If your website won't load on public Wi-Fi, it is usually because the network's captive portal is intercepting your browser's DNS requests. Public routers force a DNS redirect to display a login or terms page. Secure HTTPS sites block this interaction to protect you from data interception, stalling the connection.
What Is a DNS Captive Portal?
A captive portal is a mandatory authentication gate on public Wi-Fi. Before granting internet access, the router intercepts outbound traffic and redirects it to a login or terms page.
How it works: You connect, the router captures all DNS queries, every URL returns the portal page, you authenticate, and the router releases your device.
The interception method: Captive portals can only redirect plain HTTP traffic. HTTPS requests cannot be intercepted, which is why some sites time out entirely while others load partially.
The HTTPS Security Conflict
When a captive portal tries to redirect an HTTPS request, the browser sees a certificate mismatch and blocks it. Instead of loading the login page, you see an SSL error or an infinite loading loop.
What users see: "Your connection is not private" on hotel and airport networks.
What's actually happening: The network hasn't verified your device. Neither your site nor your registrar is at fault.
Root Cause: Custom DNS Blocking Portal Detection
Devices using custom DNS servers (Google 8.8.8.8, Cloudflare 1.1.1.1) or DNS-over-HTTPS often bypass captive portal interception entirely. The portal needs to intercept local DNS queries to display the splash page. External or encrypted DNS skips that step, so authorization never completes.
Active VPNs have the same effect. Disable both before connecting to a public network.
Implementation Steps: Force the Portal Open
Step 1: Disable mobile data Turn off 3G/4G/5G. Some devices route traffic through cellular when Wi-Fi authentication stalls. Disabling mobile data forces the device to use Wi-Fi exclusively, triggering the portal.
Step 2: Disable VPN Any active VPN prevents captive portal interception. Disconnect VPN before joining public networks.
Step 3: Use neverssl.com Open your browser and navigate to http://neverssl.com. This site is intentionally served over plain HTTP with no HTTPS upgrade. Captive portals can intercept it freely, causing the login page to appear.
Alternative: http://nossl.sh (actively maintained backup), or captive.apple.com on Apple devices.
Step 4: Clear browser cache Cached data from previous visits can block portal detection. Clear cache and try again.
Step 5: Toggle network adapter Disconnect from the Wi-Fi network and reconnect. This resets the authentication state.
Common Mistakes
Assuming your server or domain is down: A site that fails to load on coffee shop Wi-Fi but works on cellular data is not experiencing a server outage. Verify globally before contacting your host.
Using browser incognito as a fix: Private mode doesn't change DNS resolution or network routing. The captive portal issue persists regardless of browser mode.
Leaving VPN active and wondering why the portal never appears: VPNs encrypt before the local router sees traffic. The portal cannot redirect encrypted tunnel packets.
What This Means for You
Before troubleshooting DNS records in your DNS Manager, confirm the issue is global by checking from a different network or mobile data. A site failing only on one network has a local cause, not a registrar issue. Frequently Asked Questions
Why do some sites not work on public Wi-Fi?
Captive portal intercepts DNS before authentication completes.
What is a captive portal DNS hijack?
Router redirects all DNS queries to a login page until you authenticate.
How do I force a Wi-Fi login screen to open?
Visit http://neverssl.com or http://nossl.sh in your browser.
Why does my website say connection not private on hotel Wi-Fi?
Portal tried to redirect HTTPS request; browser blocked the certificate mismatch.
Does a VPN fix public Wi-Fi loading errors?
VPNs can prevent captive portal detection. Disable VPN first, authenticate, then reconnect.
How do I clear local network DNS locks?
Disable custom DNS servers, reconnect to network, and try neverssl.com.
Why does my site load on cell data but not Wi-Fi?
Public Wi-Fi captive portal hasn't authorized your device yet.
How do I check if my domain is online globally?
Use dnschecker.org or isitdownrightnow.com from a different network.
.png&w=3840&q=75)
.png&w=2048&q=75)
.png&w=3840&q=75)
.png&w=3840&q=75)