Wi-Fi Login Page Not Showing? Force the Captive Portal on Windows 11 and 10

When the Wi-Fi login page is not showing on a hotel, airport, cafe or guest network, open your browser and go to http://neverssl.com or http://www.msftconnecttest.com/redirect. Both are plain, unencrypted pages, which is exactly what the network's login page, called a captive portal, needs to intercept, and the sign-in page usually appears at once. If it does not, turn off your VPN for a minute, set your Wi-Fi DNS back to automatic if you ever changed it, try a private browser window, then forget the network and reconnect. As a last resort, type the network's default gateway address, shown by ipconfig, into the browser. Once you have signed in, turn your VPN back on.

Jake owes this page to a trade show. Three colleagues in the same hotel lobby, three laptops showing "Connected, no internet", and a growing agreement that the hotel's Wi-Fi was broken. Jake typed neverssl.com on the first laptop and the hotel's login page appeared instantly. The second laptop had a VPN that connected automatically at startup, sealing off the traffic the login page needed; one minute with the VPN off, and the page appeared. The third was his own laptop, which he had once set to use a public DNS service "for speed" and forgotten; the hotel's login system depended on its own DNS, which his laptop was politely ignoring. Three identical-looking failures, three different causes, one lobby's faith in the hotel restored. Ethan, hearing the story, put it this way: the receptionist can only hand you the check-in form if you walk through the lobby, and nowadays every door you own is a locked side door. This page explains why login pages fail to appear, the fixes in order, and the less common causes, for Windows 11 and 10, with notes for phones and Macs.

Why the Wi-Fi login page stops appearing

A captive portal is the sign-in or terms page that public and guest Wi-Fi networks show before letting you on the internet. Hotels use it to check your room number, airports and cafes to show terms of use or ads, offices to register guests, and trains and planes to sell access. Until you complete it, the network lets you connect to Wi-Fi but blocks everything else, which is why Windows shows the network as connected but with no internet.

Mechanically, a portal works by intercepting your first web request and answering with its own page instead. You ask for a news site; the network replies with the hotel's login page. That interception is exactly what modern web security is built to prevent. Almost every website now uses HTTPS, which encrypts the connection and lets your browser verify that the page really came from the site you asked for. When a portal intercepts an HTTPS request, the browser sees an answer that did not come from the real site and refuses it, showing a security warning or simply failing to load.

Many popular sites go further and tell browsers to never accept them over an unencrypted connection, a feature called HSTS, and some browsers now try HTTPS first for every site. The result is that typing a familiar address, like your email or a search engine, almost never shows the portal any more. The portal is waiting for a request it can intercept, and your browser never sends one.

To solve this, operating systems check for portals themselves. Each time you join a network, Windows quietly requests a small plain-text page from a Microsoft test address. If the answer is what Windows expects, the internet works; if the answer has been replaced, Windows knows a portal is in the way and shows a notification to open the browser and sign in. That works most of the time, but the check can be delayed, blocked by a VPN, misrouted by custom DNS, or missed entirely, and then the page never appears by itself. The fixes below do manually what Windows tries to do automatically: offer the portal a page it can intercept.

The fix ladder: stop at the first step that works

Work through these in order. The first two fix most cases in under a minute, and the later ones cover the stubborn ones.

1. Open a plain web page. In your browser, go to http://neverssl.com, a site that exists for exactly this purpose and never uses encryption, or to http://www.msftconnecttest.com/redirect, the address Windows' own portal check uses. Type the http:// part. The portal should intercept the request and show its sign-in page.
2. Turn off your VPN, and any secure DNS or web protection feature in security software, for a minute. Then repeat step 1. After signing in, turn the VPN back on.
3. Set DNS back to automatic. If you ever set a DNS server by hand, open Settings, Network & internet, Wi-Fi, select the network's properties, and set DNS server assignment to Automatic (DHCP). Then repeat step 1.
4. Try a private window in your browser, such as InPrivate in Edge or Incognito in Chrome, which avoids cached pages and most extensions that can block portal pages.
5. Try a different browser. If Edge fails, try Chrome or Firefox, and the other way around. A browser with an HTTPS-only mode turned on may refuse plain pages; the other browser may not.
6. Flush DNS and reconnect. Open Command Prompt, run ipconfig /flushdns, then turn Wi-Fi off and on from Quick Settings.
7. Forget the network and reconnect, which resets the connection and makes Windows run its portal check from scratch.
8. Go to the gateway. Run ipconfig, note the Default Gateway address under your Wi-Fi adapter, such as 10.0.0.1, and type it into the browser. On many networks the portal answers there directly.
9. Ask the staff for the portal address. Many hotels and venues have a specific address on the Wi-Fi card at reception, or a different network for guests.

