Internet with easy access: how to connect to your city's public Wi-Fi.

Squares, libraries, terminals, and establishments may offer public Wi-Fi. Coverage and rules vary by city and location. Before relying on a particular hotspot, check with the provider or the service's official website to confirm the address, hours, and access conditions.

Your phone might show Wi-Fi connected but still be unable to browse. A pending login portal is one possibility; lack of internet on the router, unstable signal, and expired session are others. This guide organizes the checks and explains how to confirm the network and use its features without relying on apps that promise connectivity anywhere.

Where is there official public Wi-Fi in Brazil?

The official public network is the one maintained by the government, municipality, concessionaire, or the establishment itself, with a fixed name and its own login page. It doesn't depend on anyone "sharing a password": either it's open, or the place provides the password at the counter.

• Wi-Fi Brazil and GESAC: There are designated access points for institutions and the GESAC Livre option, aimed at public access. A school connected through the program does not necessarily mean a hotspot open to any visitor.
• Municipal programs: Consult the map or the city hall's address list. Coverage, maintenance, and hours are subject to change; confirm the specific location you intend to use.
• Libraries and public facilities: Ask the staff if there is internet access for visitors and what the rules are. Don't assume the institution's internal network is open to the public.
• Subway and trains: Check coverage on the operator's website or on station signage. Service advertised for a line does not imply availability on all trains and platforms.
• Shopping malls, airports and bus stations: network with the name of the place, almost always requiring email or CPF registration on the portal.
• Cafes and restaurants: a private network open to the customer, with the password on the counter or on the menu. The password comes from the owner, not from an app.

Confirm the name and rules directly with the site. A predictable name doesn't authenticate a network, and there's no universal list of data requested by all portals. Read the purpose of the registration and avoid sharing passwords for other accounts. The official page of GESAC service It explains its modalities; the registration to request a point is not an application that unlocks internet on your cell phone.

The login screen that doesn't appear: how the captive portal works

Many public networks use a captive gateway. You connect, the phone tries to open a test address (Android uses a Google address, the iPhone uses an Apple address), and the router intercepts this request, returning the login page instead. That's why Android shows the "Log in to Wi-Fi network" notification and the iPhone opens a window on its own.

The portal may not appear due to network configuration incompatibility, old session, service failure, or automatic detection blockage. Start by checking the system login notification. If other people are also unable to browse, the problem may be with the access point, and changing your mobile phone will not solve it.

The trick of the address without an "s"“

The portal can only intercept a page without encryption. So the way to force the screen to appear is to deliberately request such a page:

1. Connect to the network and wait about ten seconds for the login notification. If it appears, tap it and continue.
2. If it doesn't work, turn off mobile data for a moment so your phone stops preferring 4G.
3. Open your browser and type in an address that begins with http://, without the "s". One that exists solely for this purpose is http://neverssl.com; http://captive.apple.com, which the iPhone uses internally, also works.
4. The portal page should appear in place of the website. Accept the terms, provide the information requested by the program, and confirm.
5. Open a regular website with https to see if it's working. Only then turn your mobile data back on.

If the screen doesn't appear, try disconnecting and reconnecting and contact the administrator. By default, keep the MAC address private or random: it reduces tracking across networks and is usually compatible with common use. Only change this option after identifying a specific incompatibility and understanding the privacy consequences.

How VPN and private DNS can affect the portal.

A VPN can interfere with certain portals, depending on the application, the blocking of connections outside the tunnel, and the network implementation. Not every portal requires disabling it. First, try the login notification and confirm the instructions from the site; do not change the protections of a managed device without guidance.

An unavailable private DNS server on that network can also prevent browsing. If there is evidence of this incompatibility, note the original configuration before any testing. The Automatic option can help with diagnosis, but the configuration should be reviewed after authenticating.

1. Only if an incompatibility is identified, pause the VPN or temporarily adjust the DNS. Note the previous configuration and limit the test to the portal confirmed by the administrator.
2. Connect, log in to the portal, and confirm that an https website opens.
3. Restore the previous settings and check if the VPN is connected. Tunnel coverage depends on the product and configured exceptions; do not assume that all traffic will pass through it.

