What Is A Captive Portal?

A captive portal is the web page that appears when you connect to a public or guest WiFi network — the screen that asks you to log in, accept terms, or enter an email before you can browse. This guide explains how captive portals work, the different types, and why businesses use them.

Definition

A Captive Portal, Explained.

A captive portal is a web page a user is automatically directed to before they are granted access to a WiFi network. Until the user completes the required action — signing in, accepting an acceptable-use policy, entering an email, or paying — the network "captures" the session and blocks general internet access. You've seen one every time a hotel, airport, café, or stadium WiFi asks you to log in.

Technically, the captive portal works by intercepting the first web request a device makes and redirecting it to the portal page. Once the user authenticates, the network releases the session and normal browsing begins. The portal can be a simple "click to connect" page or a full guest-experience platform that captures data and offers paid tiers.

For businesses, the captive portal is the one moment every single guest passes through — which makes it uniquely valuable for marketing, analytics, and security.

How It Works

How A Captive Portal Works.

01
Device Joins WiFi

A guest selects your WiFi network. Their device tries to load a page, and the network intercepts that first request instead of letting it through.

02
Portal Page Appears

The guest is redirected to the captive portal — a branded splash page asking them to log in, accept terms, enter an email, or choose a WiFi tier.

03
Access Granted

Once the guest completes the step, the network releases the session and they browse normally — while the business keeps the data and insight the portal captured.

Types

Types Of Captive Portals.

Click-Through

The simplest captive portal: the guest accepts an acceptable-use policy and clicks "connect." Fast, but captures no data.

Email / Form

The guest enters an email (and optionally name or phone) to connect — turning WiFi access into a verified marketing contact.

Social Login

The guest connects with Google, Facebook, or Apple. Quick for the guest and high-quality, verified data for the business.

SMS Verification

The guest receives a code by text to confirm a real phone number before access is granted.

Paid / Tiered

The portal offers free Basic and paid Premium tiers — a direct WiFi revenue stream, often billed to a hotel room via the PMS.

Platform

A full guest WiFi platform like Aethernet Cloud combines all of the above with surveys, analytics, and security monitoring.

For Business

Why Businesses Use Captive Portals.

Verified guest data — build an opted-in marketing list automatically, with every connection.
Feedback & reviews — email captured at login powers post-visit surveys and review requests.
Revenue — paid premium tiers turn WiFi from a cost center into income.
Branding — the portal is a branded touchpoint every guest sees.
Security & compliance — enforce acceptable-use policies and log traffic for legal requirements.
In Hospitality

Captive Portals For Hotels.

Hotels and resorts get the most from a captive portal because every guest connects, often for multiple nights. LEFCON's Aethernet Cloud turns the hotel captive portal into verified guest data, post-stay surveys, premium-WiFi revenue, and DNS security — on any existing hardware.

Hotel Captive Portal Software See Aethernet Cloud

Any Hardware

Adds a captive portal on top of your existing firewall and access points — no rip-and-replace.

Live In A Day

Most properties are up and running on their new captive portal within one business day.

FAQ

Captive Portal FAQ

The terms are often used interchangeably. "Splash page" usually refers to the visual landing page a guest sees, while "captive portal" refers to the whole system that intercepts the connection and controls access until the guest completes an action. The splash page is the front end of the captive portal.
A captive portal itself adds a control point where you can enforce acceptable-use policies and separate guest traffic from internal systems. Platforms like Aethernet Cloud go further by monitoring guest traffic at the DNS level and keeping logs for compliance. Guests should still use HTTPS sites and a VPN for sensitive activity on any public WiFi.
Usually not. Modern captive portal software such as Aethernet Cloud runs as a layer on top of your existing firewall and access points — SonicWall, Fortinet, Cisco Meraki, Ubiquiti, Ruckus, pfSense, and others — so no hardware replacement is required.
Yes, when done with consent. A compliant captive portal collects data with explicit opt-in at login and follows regulations like GDPR. LEFCON's captive portal keeps the data yours, stores it securely, never sells it, and lets guests request deletion.

Turn Your Captive Portal Into A Revenue Engine.

Request a Demo Captive Portal For Hotels