In Jake's lobby, step 1 fixed one laptop, step 2 the second and step 3 his own. That spread is typical: the problem looks identical on every device, but the cause is personal to each one, which is why a hotel's other guests can be online while you are stuck.

Addresses that make the login page appear

Any page that loads over plain HTTP gives the portal its chance. These addresses are reliable choices; keeping one as a bookmark on a travel laptop saves a lot of guessing.

The connecttest.txt address doubles as a quick test: if it shows the text Microsoft Connect Test, you are online and the portal is already satisfied; if it shows a login page, that is the portal; and if it shows nothing at all, something on your PC, such as a VPN or proxy, is blocking the request. Always type http:// at the start, since some browsers otherwise try https:// first.

How Windows detects a login page, and the notification

Windows uses a component called the Network Connectivity Status Indicator, NCSI, to decide whether a network has internet access. When you join a network, NCSI requests the connecttest.txt file from Microsoft's test address and checks a DNS name too. If the file comes back as expected, the network shows as connected with internet. If something else comes back, typically a portal page, Windows decides that sign-in is needed.

In Windows 11, the network then shows Action needed or a sign-in message in the Wi-Fi list in Quick Settings, and Windows may open your default browser to the portal by itself, or show a notification you can select to open it. In Windows 10, a notification says something like Action needed or Sign in to Wi-Fi network, and the network list shows the same. Selecting the network in the list and choosing Open browser and connect, where shown, starts the portal page directly.

If Windows says No internet, secured without asking you to sign in, the check either did not see a portal or could not run. That is when the manual steps above matter. And if Windows opens the browser but the page shows a certificate warning, the portal tried to intercept an HTTPS page; close the tab and use one of the plain addresses instead. Do not click through certificate warnings on public networks to reach a portal, since a real portal will appear on a plain page without any warning.

The DNS problem: why some laptops never see hotel login pages

Many portals work through the network's own DNS server, the service that turns names like example.com into addresses. Until you sign in, the network's DNS answers every request with the portal's address, so whatever you type leads to the login page. A PC set to use a public DNS service such as 8.8.8.8 or 1.1.1.1, rather than the network's DNS, never asks the hotel's server, so it never hears about the portal. It gets correct answers from a server the network will not let it reach, or no answer at all.

The symptoms are distinctive: every public network fails the same way on that one laptop, while phones and other laptops get the login page normally. If that describes you, DNS is almost certainly the cause. Open Settings, Network & internet, Wi-Fi, select Hardware properties or the network's properties, find DNS server assignment, select Edit, and choose Automatic (DHCP). In Windows 10, the same setting is in Control Panel, Network and Sharing Center, Change adapter settings, the Wi-Fi adapter's Properties, Internet Protocol Version 4, where you choose Obtain DNS server address automatically.

Windows 11 also offers DNS over HTTPS, encrypted DNS, in the same settings. It is useful at home but has the same effect on portals as custom DNS, so set it to off or automatic on public networks. Browsers have their own secure DNS settings too: Edge under Settings, Privacy, search, and services, Use secure DNS, and Chrome under Privacy and security, Security. Their default choice, using your current service provider, works with portals; a fixed provider may not.

The honest advice for a traveling laptop is to leave Wi-Fi DNS on automatic permanently. Custom DNS belongs on your home network, where you control the router, not on a laptop that joins a new network every week. Jake changed his own laptop back the same evening and has not missed a portal since.

The VPN problem: right tool, wrong moment

Using a VPN on public Wi-Fi is sensible: it encrypts your traffic so other people on the network cannot see it. But a VPN that connects automatically as soon as a network appears will block every portal, because it seals the traffic the portal needs to intercept before you have signed in. The VPN cannot connect either, since the network blocks everything until you sign in, so you end up with neither the portal nor the VPN.

The order that works is: connect to the Wi-Fi, keep or turn the VPN off, open a plain page and complete the portal sign-in, then turn the VPN on for the rest of your session. Many VPN apps have settings for exactly this, such as pausing on new networks, a captive portal detection option, or trusted network rules, and a two-minute look at your VPN's settings can end the fight for good. If your VPN connects but you then have no internet, our guide to a VPN connected with no internet covers the other causes.

