page is your captive portal login screen, and it sets the tone for the whole guest experience.
2.2 How Access Stays Blocked Until Action Is Taken
Until the guest completes the required action, internet access stays blocked. The action might be accepting terms, entering a code, logging in, or paying.
This is the heart of the idea. The guest can see your network and can see the sign in page, but nothing else opens until you approve the session. Without that action, the connection goes nowhere.
3. How a Captive Portal Works
Many people search for how does a captive portal work, and the short answer is that it follows four steps: detection, redirection, approval, and release of access.
- A new device joins the network.
- The network notices the device is not approved yet.
- The device is sent to the sign in page.
- Once the guest completes the required step, access is released.
If you plan to sell access, it also helps to understand how prepaid WiFi works, because the same four steps sit behind it.
From a guest’s side, learning how to connect to captive portal wifi is simple. Join the network, wait for the page to appear, and follow the steps on screen.
3.1 Detection and Redirection of New Connections
Captive portal detection and redirection explained simply: the network spots a device that has not been approved, then points it to your wifi login page instead of letting it reach the open internet.
Think of a hotel lobby. A visitor walks in, and the receptionist politely steers them to the desk before they go anywhere else. Detection is the receptionist noticing a new arrival. Redirection is guiding them to the desk. This happens for each new connection, so every guest meets the same sign in page.
3.2 Release of Access After Approval
After the guest finishes the required action, the system records session approval. That approval tells the network this device is allowed online.
From that point, access is released. The guest can browse as normal, and the sign in page steps out of the way. The approval belongs to that session, which is why guests are not asked to sign in again with every page they open.
4. Common Ways Guests Get Verified
Businesses can choose from a few common ways to verify guests. Each one gives a different level of control, and each suits a different kind of venue. You can offer one method or combine them. If you plan to hand out or sell codes, a WiFi voucher management system can help you organize them.
The right choice depends on how much control you need and whether you want to charge for access. Start with the simplest option that fits your business, then add more as your needs grow.
4.1 Click to Connect and Terms Acceptance
Click to connect is the simplest option for guest wifi authentication. The guest reads your terms, taps a button, and gets online. This is what captive portal click to connect terms acceptance looks like in practice.
It works well when you want to offer free WiFi with light control. You show your rules, the guest agrees, and the session is approved. It does not need codes or payments, so it is quick for guests and easy to run.
4.2 Voucher Codes and Login Credentials
Voucher wifi login adds more control. The guest enters a voucher code, or a username and password, to get online. These are the voucher codes and login credentials your business hands out.
This is useful when you want to decide exactly who gets access. For example, a venue might give a code to each customer at the counter. A captive portal voucher code login keeps the network closed to anyone who does not hold a valid code.
4.3 Paid Access Checkout
Paid access checkout lets guests pay to get online. A captive portal paid wifi checkout shows the guest a payment step on the sign in page, and access opens once the payment is complete.
This is the path to paid wifi access for time limited sessions. It suits venues, hotspots, and small ISP operators who want WiFi to earn its keep rather than only cost money.
5. The Role of Authentication in Guest WiFi
Captive portal authentication is how the network confirms that a guest has been approved. The approval can come from a simple agreement to your terms, a valid code, a login, or a payment.
This matters because authentication links approval to controlled access. Without it, you have an open network with no way to tell who is allowed. With it, every connection can be traced back to a session you approved.
5.1 Linking a Device to an Approved Session
Device session linking means one device is connected to one approved session. When a guest completes the sign in step, the network ties that approval to their device.
This keeps things tidy. The approval does not float around for anyone to use. It belongs to the device that earned it, so you can manage sessions one by one.
5.2 How Routers and RADIUS Enforce Access
Router enforcement means the router is the part of the network that actually allows or blocks traffic. It holds the line until a session is approved.
RADIUS is a standard way for a network to check whether a user or session is approved. A simple way to think about it: RADIUS answers the question “is this guest allowed in?” and the router acts on the answer. You do not need to configure these pieces by hand to understand the idea. What matters is that approval and enforcement work together, so the sign in page is not just a screen but a real gate.
6. Why Consent Screens Matter
A consent screen is the part of the portal where guests see your rules and agree to them. It matters for guest WiFi because it shows your terms up front and gives guests a clear moment to say yes before they connect.
Without it, guests join with no idea what is expected of them. With it, you set the ground rules in plain view.
