Skip to content

You tap connect, and the VPN spins, fails, or says it is connected while pages refuse to load. Then you switch off Wi-Fi, and everything works perfectly on mobile data. That pattern is the key clue in this article: if the same app and the same account behave differently on different networks, the problem is far more likely to be in the Wi-Fi network than in the app.

This guide is written only for the "vpn not working on wifi" situation. It gives you a short triage to decide where the fault sits, then walks through the Wi-Fi-specific causes: login pages, networks that restrict traffic, router settings, DNS, packet size and signal problems. It does not repeat the general checklist for a VPN that will not connect anywhere; for that, use the Help Center guide on VPN not connecting.

Triage in two minutes: is it the Wi-Fi?

Do these four quick tests in order and write down the result of each. They save you from changing settings that were never the problem.

  1. Try mobile data. Turn Wi-Fi off, leave the VPN app alone and connect. If it works, your account, app and device are mostly fine.
  2. Try a different Wi-Fi. A friend's network, a phone hotspot or an office network all count. If it works there, the first network is the suspect.
  3. Try a different device on the failing Wi-Fi. If a second device also fails, the network is at fault. If only one device fails, the device has a setting or app issue.
  4. Check that the Wi-Fi itself works. Open a plain website with the VPN off. If ordinary pages load slowly or not at all, the VPN is not the first problem to solve.

Use this table to read the results.

Mobile data Other Wi-Fi Second device on this Wi-Fi Most likely cause
Works Works Fails The Wi-Fi network or router you are on
Works Fails Fails Several Wi-Fi networks share a trait, such as a device setting
Works Works Works The first device only: app, permissions or saved settings
Fails Fails Fails Account, app version or a wider fault; see the general guide

If the first row matches, keep reading. The rest of the article is about what a Wi-Fi network can do to stop a tunnel.

Cause 1: you have not finished the network's login page

Hotels, airports, cafes, trains and universities often use a captive portal. The Wi-Fi shows as connected, but every web request is silently redirected to a page where you must accept terms or enter a code. Until you complete it, nothing leaves the network, including the VPN's connection attempt.

The tricky part is that modern phones do not always pop the page up. The Wi-Fi icon looks normal and the VPN simply hangs.

What to do:

  1. Turn the VPN off.
  2. Open a browser and visit a plain, non-HTTPS address, or try opening any site, to trigger the redirect.
  3. Complete the sign-in: accept the terms, enter the room number or code.
  4. Wait about ten seconds, then connect the VPN.
  5. If the session expires after some time, expect to repeat the steps. Many portals log you out when the device sleeps.

For more on this routine, see how to connect to a VPN on public Wi-Fi and using a VPN on hotel Wi-Fi. Be careful with portals that ask for more information than a room number or a short code. The US Federal Trade Commission explains why open and shared networks need caution in its guide to public Wi-Fi.

Cause 2: the network restricts the kind of traffic it allows

Some networks, especially at workplaces, schools, hospitals and shared accommodation, only allow ordinary web browsing. They may limit outgoing connections to a handful of common ports, or throttle and drop traffic they do not recognise. A VPN uses a different kind of connection from a web page, so a network like this can let websites through while stopping the tunnel from forming.

Signs that this is the case:

  • The VPN works on every network except one particular place.
  • The app gets stuck on "connecting" and eventually times out.
  • Websites still work normally with the VPN off.

What you can do, within reason:

  1. Try a different connection method in the app, if it offers one. Keep the default unless you have a reason, but a different method is a fair test when one network fails and others work. Do not assume which method suits which network.
  2. Ask the network's operator. In a hotel or office, ask the front desk or IT team whether VPN traffic is allowed. If a workplace forbids it, respect the policy.
  3. Use mobile data for the sensitive task. If you only need protection for banking or work mail, your phone's own connection may be the simplest answer.
  4. Do not try to defeat the restriction. Networks that block these connections usually do so on purpose, and working around an administrator's rules can break terms of use.