The same logic applies to other security layers that encrypt or filter your web traffic: web protection in antivirus suites, browser extensions that force HTTPS or block scripts, and corporate security agents on work laptops. For the minute it takes to sign in, they are standing on the receptionist's foot. On a work laptop that you are not allowed to change, ask your IT department; many corporate VPNs have a built-in captive portal mode.

Browser settings that block login pages

Modern browsers have settings that improve security everywhere but can get in the way of portals. HTTPS-only or Always use secure connections modes, available in Edge, Chrome and Firefox, upgrade plain addresses to encrypted ones, which can defeat the trick of opening a plain page. Most of these modes show a warning page offering to continue to the plain site; choose that, or turn the mode off for a moment.

Extensions that block scripts, ads or trackers sometimes break portal pages, which often rely on scripts and third-party services for payment or sign-in. A private window, which usually runs without extensions, avoids this, as does a different browser. Cached pages are another cause: if your browser remembers a site, it may show the cached copy instead of making a request the portal can intercept. Private windows avoid that too.

If your default browser is unusual or has strict privacy settings, Windows may open the portal in it and fail. Changing your default browser just for travel is overkill; simply open Edge, which is always installed, and use a plain address there. Our guide to changing your default browser covers the setting if you prefer a different default.

Random hardware addresses: signed in, then signed out again

Portals remember who has signed in by each device's hardware address, also called the MAC address, a unique identifier for the Wi-Fi adapter. Windows 11 and 10 can use random hardware addresses for privacy, which stops networks from tracking your device across locations. That is a good feature, but it can confuse portals: if the address changes, the portal no longer recognizes you and asks you to sign in again, or, worse, half-recognizes you and leaves you stuck.

Windows offers two levels of control. In Settings, Network & internet, Wi-Fi, the Random hardware addresses switch applies to all networks. For a single network, open its properties, where Random hardware address offers Off, On, or Change daily. "On" keeps one random address for that network, which portals handle well, while "Change daily" gives a new address every day, which explains being asked to sign in again every morning at a long hotel stay.

If a portal keeps signing you out, or a paid plan stops working after a day, set that network's random hardware address to On or Off rather than Change daily, then forget the network and sign in again. If you paid for access tied to a device, the portal may need your current address; our guide to finding your MAC address shows how to read it, and hotel staff can often move a paid plan to a new address.

Forget the network and start fresh

When nothing else works, forgetting the network clears everything Windows remembers about it, including its portal status, and lets you start over as if you had never connected. It takes under a minute.

1. Open Settings, Network & internet, Wi-Fi, Manage known networks.
2. Select the network and choose Forget.
3. Open the Wi-Fi list in Quick Settings with Windows + A, select the network again, and connect, entering the Wi-Fi password if there is one.
4. Wait a few seconds for Windows' portal check. If no page appears, open http://neverssl.com.

Forgetting also clears a network-specific DNS or proxy setting, if one was set on that network's profile. Our guide to forgetting a Wi-Fi network covers doing it from the command line and for networks out of range.

If forgetting does not help and you are comfortable with it, Network reset, in Settings, Network & internet, Advanced network settings, reinstalls all network adapters and returns their settings to default. It removes VPN adapters and saved networks too, so treat it as a last resort, especially away from home where you may need to set up a VPN again.

Proxy settings, the hosts file and other hidden blockers

A few settings, usually left over from work or old software, block portals silently. A manual proxy sends all your web traffic to a proxy server that is unreachable on a hotel network. Open Settings, Network & internet, Proxy, and make sure Use a proxy server is off under Manual proxy setup, unless your workplace requires it. Automatically detect settings can stay on.

The hosts file, at C:\Windows\System32\drivers\etc\hosts, can redirect names to fixed addresses, and ad-blocking tools sometimes add thousands of entries. If msftconnecttest.com or the portal's own address is listed there, the portal cannot work. Open the file in Notepad as administrator to check it.

Windows' own portal check can also be turned off by a policy or registry setting, which some privacy tools change. If EnableActiveProbing is set to 0 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet, or the Group Policy Turn off Windows Network Connectivity Status Indicator active tests is enabled, Windows never detects portals and never shows the sign-in notification. Set the value back to 1, or the policy to Not Configured, and restart. The plain-page trick still works without the check, but the automatic notification is a convenience worth keeping on a laptop that travels.

Symptom, likely cause, fix

Signed in but still no internet

Sometimes the portal accepts your details and says you are connected, but nothing loads. First, give it a few seconds and reload a page; some portals take a moment to release your device. If a confirmation page appeared, keep it open until the internet works, since closing it early occasionally interrupts the process.

