How to fix VPN not working on hotel Wi‑Fi

This guide helps you diagnose and resolve common VPN connectivity issues when connected to hotel or public Wi‑Fi. You'll learn practical steps to restore your secure connection, from simple switches to advanced protocol changes.

Note: Steps may vary by device and router model. This guide focuses on safe, general methods.

Quick Answer

Disconnect from the hotel Wi-Fi, turn off your VPN, then reconnect to the Wi-Fi and log in through the captive portal.
After you have full internet access, turn your VPN back on.
Switch your VPN protocol from the default (often OpenVPN) to WireGuard or IKEv2/IPSec.
Try connecting to a different VPN server location.
Change your device's DNS servers to a public option like Cloudflare (1.1.1.1) or Google (8.8.8.8).

If this doesn’t work, follow the diagnostic flow and step-by-step guide below.

What you need

Before you start

A device with a VPN app installed and an active subscription.
Successful connection to the hotel Wi-Fi network (post captive portal).
Basic access to your device's network settings.
Your VPN login credentials (if not saved in-app).
Knowledge of how to manually disconnect/reconnect your VPN.

Good to know

Hotel networks often block common VPN ports and protocols.
WireGuard and IKEv2 often bypass blocks better than OpenVPN.
Public DNS can resolve "connected but no internet" issues.
Some hotels limit the number of simultaneous connections.
Mobile data tethering can be a reliable fallback for setup.

Diagnose the issue in 2 minutes

Is the hotel Wi-Fi working without the VPN?
- Yes: The problem is likely VPN-related. Proceed.
- No: Solve the basic Wi-Fi connection first (captive portal login).
What is the VPN symptom?
- Fails to connect at all: Often a protocol/port block.
- Connects but no internet (VPN tunnel active): Often a DNS issue.
- Extremely slow speeds: Could be throttling or server load.
- Connects but drops frequently: Network instability or interference.

Quick Check 1: Open a browser, try to visit a plain HTTP site (like example.com). If it redirects to a login, complete it.

Quick Check 2: Turn VPN off. Can you browse? If yes, turn VPN on and try a different server.

Quick Check 3: If VPN connects but no traffic flows, try pinging 1.1.1.1 from your command line.

Step-by-step guide

Step 1 — Ensure basic internet access

Hotel Wi-Fi almost always has a captive portal (login page). Your VPN cannot work until you pass this.

Disconnect your VPN completely.
Connect to the hotel's Wi-Fi network.
Open a web browser; it should redirect to a terms-of-service or login page.
Complete any required steps (click "Accept", enter room number, etc.).
Verify you can browse to a public website like wikipedia.org.

What you should see: Normal web browsing works before the VPN is turned on.

Step 2 — Change your VPN protocol

Hotel firewalls often block standard VPN ports. Switching to a more discreet protocol can bypass this.

Open your VPN application's settings.
Find the connection or protocol settings.
Switch from the default (often OpenVPN UDP/TCP) to WireGuard or IKEv2/IPSec.
Save settings and attempt to connect.

Windows/macOS: Look in VPN app settings under "Protocol" or "Connection".

iOS/Android: Protocol settings are often in the app's advanced settings menu.

What you should see: A successful connection handshake. WireGuard is particularly effective for this.

Step 3 — Try different VPN server locations

The specific server you're trying to reach might be blocked or overloaded.

In your VPN app, disconnect from the current server.
Open the server list and choose a different country or city.
Prefer servers that are geographically closer for potentially better speed.
Try connecting to an "obfuscated" or "stealth" server if your VPN provider offers them.

What you should see: Connection establishes on a server that wasn't blocked by the hotel's network.

Step 4 — Change your device's DNS servers

Sometimes the VPN connects but traffic stalls because the hotel's DNS fails inside the tunnel.

Disconnect the VPN.
Go to your device's network settings for the hotel Wi-Fi.
Manually set DNS servers to 1.1.1.1 (Cloudflare) and 8.8.8.8 (Google).
Reconnect the VPN and test.

Windows: Network & Internet Settings > Change adapter options > Right-click Wi-Fi > Properties > IPv4 > Use the following DNS.

macOS: System Settings > Network > Wi-Fi > Details > DNS. Add new servers.

iOS/Android: DNS changes often require a third-party app or are in advanced Wi-Fi settings.