Cause 3: the home router is getting in the way

If the VPN fails only at home, your router is the suspect. Common problems:

  • Old firmware. Routers that have not been updated for years can mishandle encrypted connections. Check the maker's support page.
  • A double router. An internet provider's box plus your own router can create two layers of address translation. Many VPNs cope, but a few connection types struggle. A tell-tale sign is that your router's internet address starts with a private range such as 192.168 or 10, as defined in RFC 1918.
  • Firewall or "security" features. Intrusion filters, parental controls and "smart" network protections sometimes treat VPN traffic as suspicious. Switch such a feature off temporarily as a test, not permanently.
  • A router that has been running for months. A restart clears stuck connection tables. Unplug the power for thirty seconds, plug it in again and wait for the lights to settle.
  • Guest network isolation. Guest Wi-Fi often has stricter rules than the main network. Test on the main network.

Change one thing at a time and test after each change, so you know what fixed it.

Cause 4: DNS and packet size on Wi-Fi

Two quiet problems explain a lot of "connected, but nothing loads" reports.

Bad DNS from the Wi-Fi. Your device usually takes its DNS address from the router. If the router or a public hotspot hands out a resolver that is slow, broken or refuses queries from inside the tunnel, pages will not open even though the tunnel looks healthy. Test by typing a site name, then a raw numeric address. If the numeric address loads and the name does not, DNS is the fault. Change the DNS on the device for that Wi-Fi, or restart the router. The background is in how DNS works.

Packet size (MTU). Every network has a maximum size for a packet. A tunnel adds a little overhead to every packet, so a size that fits on mobile data can be too big on a Wi-Fi link behind another layer. The classic symptom is that small things work, such as a search result page, but large pages and uploads hang. This is the problem that Path MTU discovery tries to solve, as described in RFC 1191. If your app or operating system lets you lower the packet size, a modest reduction is a safe test; if it does not, ask support rather than guessing.

Cause 5: the Wi-Fi signal and the device

Not every failure is a block. A poor radio link makes a tunnel drop and reconnect in a loop, and that looks like a VPN fault.

  • Check signal strength by moving closer to the router, then test again.
  • Compare bands. The 5 GHz band is faster but has shorter range; 2.4 GHz reaches farther but is often crowded. If a connection is stable close up and unstable far away, signal is the cause.
  • Turn off power saving for Wi-Fi on a laptop. Some laptops reduce the radio's power when idle, which pauses the tunnel.
  • Forget the network and rejoin. A stale saved profile can hold wrong settings, such as a manual proxy or a fixed address.
  • Look for a proxy or manual IP in the network's advanced settings. A forgotten proxy from a previous workplace can break the tunnel.
  • Update the operating system and the VPN app. Old versions can fail on newer routers.
  • Check the date and time. A clock that is far off can make secure connections fail.

For recurring drops rather than one-off failures, the guide on improving VPN connection stability has a longer list.

Three situations and what fixed them

The hotel room. Lina checks in, joins the hotel Wi-Fi and taps connect, but the app hangs. Mobile data works, so she knows the app is fine. She turns the VPN off, opens a browser and finds the sign-in page, enters her room number and surname, waits briefly and connects. It works. Later, when her laptop wakes from sleep, the portal has signed her out, so she repeats the step.

The home evening. Tom's VPN works at the office and on mobile data but fails at home. A second laptop also fails at home, so the router is the suspect. He restarts it, which changes nothing. Then he notices that his provider's box and his own mesh router are both doing routing. He sets the provider's box to pass traffic straight through, and the VPN connects.

The student dormitory. Ploy lives in a building where the shared Wi-Fi allows web browsing but stalls on the VPN. Other residents report the same. She confirms that the VPN works on her phone's hotspot and uses that for banking and email, and asks building management whether VPN traffic is allowed rather than trying to work around the restriction.

