This is one of the most common frustrations for VPN users on public Wi-Fi. You connect to the cafe or hotel Wi-Fi, your VPN immediately activates (especially with auto-connect enabled), and now you are stuck - no internet because the portal cannot authenticate you, but no portal appearing because the VPN encrypts the probe traffic.

Why This Happens

Captive portals work by intercepting unencrypted HTTP traffic and redirecting it to the portal login page. A VPN encrypts all traffic before it leaves your device. The portal gateway sees only encrypted packets it cannot intercept, so authentication never happens.

The Fix: Correct Order of Operations

  1. Disconnect your VPN completely. Not just pause - fully disconnect.
  2. Forget the Wi-Fi network on your device (if you have connected before) to force a fresh authentication.
  3. Connect to the public Wi-Fi network.
  4. Wait for the captive portal to appear. If it does not, open Safari and navigate to http://neverssl.com.
  5. Complete the portal authentication (accept terms, enter room number, purchase access, etc.).
  6. Confirm you have internet access by loading any webpage.
  7. Now connect your VPN. Your session is authorized; the VPN can now protect the rest of your traffic.

Preventing the Problem in Future

  • Disable VPN auto-connect for public Wi-Fi networks in your VPN app settings, or whitelist captive portal detection.
  • Some VPNs have a "captive portal bypass" mode - check your app settings. This allows a brief window of unencrypted traffic for portal authentication.
  • Set a trusted network list - tell your VPN to only auto-connect on unknown networks after portal authentication.

People Also Ask

How to overcome VPN blocking?
Disconnect the VPN first, authenticate through the captive portal without VPN, then reconnect. Never try to authenticate with the VPN active - the portal cannot intercept encrypted traffic.
Why won't my VPN work on hotel Wi-Fi?
Usually one of two reasons: the portal has not been completed yet (VPN cannot connect because there is no internet access), or the hotel is actively blocking VPN ports. Try OpenVPN TCP on port 443 if the portal is not the issue.

Related: Captive portal not showing | Best VPN for public Wi-Fi | What is a captive portal?