6.1 Presenting Terms and Acceptable Use
Present your terms and acceptable use right on the portal page. Keep the wording clear and short enough that guests will actually read it.
Acceptable use is simply what you allow and what you do not allow on your network. Say it in everyday language, so a guest understands what they are agreeing to before they tap connect.
6.2 Recording Guest Agreement
When a guest accepts your terms, that action records their agreement. In general terms, it shows the guest saw your rules and chose to continue.
This is another reason click to connect with terms acceptance is a good starting point. Even the simplest setup gives you a clear moment of agreement.
7. Branding the Portal Page
Branding your guest wifi portal builds trust. A page that looks like it belongs to your business feels safer to guests than a plain, unfamiliar screen. It also tells guests where to turn for help if something goes wrong.
7.1 Business Name Logo and Welcome Message
Three basic branding elements go a long way: your business name, your logo, and a short welcome message.
The name and logo tell guests they are on the right network. The welcome message sets a friendly tone. A cafe might greet guests warmly, while a clinic might keep it calm and simple. Either way, the page should feel like part of your business.
7.2 Instructions and Support Information
Add clear instructions so guests know how to connect. Tell them what to do on the page and what to expect next.
Add support information too, such as who to ask if the sign in does not work. When guests know where to ask for help, small problems stay small.
8. Paid WiFi and Session Control
Paid WiFi connects payment to controlled, time limited access. A guest pays, the session is approved, and access runs until the session expires. Session control is what keeps that arrangement fair to both sides.
If your network runs on MikroTik routers, a MikroTik hotspot billing system is one practical option to look at for tying payments to sessions.
8.1 Connecting Payment to Time Limited Access
When a guest completes the paid access checkout, the system approves their session. That approval is what opens the connection.
The link between payment and access is the key idea. Paying is the required action, and approval is the result. You decide what each paid session includes, and the portal makes sure the guest only gets what they paid for.
8.2 What Happens When a Session Expires
Many owners ask what happens when captive portal session expires. When session expiry arrives, the approval ends and the device goes back to a blocked state. The guest sees the sign in page again.
From there, the guest can renew by completing the required step once more, such as paying again or entering a new code. Session control makes this return to a blocked or renewal state automatic, so you do not have to chase anyone.
9. Why Captive Portals Matter for WiFi Businesses
For a WiFi business, the value comes down to four things: control, fair use, turnover, and support. A captive portal gives you a simple way to manage all four from one place. If you are ready to put these ideas into practice, this guide on a reliable captive portal setup is a good next step.
9.1 Controlling Who Uses the Network
Access control is the first benefit. Only guests with an approved session get online. Everyone else stays blocked.
This closes the gap that many open networks leave behind. You know that each connection passed through your sign in step, whether that was accepting terms, using a code, or paying.
9.2 Managing Fair Use and Session Turnover
Fair use means everyone gets a reasonable share of the network. Session turnover means sessions end and free up space for others.
Because sessions are approved and expire, no one can sit on your network forever without your say. That keeps access fair and available for the next guest who walks in.
9.3 Creating a Clear Entry Point for Support
The portal is also the first thing guests see, which makes it the natural home for support. Put your instructions and business information right on the page.
Guests then know where to look when they need help. You spend less time answering the same questions, and guests spend less time feeling stuck.
10. FAQ
10.1 What is a captive portal in simple terms?
A captive portal is the sign in page guests see before they can use your WiFi. Access stays blocked until they complete the required step.
10.2 Why does public WiFi redirect to a login page?
The network redirects new devices to a login page so it can verify the guest, collect consent, or take payment. Until that step is done, the device is not approved to go online.
10.3 What happens if a guest closes the portal page?
In general, access stays unapproved until the guest completes the required action. Closing the page does not grant access. The guest needs to return to the sign in page and finish the step.
10.4 Do guests need an app to use a captive portal?
Guests use the sign in page that the network shows them. The steps on that page tell them what to do next. What a particular setup asks for depends on how the business configured it.
10.5 Can a captive portal support paid WiFi access?
Yes. A captive portal can support paid wifi access through paid access checkout and session control. The guest pays, the session is approved, and access ends when the session expires.
10.6 How does a device get back online after approval?
Once the guest completes the required step, the system records session approval. The network then releases access for that device, and the guest can browse as normal.