A final checklist, in order

  1. Mobile data works? The Wi-Fi is the focus.
  2. Complete any login page, then reconnect.
  3. Restart the router and the device.
  4. Move closer to the router and retest.
  5. Forget the Wi-Fi network and join again.
  6. Test a numeric address to find DNS problems.
  7. Check for a proxy, manual IP or double router.
  8. Try another connection method in the app, if offered.
  9. Test another Wi-Fi network and a hotspot.
  10. Contact support with the network type, device and the step where it failed.

Common mistakes and limits

  • Reinstalling the app first. If mobile data works, the app is rarely the issue.
  • Changing many router settings at once. You will not know what helped, and you may break something.
  • Turning off the router firewall for good. Use it as a short test only.
  • Using a VPN on a network that forbids it. Follow workplace and school rules.
  • Expecting a VPN to work on every Wi-Fi network. Some networks restrict traffic, and no app can promise otherwise.
  • Forgetting the VPN may need signing in again after the app has been idle. Use the username and password shown on your My Pass page, not your website email.

Summary

When a VPN works on mobile data but not on Wi-Fi, treat the Wi-Fi network as the suspect. Complete any login page, check for restricted traffic, restart and inspect the home router, test DNS and packet size, and rule out weak signal. Change one thing at a time and keep notes so that support can help if you need it.

If you want a simple option for the next time you travel or work from a shared network, you can look at the pricing page at your own pace.

Frequently asked questions

Why does my VPN work on mobile data but not on Wi-Fi?

The two networks treat traffic differently. A Wi-Fi network may sit behind a login page, block certain connection types, use a router with odd settings or give bad DNS. When mobile data works, the app and your account are probably fine and the Wi-Fi network is the place to look.

Why does the VPN fail on hotel or cafe Wi-Fi only?

Public networks often need a sign-in page to be completed first, and some restrict the kinds of connections they allow. Open the login page in a browser, finish it, then connect the VPN. If it still fails, try mobile data or another network.

Can my home router stop a VPN from working?

Yes. Old firmware, a firewall feature, a double router setup or wrong DNS and MTU values can all interfere. Restart the router first, then check updates and the settings described in this article.

Should I change the router's Wi-Fi channel or band?

It can help if the real problem is a weak or noisy signal that makes the tunnel drop, but it does nothing for a blocked connection type. Test on the 5 GHz band near the router first to separate signal problems from blocking.

When should I contact support?

Contact support if the VPN works on mobile data and on at least one other Wi-Fi network but fails only on one network you control, and you have tried a restart, a DNS change and a different connection method. Say which network, which device and which step you reached.

About the author

Bob Kanokphon Thongdee, founder of XPASS VPN

Bob Kanokphon Thongdee

  • Founder of XPASS VPN
  • Co-founder of eSIMonline.asia
  • More than 7 years in online marketing
  • Founder of Cojourney Visa and Cojourney Travel

Need a VPN for a short trip or a busy month?

XPASS sells prepaid passes for a set number of days. You pay once and nothing renews automatically.

See passes

Keep reading

Troubleshooting

VPN Not Connecting? Step-by-Step Fixes

A clear order of checks for when the VPN will not connect: pass status, login details, Wi-Fi and mobile data, permissions, firewalls, app conflicts and error messages.

8 min read

Troubleshooting

VPN Connected but No Internet? How to Fix It

The app shows connected, yet nothing loads. This guide explains why that happens and walks through DNS, MTU, IPv6, device settings and network checks, one at a time.

7 min read

Troubleshooting

How to Improve VPN Connection Stability

A VPN that keeps dropping or stalling is usually reacting to the network or device around it. These steps help you find and fix the weak link.

5 min read

Device Guides

How to Connect to a VPN on Public Wi-Fi

Join a public network, get past the login page, and switch your VPN on in the right order. Includes fixes for captive portals that stop the VPN from connecting.

5 min read

VPN Security

How to Use a VPN on Hotel Wi-Fi Safely

Hotel and travel Wi-Fi is shared with strangers and often hides behind a login page. This guide explains how to connect, when the VPN goes on and what to do when it will not connect.

9 min read