For hotel Wi-Fi in China, use a strict state order: confirm the official network name, join the Wi-Fi, complete the hotel's sign-in page, verify ordinary internet, and only then connect the VPN. Skipping the portal step can make a healthy VPN look broken, and a login page that never opens is usually a State 3 problem rather than a VPN fault.

Key Takeaways:

Work through five states in order: confirm the official SSID, join, complete the sign-in page, verify ordinary internet, then connect the VPN.

Skipping the captive portal can make a healthy VPN look broken.

Sign-in methods differ by property, so one hotel's process is not a rule for all hotels.

Stop at unknown certificates, profiles, software, charges, or account-password requests.

Connection state machine

Confirm SSID → Join Wi-Fi → Complete portal → Verify ordinary internet → Connect VPN

Hotel sign-in methods are not uniform. A property may use a room detail, code, mobile number, identity check, terms page, or staff-assisted registration. Treat instructions from one hotel as evidence only for that property.

Use the China VPN pillar for preparation. This page covers only the hotel connection sequence.

State 1: confirm the official SSID for hotel Wi-Fi in China

Ask the front desk, room card, or official in-room information for the exact network name. Similar-looking names can belong to another floor, a conference venue, a nearby business, or an impostor.

Record whether the hotel advertises separate guest, lobby, conference, or room networks and whether a password or room-specific credential is expected. Do not post the credential publicly.

If staff cannot confirm the name, do not guess based on the strongest signal. Use mobile data or another connection you control until the hotel verifies it.

State 2: join the Wi-Fi

Select the confirmed SSID and enter only the expected Wi-Fi password. Wait for the operating system to finish association. A Wi-Fi icon means the device joined the local network; it does not yet prove access to the wider internet.

If association fails:

Recheck the SSID and password with staff.
Move to a location where that network is intended to work.
Compare one other device if you are authorized to connect it.
Ask whether device registration or a room limit applies.
Avoid repeated guesses that may trigger a lockout.

Do not reset the hotel's access point, use another guest's credentials, or attempt to enter its administration page.

State 3: complete the hotel Wi-Fi sign-in

After joining, wait for the welcome or login page. Apple documents that captive networks may ask for a username and password, an email address, or acceptance of terms, and notes that fees or other charges might apply.［1］ The exact hotel method may be different.

RFC 8952 defines a captive portal as a network that limits wider access until site-specific conditions are satisfied.［2］ This explains the order, but the general captive-portal guide handles broader portal mechanics.

Stop when the request is not credible

Pause and verify with the front desk if the page asks you to:

accept an unknown certificate warning;
install a configuration profile, root certificate, app, browser extension, or device-management tool;
make an unexpected payment;
enter the password for your email, VPN, Apple, Google, Microsoft, bank, or work account;
disclose a verification code or recovery code;
grant permissions unrelated to internet access.

Use a phone number, room number, surname, voucher, or identity detail only when the hotel confirms that it is part of its process and you understand how it will be used. If the displayed domain or charge differs from what staff describe, stop.

State 4: does ordinary internet work?

Keep the VPN off. Open one normal HTTPS page and a second unrelated service. If neither works, the portal may be incomplete, the session may have expired, or the hotel internet may be unavailable.

Result	Current state	Action
Wi-Fi will not join	Association incomplete	Verify SSID, password, range, and registration
Wi-Fi joins but portal does not finish	Captive state unresolved	Reopen the supported sign-in action and ask staff
Portal completes but ordinary sites fail	Internet not proven	Ask the hotel to check the session or upstream service
Ordinary sites work	Base internet proven	Continue to the VPN state
Only one site or app fails	Service-specific branch	Check that service instead of resetting Wi-Fi

Do not treat a portal success message as sufficient. Verify actual access. If staff say the hotel's upstream service is down, wait or use an approved backup; changing VPN settings cannot restore the hotel's gateway.

State 5: connect a VPN on hotel Wi-Fi in China

Start the VPN only after State 4 succeeds. The captive portal has to authenticate the device on the local network before an encrypted tunnel can form, so a VPN cannot grant a room credential, finish the sign-in for you, or repair the hotel's access point. With ordinary internet proven, open AethoVPN, connect to a nearby location the app marks with a low load, and record whether the tunnel comes up. If you have not set it up yet, start the 3-day free trial before check-in so the first connection is not attempted on an unfamiliar network.

If the VPN works on mobile data but not hotel Wi-Fi, use the controlled matrix in mobile data versus Wi-Fi in China. If it fails on both, use VPN not connecting in China.