Next, check the VPN. If your VPN was set to connect after the portal, it may still be trying, and with some VPNs the internet does not work until it finishes. Disconnect and reconnect it. Then check Windows' status: if the network still says no internet, turn Wi-Fi off and on so Windows runs its check again.

Some portals have device limits, such as two devices per room, and silently refuse the third. If your phone and tablet are already signed in, sign one out or ask reception to raise the limit. Others have time or data limits, such as one hour free, after which the internet stops and the portal must be completed again, sometimes with payment. And on networks with a premium tier, the free tier may block video or large downloads while web pages still load. If the venue's other guests are online and you are not, after all this, ask the staff; they can see your device in the portal's admin page and reset it.

Paid plans, time limits and multiple devices

Many portals sell access by time or by device, and understanding the plan saves a lot of confusion. A plan for one device ties itself to the hardware address of the device that bought it. Signing in on another device either fails or moves the plan, signing the first device out. If you need several devices online, look for a multi-device plan, or share one device's connection, if the terms allow.

Time-limited plans, such as one free hour, count from when you sign in, and some count only time connected while others count clock time. When the time runs out, the internet stops and the portal reappears, often asking for payment. If you were in the middle of a video call, that is the most likely reason it dropped at a round number of minutes.

Paid plans tied to a device can break when the device's random hardware address changes, as covered above. Before paying for a multi-day plan, set the network's random hardware address to On or Off rather than Change daily, so your laptop keeps the address the plan was sold to. If a plan you paid for stops working, the venue's staff can usually look it up by your room number, receipt or address and reattach it.

Public or private: choose the right network profile

When you join a new network, Windows sets it as Public by default, and on hotel, airport and cafe networks you should keep it that way. A public profile hides your PC from other devices on the network, turns off file and printer sharing, and applies stricter firewall rules, all of which matter on a network full of strangers. It does not affect the captive portal; portals work the same on public and private profiles.

To check, open Settings, Network & internet, Wi-Fi, select the network's properties, and look at Network profile type. Choose Public network (Recommended) for anything outside your home or office. Only set a network as Private if you trust everyone on it and need to share files or find other devices, which you almost never do in a hotel. Jake's colleague had once set a hotel network as Private to share a presentation file, and only noticed months later that his laptop was still trusting every hotel network with the same name.

Phones, Macs and other devices

The same causes apply on every platform, and the same plain-page trick works everywhere. On an iPhone or iPad, the login page usually opens in a small sign-in window automatically; if it does not, open Safari and go to http://neverssl.com, or open Settings, Wi-Fi, tap the network, and turn off Private Wi-Fi Address only if a portal keeps forgetting you. Turning off a VPN or iCloud Private Relay for that network helps too.

On Android, a notification says Sign in to Wi-Fi network; tap it. If it does not appear, open the browser and go to a plain page, and check that Private DNS in the network settings is set to automatic or off rather than a fixed provider, which has the same effect as custom DNS on Windows. On a Mac, a sign-in window normally appears; if not, open Safari to a plain page and check that no custom DNS or VPN is active in System Settings, Network.

Devices without browsers, such as streaming sticks, game consoles and smart speakers, cannot complete most portals. Some hotels offer a way to register them by hardware address at reception. Otherwise, a travel router, or sharing your laptop's connection with a hotspot after you sign in, gets them online; our guide to sharing your Wi-Fi shows how, though some hotels' terms forbid it.

Airplane, train and bus Wi-Fi

Wi-Fi on planes, trains and buses almost always uses a captive portal, often to sell access or show a free messaging plan, and it adds a few twists. The connection to the ground is slow and shared, so the portal can take much longer to load than in a hotel; give it a minute before deciding it failed. The plain-page trick works the same way, and many airlines also print a specific portal address on the seat card or in the in-flight magazine, which is the most reliable route.

Because the connection is slow, Windows' portal check sometimes times out before the portal answers, so the Action needed notification never appears. Open the plain address by hand. If you bought access on your phone and want to use it on your laptop, check the terms: many plans are per device, and signing in on the laptop may sign the phone out. And turn off large background downloads, such as Windows Update and cloud sync, before you pay for a plan with a data cap; setting the connection as metered, in the network's properties, tells Windows to hold back big downloads. Our guide to metered connections explains the setting.

Train and bus Wi-Fi often switches between mobile networks as you travel, and sessions can drop in tunnels or between towers. If the portal asks you to sign in again after a gap, that is normal; reopen the plain page, and the portal usually remembers you without asking for details again.

