A captive portal login is the sign-in page a cafe, hotel, airport or train shows before its WiFi lets you online. You connect, the login screen is supposed to pop up, and sometimes nothing happens. The fastest fix is to open your browser and visit a plain, unencrypted address such as http://neverssl.com. The network will intercept that request and redirect you straight to the login page.
Here is why that works, what the "Captive Portal Login" app on your phone is, and step-by-step fixes for each device when the page still won't appear.
The 10-second fix: open a browser, type http://neverssl.com (note the http, not https), and press go. http://example.com works too. If a login page still doesn't appear, work through the device-specific steps below.
Running the WiFi at a venue? If guests keep telling you the login page won't open, the fix is usually on the network side, not their phone. Skip to what venues can do.
What is the Captive Portal Login app?
If you've spotted an app called Captive Portal Login on an Android phone, or a notification from it, it's a built-in part of Android, not something you installed. Its job is to open a WiFi network's sign-in page for you. When you join a network that needs a login, Android notices, shows a Sign in to network notification, and opens the page through this app when you tap it.
It is safe, and you don't need to remove it. If it pops up on a network you trust at home, that usually means something on the network (a router setting, or DNS filtering) is making Android think there's a login page when there isn't one.
Google has also been updating how this works. From January 2026, on Android 12 and later, networks that support it can open their sign-in page in your normal browser instead of the stripped-down login window. That lets password managers and saved cards autofill, and keeps working when you use a VPN or Private DNS (Android Open Source Project).
iPhones, iPads and Macs have an equivalent called the Captive Network Assistant: the small login window that appears by itself when you join hotel or airport WiFi. It's triggered by a check against captive.apple.com.
Why the login page doesn't appear on its own
A captive portal works by intercepting unencrypted web traffic and redirecting it to the login page. The problem is that almost every modern site and browser now defaults to HTTPS, which is encrypted. A portal can't cleanly redirect an encrypted request without triggering a certificate warning, so instead of a login page you just get a site that hangs or times out.
Your device tries to solve this automatically. When it joins a network it quietly requests a known check page in the background (Apple uses captive.apple.com, Android uses connectivitycheck.gstatic.com). If that request gets redirected, the device knows a portal is present and pops the login window. When that automatic check fails, for example because of a cached DNS record or a VPN, you have to trigger the portal manually. That is what visiting an http:// address does.
Step by step, by device
iPhone and iPad
- Open Settings > WiFi and tap the network name again. This alone reopens the portal in many cases.
- If nothing appears, open Safari and go to
http://neverssl.com. - Still stuck? In Settings > WiFi, tap the
inext to the network and set Private Wi-Fi Address to Fixed (or turn off Use Private Address on older iOS), then rejoin. If you keep getting asked to log in again, our guide to Private Wi-Fi Address explains why.
Android
- Pull down the notification shade and tap the Sign in to network notification.
- If there is no notification, open Chrome and visit
http://neverssl.com. - Under Settings > Network & internet > WiFi, tap the network, and if you see a privacy or MAC setting, switch it to use the device MAC and reconnect.
- If you use Private DNS or a VPN app, turn it off until you've signed in.
Windows
- Windows usually shows a notification to sign in. If it doesn't, open your browser and visit
http://neverssl.com. - Disconnect and reconnect to the network from the WiFi menu to re-trigger the check.
- If your browser forces HTTPS, try another browser or an InPrivate window.
Mac
- macOS normally opens the portal in its own login window. If it closed too early, click the WiFi icon, turn WiFi off and on, and rejoin.
- Open Safari and go to
http://neverssl.comto force the redirect.
If it still won't open
- Turn off any VPN. A VPN routes your traffic past the portal, so the redirect never reaches you. On work laptops running Zscaler, a Captive Portal Detected status is the tool pausing itself so you can sign in.
- Disable ad blockers or content blockers for the session. They can break the portal's scripts.
- Forget the network and rejoin. This clears a half-finished session that the device thinks is already authorized.
- Try a different browser. Some browsers aggressively upgrade every address to HTTPS, which prevents the redirect.
- Type a plain HTTP address you know is unencrypted, rather than searching, since search results are HTTPS. NeverSSL exists for exactly this.
If none of that works, the problem is almost certainly on the network's side rather than your device, such as a misconfigured portal or an access point that isn't redirecting properly. At that point the venue's staff or IT are the ones who can fix it.
If you run the venue: why guests can't see your login page
When guests on every kind of phone report the same problem, the cause is almost always the network setup:
- The portal only catches HTTP. Phones detect a portal by requesting a known check address over plain HTTP (
captive.apple.com,connectivitycheck.gstatic.com,www.msftconnecttest.com). If those requests aren't redirected, the login window never opens. - The walled garden is too open or too strict. If those check addresses are allowed through before login, the phone thinks it's already online and never opens the page. If the portal's own assets are blocked, the page loads blank.
- Sessions are tracked only by MAC address. Modern phones change their WiFi address, so returning guests get asked to log in again.
Check your setup guide for UniFi, Meraki, Omada and other hardware, or book a demo to see a portal that opens reliably on every device.
Want to understand what's happening behind that login screen? Our explainer on what captive WiFi means covers the mechanics in plain English, and if you run a venue, what a captive portal is for hospitality operators shows how to set one up so guests never hit these problems in the first place.