Start your 3-day free trial
Sign up to experience all premium features at no cost.
*Available only to new users. Each user is limited to one trial.


With a Mac connected to Wi-Fi but no internet, the Wi-Fi icon only confirms that your Mac joined a wireless network; it does not prove that the router can reach the internet. Start by comparing another website, another app, another device, and—if available—another trusted network. That comparison usually tells you whether to work on the Mac, the router or internet service, one app, or a network setting.
Key Takeaways
- Scope the failure before changing settings: compare apps, devices, and networks.
- Restart the affected layers and follow any Wi-Fi recommendation shown by macOS.
- Renew DHCP before testing DNS, proxy, VPN, or security software one change at a time.
- Stop on a managed Mac or managed network when a policy, profile, or required security tool owns the setting.
- Keep network locations as a reversible late-stage test; do not factory-reset the router or broadly disable protection.
For a broader method that applies to any device, begin with the device and app troubleshooting guide.
| Observation | Likely scope | Best next check |
|---|---|---|
| Every device fails on the same Wi-Fi | Router, modem, captive portal, or internet service | Check router status and service notices |
| Only this Mac fails on several networks | Mac network configuration or software | Restart, review settings, then run Wireless Diagnostics |
| One browser or app fails | App, extension, content filter, or account | Test another app and the same service in a browser |
| Names fail but known network addresses work | DNS resolution | Review the active service's DNS settings |
| Failure begins when a VPN, proxy, filter, or security tool connects | That network layer or its policy | Pause only the owned layer, test, and restore it |
| A sign-in page should appear on hotel, airport, or café Wi-Fi | Captive portal | Open a plain website and complete the network's trusted sign-in |
Do not assume a DNS or proxy problem merely because a browser reports that a page cannot be reached. The comparison above is evidence; the wording of one error page is only a clue.
Use the smallest tests that distinguish one scope from another.
If all devices fail only on one Wi-Fi network, continue with the router connected but no internet checklist. If one app alone fails, update or restart that app and review its extensions, sign-in, and service status before changing system networking.
Stop if the network is operated by work, school, a hotel, or another administrator and its sign-in or policy is unclear. Ask the owner rather than removing profiles or certificates.
An incorrect clock can make secure websites and account services reject otherwise valid connections. Open System Settings > General > Date & Time and confirm that the date, time, and time zone are correct.
Then select Wi-Fi in Control Center or System Settings > Wi-Fi:
If the Mac shows a self-assigned IP address or repeatedly loses its address, move to the DHCP step. If it has a normal address but only names fail, move to DNS.
Restart only what the scope suggests.
Do not press a recessed reset button or restore the router to factory settings. A factory reset can erase the internet connection, Wi-Fi name, password, telephone, or provider configuration and is not a proportionate first-line test.
If another trusted network or hotspot gets the Mac online, install any pending macOS update before deeper changes; Apple lists updating macOS among its Wi-Fi checks.
DHCP supplies the Mac with an IP address and other network details. Apple notes that restarting the Mac renews the DHCP lease; the manual button below does the same without a full restart.
On a wired connection, select the Ethernet or USB adapter service in step 2 instead; the same TCP/IP tab and renewal button apply.
Renewing a lease is appropriate when an address is stale or duplicated. It does not fix a provider outage, an expired captive-portal session, or an app-specific problem. If the network uses administrator-assigned manual values, stop and contact its owner instead of switching them to DHCP.
Third-party VPN, firewall, antivirus, parental-control, and content-filter software can affect network access, especially when it installs a filter or system extension. Apple recommends checking whether such software and its settings are compatible and current.[2]
Use a controlled comparison:
If hostnames fail while other evidence suggests the connection itself works, follow how to change DNS settings on Mac. If access changes with a proxy, use the Mac proxy settings guide.
Do not uninstall required security software, delete system extensions, remove organization profiles, or turn off the macOS firewall globally. On a managed Mac, a setting that is locked or returns automatically is evidence that another owner controls it.
If other devices work and the Mac fails only on one known network, forgetting that network can clear an obsolete saved association.
Before continuing, make sure you know the correct Wi-Fi password and any required enterprise sign-in details. In System Settings > Wi-Fi, open the known-network details, choose to forget the network, then join it again from the trusted network list.
Stop instead of forgetting it if the network uses a work or school certificate, configuration profile, device registration, or credentials you cannot restore. Rejoining also will not repair a router or provider outage.
If the scope still points to this Mac or its radio environment, hold Option while selecting the Wi-Fi status menu, then open Wireless Diagnostics. Follow Apple's on-screen analysis and save the report if you need to share it with an administrator or Apple Support.
Wireless Diagnostics can reveal interference, signal, configuration, or connection clues. Treat recommendations as evidence tied to the tested network. Do not install “network cleaner” utilities or paste destructive Terminal commands from an unrelated forum.
A network location is a saved set of network settings. Apple documents creating, switching, and removing locations in System Settings > Network.[3] A fresh location can help determine whether the current set of service settings is involved without erasing it.
Do not use a new location to bypass a managed policy. If the problem follows the Mac across trusted networks and remains in a fresh location, collect the exact errors, macOS version, affected apps, and Wireless Diagnostics report for Apple Support or IT.
Stop immediately and restore the last known-good value when:
Restore changes in reverse order: return to the original network location, re-enable the owned proxy/VPN/filter state, restore recorded DNS values, and reconnect to the known Wi-Fi network. If the failure began after a macOS or security-tool update, give support the before/after time and exact version instead of stacking more changes.
“Connected” and “online” describe different links. A comparison across apps, devices, and networks identifies the broken layer; restarts, DHCP renewal, and macOS recommendations are low-risk next steps. DNS, proxy, VPN, security tools, forgetting a network, Wireless Diagnostics, and a temporary network location should follow only when the evidence points there—and every manual setting should have a recorded recovery path.
The Mac has joined the local wireless access point, but the router may lack internet service, a captive portal may still require sign-in, or a Mac setting or app may block the next step.
No. Compare another device and network, check recommendations, and restart first. Forget the network only when this Mac fails on one known network and you can restore all credentials.
No. DNS helps only when name resolution is the failing layer. It cannot restore a provider outage, weak radio link, captive sign-in, or broken app.
No. A proxy forwards traffic for configured protocols or apps, while a VPN typically creates a network tunnel. Either can affect access, but they have separate settings and owners.
Do not disable protection globally. First scope the failure and review owned filters or app-specific rules. Contact IT when security controls are managed.
It asks the network for refreshed IP configuration. It does not factory-reset the router, erase Wi-Fi credentials, or guarantee that the internet service itself is working.
It is a late, reversible comparison when the current network-service configuration may be involved. Switch back and remove the temporary location if it does not help.
Contact the provider or router owner when every device fails on one network, IT when a managed setting or network is involved, and Apple when the Mac fails across trusted networks after low-risk checks. If a Mac reaches Wi‑Fi but not the internet, AethoVPN cannot correct a router outage, captive portal, or bad DHCP lease; test those layers before VPN.
Sources checked 4 October 2026.
Sign up to experience all premium features at no cost.
*Available only to new users. Each user is limited to one trial.