Guest Wi-Fi at offices, schools and hospitals

Organizations often run two kinds of Wi-Fi: a staff network that uses work accounts or certificates, and a guest network with a portal where visitors accept terms or enter a code from reception. If you are a visitor, the guest network is the one to join, and the same steps apply when its page does not appear. Codes from reception usually last for a day or the length of your visit.

Work laptops add complications. Corporate security agents, always-on VPNs and managed proxy settings are common, and they are the same blockers as on a personal laptop, except you cannot turn them off. Most corporate VPN products include a captive portal mode that briefly allows the portal before connecting; if yours does not, contact IT, who may have a procedure for hotels and guest networks. Do not try to bypass company security settings to reach a portal.

Schools and hospitals sometimes use portals that require an account and a password from the organization, or a text message code. If the page asks for credentials you do not have, ask the front desk rather than trying different networks; the right network for visitors is usually clearly named.

Staying safe on portal networks

A captive portal is a reminder that you are on someone else's network. A few habits keep you safe. Give portals only what they need: a room number and surname at a hotel is normal; a full card number on a free cafe network is not. Be wary of networks with names that imitate the venue's real one; ask staff for the correct network name. Fake hotspots sometimes show convincing login pages that ask for email passwords or card details.

Once you are signed in, prefer HTTPS sites, which all major sites are, and use a VPN for anything sensitive, turning it on after the portal is done. Keep Windows' network profile set to Public on these networks, which hides your PC from other devices. And when you leave, forget networks you will not use again, so your laptop does not connect to an imitation later. Our guide to public Wi-Fi safety covers the full picture.

Never click through a certificate warning to reach a portal. A real portal never needs you to; it appears on a plain page without warnings. A warning on a login page is either a portal that tried to intercept an HTTPS page, which a plain address fixes, or something worse.

A traveler's setup that avoids the problem

A few settings, made once at home, make portals painless on every trip. Set Wi-Fi DNS to automatic, and keep custom DNS only on your home network's profile, if you use it. Set your VPN to pause on new networks, or to detect captive portals, if it offers the option. Bookmark http://neverssl.com in your browser's favorites bar. Leave Windows' portal check on. And set random hardware addresses to On rather than Change daily for networks you will use for several days, such as a hotel.

Jake added one more step for his trade show trips: a note in his phone with the plain address and the four-step ladder, for colleagues who ask. It has saved more lobby arguments than he can count, and the hotel staff, who hear "your Wi-Fi is broken" all day, appreciate it most of all.

Running a guest Wi-Fi with a login page

Small business owners who read this page from the other side often ask how to set up a portal of their own, for a cafe, waiting room or rental property. Most business routers and mesh Wi-Fi systems include a guest network feature, and many of the business-oriented ones add a simple captive portal with a terms page, a password or a voucher code, managed from the router's app. That is usually all a small venue needs.

A few choices make a portal less frustrating for guests. Keep the guest network separate from your business network, so guests cannot reach your PCs, card terminals or cameras. Keep the portal simple: a terms page and a single button work on every device, while sign-in pages that need social media accounts or long forms fail more often. Set sessions to last a sensible time, such as a day for a cafe or the length of a stay for a rental, so guests are not asked again every hour. And print the network name and a plain portal address on the Wi-Fi card, since that is exactly what guests need when the page does not appear by itself.

If guests report that the page never appears, the cause is usually on their devices, as this page describes, but check that your portal answers plain http requests, and that its own address is reachable before sign-in. A portal that only works over HTTPS with a certificate the device cannot verify will show warnings on every device, which looks like an attack to careful guests.

Frequently asked questions

A missing Wi-Fi login page is almost always your own security doing its job too well. The portal needs one plain page to intercept, and your browser, VPN and DNS settings all try to deny it one. Give it http://neverssl.com, step VPN and custom DNS aside for a minute, and the page appears. If it still does not, a private window, a fresh connection or the gateway address finishes the job. Jake's colleagues were online within ten minutes, and the lobby went back to arguing about the coffee instead.

Revision note. Written October 3, 2026, expanding our 2016 guide to Wi-Fi login pages that will not open into a complete guide for Windows 11 and 10. It covers why portals fail, the fix ladder, trigger addresses, Windows' portal check, DNS, VPNs, browser settings, random hardware addresses, forgetting the network, proxies and the hosts file, signed-in-but-offline problems, phones and Macs, safety, and a traveler's setup. May every lobby page load on the first try.