What you should see: Websites resolve and load after the VPN connection is active.

Step 5 — Adjust firewall and client settings

Local device firewalls or overly strict VPN settings can interfere.

Temporarily disable your device's firewall (Windows Defender, macOS Firewall) to test.
In your VPN app, enable options like "Use small packets" (MSS clamping) or "Use TCP on port 443".
If available, enable a "kill switch" only after confirming the VPN works, to avoid locking yourself out.

What you should see: Removal of a local software barrier allowing the VPN tunnel to form.

Step 6 — Use a fallback connection

If the hotel network is persistently blocking VPNs, use an alternative internet source.

Create a mobile hotspot using your smartphone's cellular data.
Connect your laptop to this hotspot.
Your VPN should connect without issue over the cellular network.
As a last resort, consider using a travel router configured with your VPN to create a portable, secure Wi-Fi bubble.

What you should see: A reliable, VPN-friendly network you control.

Common fixes by symptom

Symptom: "Cannot connect" error immediately

Likely causes:

Hotel firewall is blocking standard VPN ports (like 1194 for OpenVPN).
The VPN protocol is being detected and blocked.

Safe fixes:

Switch VPN protocol to WireGuard or IKEv2.
Try an obfuscated server if available.
Manually configure the VPN to use TCP on port 443 (mimics HTTPS traffic).

When to stop: If multiple protocols and ports fail, the network may have deep packet inspection blocking all VPN traffic.

Symptom: Connected but no internet access

Likely causes:

DNS requests are failing inside the VPN tunnel.
The VPN's assigned network route is conflicting with the hotel's local network.

Safe fixes:

Change your device's DNS to a public server (1.1.1.1).
In VPN settings, disable features like "Split Tunneling" or "Allow local network access".
Restart your device's network stack (e.g., "Network Reset" on Windows).

When to stop: If you can ping an IP address (like 1.1.1.1) but not domain names, it's almost certainly DNS.

Symptom: Connection is extremely slow

Likely causes:

Hotel Wi-Fi is congested or has low bandwidth for each guest.
VPN server is far away or overloaded.
Traffic is being intentionally throttled.

Safe fixes:

Connect to a VPN server closer to your physical location.
Switch to a lighter-weight protocol like WireGuard.
Try using the VPN during off-peak hours.

When to stop: If speed without VPN is also poor, the issue is the hotel's internet, not the VPN.

Symptom: VPN connects but drops every few minutes

Likely causes:

Unstable Wi-Fi signal or the hotel network de-authenticating idle connections.
VPN keep-alive packets are being filtered.

Safe fixes:

Move closer to the Wi-Fi access point.
In VPN settings, enable "Keep-alive" or "Connection persistence".
Use a travel router to maintain a stable connection to the hotel Wi-Fi, then connect your device to the router via Ethernet.

When to stop: If drops coincide with the hotel's captive portal re-appearing, the session may have a short timeout.

Quick reference

What the metric means

Metric	Relevance to Hotel VPN
Latency (Ping)	High latency (>200ms) indicates a distant VPN server or congested hotel network, causing lag.
Jitter	Variation in latency. High jitter on hotel Wi-Fi causes unstable voice/video calls over VPN.
Packet Loss	Lost data packets. Even 1-2% loss can break VPN tunnels or cause severe slowdowns.
Throughput	Actual download/upload speed. Hotel networks often share bandwidth, limiting VPN throughput.
Signal Strength	Weak signal in your room leads to drops. Aim for at least -70 dBm for a stable connection.

Safe baseline settings for travel

Setting	Recommended Baseline
Preferred VPN Protocol	WireGuard (best), then IKEv2/IPSec. Avoid OpenVPN as first choice on restrictive networks.
DNS Servers	Cloudflare (1.1.1.1, 1.0.0.1) or Google (8.8.8.8, 8.8.4.4). Avoid ISP/hotel DNS.
Wi-Fi Security	Use WPA2/WPA3 if offered by hotel. Always assume the network is public and use VPN.
Device Firewall	Keep on, but create an allow rule for your VPN client application if needed.
App Updates	Update your VPN app and device OS before traveling to ensure latest compatibility fixes.