Do not cycle through a stale list of protocols or endpoints, and do not ask hotel staff to disable network security. Ask whether VPN use is permitted under the hotel's terms.

What if the hotel captive portal keeps returning?

A hotel may bind a session to a device identifier, room, voucher, time limit, or data allowance. A session can also expire after sleep or a long idle period. Note when the portal returns and whether the device changed its private-address setting or switched between access points.

Do not change privacy identifiers simply to evade a device limit. Ask staff to clear or re-register the authorized device. If you forget the network and rejoin, save the password and portal details first; this action may discard a useful session.

What if one device works and another does not?

The hotel may have a device limit, the second device may not have completed its own portal session, or its time, proxy, VPN profile, or security settings may differ. Compare the state-machine step on each device.

Do not copy a portal cookie, certificate, profile, or credential from one device to another. Ask staff for the supported registration procedure.

How do you stay safe without changing the hotel network?

FTC guidance notes that modern HTTPS protects traffic to encrypted websites and recommends strong passwords and two-factor authentication.［3］ That does not make every network name, portal, download, or account prompt trustworthy.

Confirm HTTPS, keep sharing off, avoid unknown downloads, and use your own device lock. For the wider threat model, read is hotel Wi-Fi safe?. This article does not replace that security guide.

What to tell the front desk or support

Report the exact SSID, room or venue area, time, device type, and last completed state. Say whether the device joined, whether the portal appeared, whether ordinary internet worked, and whether another authorized device had the same result.

Use the five states as a compact incident record. “Joined the confirmed SSID, portal never appeared” sends staff to a different check from “portal accepted the room details, but ordinary internet still failed.” If ordinary internet worked and the VPN alone failed, keep the hotel report focused on the completed network states and take the VPN error to official VPN support. Do not merge those two reports or claim that the hotel caused the later failure.

After staff changes the registration or explains the official sign-in method, return to the last incomplete state. Reconfirm the SSID and repeat only the next step. This avoids destroying a valid portal session or introducing unrelated device changes while the hotel checks its side.

Never send the Wi-Fi password in a public message or share your email password, VPN password, verification code, recovery code, or private key. A legitimate hotel troubleshooting request does not need them.

Summary

Confirm the official SSID with the hotel.
Join before diagnosing the portal.
Complete only a recognized sign-in process.
Stop at unknown certificates, profiles, software, charges, or account-password requests.
Prove ordinary internet before starting the VPN.
Escalate the last failed state, not a vague “Wi-Fi is broken” report.

FAQ

Why does hotel Wi-Fi show connected but have no internet?

The device may be associated with the access point while the portal is incomplete, the session has expired, or the hotel gateway is offline.

Should I turn on the VPN before the hotel login page?

No. Complete the recognized portal and prove ordinary internet first. The portal may not be reachable through a tunnel.

What if the hotel login page does not open?

Keep the VPN off and stay on the confirmed SSID. On an iPhone or iPad, Apple says you can open Settings > Wi-Fi, tap the More Info button next to the network, and choose to join it again to bring up the login requirements.［1］ On other devices, reopen the system's network sign-in notification, and ask the front desk for the official portal address instead of typing one from an unrelated sign or message.

Is it normal for a hotel to ask for a room number?

Some properties use room details, vouchers, phone numbers, or staff registration. Confirm the exact process with that hotel; there is no universal method.

Should I install a certificate or profile supplied by a portal?

Stop and verify. Do not install an unknown certificate, profile, app, extension, or management tool merely to obtain guest internet.

Why does the portal return every day?

The session may expire by time, data use, idle period, or hotel policy. Ask staff about the supported renewal process.

Can I reset the hotel router?

No. Guests should not administer, reset, or bypass hotel network equipment or policy.

Is hotel Wi-Fi safe for email?

Use HTTPS, strong account security, two-factor authentication, and a confirmed SSID. Review the dedicated hotel Wi-Fi security guide for the broader risks.

Disclaimer: This article provides general connection and security information. Follow local law, hotel terms, and staff instructions verified through an official channel.

Sources

Apple Support — Use captive Wi-Fi networks on iPhone or iPad — https://support.apple.com/en-ca/102554
RFC Editor — RFC 8952: Captive Portal Architecture — https://www.rfc-editor.org/info/rfc8952/
U.S. Federal Trade Commission — Public Wi-Fi safety guidance — https://consumer.ftc.gov/articles/are-public-wi-fi-networks-safe-what-you-need-know

Sources checked 4 October 2026.

Hotel Wi-Fi in China: Sign-In and Connection Troubleshooting