Mind map summary

Hotel VPN Issue
|
├── Basic Wi-Fi Access
│   ├── Captive Portal Not Completed? → Open browser and log in.
│   └── Wi-Fi Unstable? → Move closer to AP or use Ethernet.
|
├── VPN Connection Fails
│   ├── Protocol Blocked → Switch to WireGuard or IKEv2.
│   ├── Port Blocked → Try VPN over TCP port 443.
│   └── Server Blocked → Change server location.
|
├── VPN Connects But No Internet
│   ├── DNS Failure → Set manual DNS (1.1.1.1).
│   ├── Route Conflict → Disable split tunneling.
│   └── Firewall Block → Temporarily disable local firewall.
|
├── Performance Issues
│   ├── Slow Speeds → Try closer server, lighter protocol.
│   ├── Frequent Drops → Enable keep-alive, check signal.
│   └── High Latency → Likely due to server distance/congestion.
|
└── Last Resorts
    ├── Use Mobile Hotspot (cellular data).
    └── Setup Travel Router with pre-configured VPN.

Troubleshooting checklist

Device Checks

Wi-Fi connected and captive portal login completed.
VPN app is updated to the latest version.
Device OS has all recent updates installed.
Local firewall/antivirus is not blocking the VPN app.
DNS is set to manual (1.1.1.1) as a test.

VPN Configuration Checks

Protocol changed from default to WireGuard/IKEv2.
Connected to a different server/city.
Obfuscation/stealth mode is enabled (if available).
Split tunneling is disabled.
Kill switch is disabled during initial troubleshooting.

When to escalate

Consider contacting your VPN provider's support if:

All protocols and multiple servers fail to connect from the hotel network.
VPN works on other networks (e.g., mobile hotspot) but consistently fails on this specific hotel Wi-Fi.
You suspect a configuration issue with your account or client software.
You receive specific error codes from the VPN app that you cannot resolve.

What to collect before contacting support: Your VPN client version, device OS, the exact error message, the protocol and server you tried, and whether it works without VPN on the same network.

FAQ

Why do hotel networks block VPNs?

Some hotels restrict VPNs to maintain control over their network for security, monitoring, or to enforce content filtering policies. Others might block common VPN ports inadvertently as part of general firewall rules.

Is it legal to use a VPN on hotel Wi-Fi?

In most countries, using a VPN for personal privacy and security is legal. However, you must still comply with the hotel's terms of service. Using a VPN to engage in illegal activities remains illegal.

Why does WireGuard work when OpenVPN doesn't?

WireGuard uses modern cryptography and operates on UDP, often on a single port. It's simpler and can be harder for basic firewalls to detect and block compared to the more recognizable signature of OpenVPN traffic.

Should I use a free VPN for hotel Wi-Fi?

It's not recommended. Free VPNs often have data caps, slow speeds, weaker security, and may log your activity. For reliable and secure access on restrictive networks, a reputable paid VPN service is a better investment.

What is a travel router and how does it help?

A travel router is a small portable router. You connect it to the hotel Wi-Fi (and log in once), then it creates your own private Wi-Fi network. You can configure the VPN on the router itself, so every device connecting to it is automatically protected.

Can the hotel see what I'm doing if I use a VPN?

No. A properly functioning VPN encrypts all traffic between your device and the VPN server. The hotel can see that you are connected to a VPN server and the amount of data transferred, but not the content of your communications.

Why does my VPN work in the hotel lobby but not my room?

This is usually a Wi-Fi signal strength issue. Thick walls and distance weaken the signal, causing packet loss which can break the VPN tunnel. Try moving closer to an access point or using a Wi-Fi extender.

Does using a VPN slow down hotel Wi-Fi?

There is always some overhead due to encryption and routing, but a good VPN on a decent connection should not slow you down noticeably. If hotel Wi-Fi is already slow, the VPN might make it feel slower. Choosing a nearby server and efficient protocol like WireGuard minimizes impact.

Sources and references

National Institute of Standards and Technology (NIST) guidelines on VPN security.
Internet Engineering Task Force (IETF) RFCs on WireGuard and IPsec protocols.
Academic research on network traffic analysis and Deep Packet Inspection (DPI).
Industry whitepapers on public Wi-Fi security best practices.
Technical documentation from major VPN service providers.
CompTIA Network+ certification body of knowledge on network troubleshooting.
IEEE standards for wireless local area network (WLAN) security.

Menu

How to fix VPN not working on hotel Wi‑Fi

AI Assistant

Was this tool helpful?