Among the VPNs offered by the app store, Proton VPN has a free plan with unlimited data, according to Play's own listing, sustained by subscribers to the paid plan. Cloudflare's 1.1.1.1 + WARP is a lighter alternative: it encrypts the DNS and, in WARP mode, the path between the mobile phone and the Cloudflare network. In both cases, the power button only appears after the portal.

2.4 GHz or 5 GHz: which network to choose when two appear?

In shopping malls, libraries, and airports, it's common for the same network to appear twice, with a "2G" or "5G" suffix in the name. The "5G" here doesn't refer to the 5G mobile network: it's the 5 GHz band of Wi-Fi.

Criterion	2.4 GHz	5 GHz
Reach	Larger, it can go through walls and glass.	Smaller, falls with obstacle
Speed	Minor	Bigger
Interference	Lots of features: microwaves, Bluetooth, nearby networks.	Little
Capacity	More devices competing for the same channel.	More channels, less competition.
When to choose	Far from the access point, large square, old cell phone.	Near the access point, video, call, download

In practice: if you can see the access point, stay on the 5 GHz band. If you're on the other side of the square, the 2.4 GHz band will have a stronger signal. Very old cell phones only see the 2.4 GHz network, and that's normal.

Fake network using the real one's name: the evil twin scam.

The evil twin is a network created by a scammer with the same name as the official network of the place. He connects a portable router in his backpack, names it "Airport_WiFi" or "Free Library," and his signal, being closer, appears at the top of the list. The victim connects, sees a login screen similar to the official one, and enters what the screen asks for: email, password, card number.

The risk lies in the imitation of the network and the login page to trick the visitor into providing information. Even a connection with a strong signal can be fake. On the other hand, two networks with the same name are not proof of fraud: establishments also use several legitimate access points.

How to recognize a fake network

• Repeated or similar names warrant verification with the local authorities; signal strength alone does not indicate which network is legitimate.
• Unexpected request for password for another account, payment, or sensitive data: stop the request and confirm it with the responsible party.
• Name with a typo or variation of the official name.
• The official network is open and the "twin" network requires a password, or vice versa.
• A certificate warning appears in the browser when opening an HTTPS website immediately after logging in.

If in doubt, ask at the counter for the exact name of the network. If you have already entered a password on a suspicious screen, change that password using mobile data, activate two-step verification, and follow the instructions. The step-by-step guide to checking if your cell phone has a virus., Because some fake websites also push a file to install.

What to do while in the public healthcare system

Official network and login done, there's still the usage itself. What I do, in order:

• Padlock on the address bar. A website without HTTPS on a public network is open to anyone on the same network.
• VPN connected after the portal. Log in first, tunnel later.
• “"Connect automatically" is off For open networks, so the phone doesn't automatically connect to a network with the same name in another location.
• Forgetting to connect to the internet when leaving. Delete the local registration and prevent automatic reconnection.
• Closed sharing. AirDrop in “Contacts Only” on iPhone; Quick Share in “Your Devices” on Android.
• Check installation requests. Do not install apps, certificates, or profiles suggested by a portal without verifying their origin and necessity with the responsible party. Access to a network does not justify accepting any configuration.
• Banking and shopping via mobile data. Not because the public network breaks the bank's app, but because 4G eliminates the possibility of an evil twin.

The profile item weighs more heavily on the iPhone. A fake website might offer a "configuration profile" to "unlock the internet"; once accepted, it redirects the device's traffic. The place to check is Settings > General > VPN & Device Management, and the iPhone protection guide It shows what to do when a profile appears that you did not install.

How to test the speed before trusting the network.

An open portal doesn't necessarily mean a good network. Public networks divide the bandwidth among everyone connected, and the same point that delivers 40 Mbps at 9 AM delivers 3 Mbps at 6 PM. Ookla's Speedtest measures three things in half a minute: download (what arrives), upload (what goes out), and ping (the round-trip time to the server). For browsing and messaging, 2 Mbps is sufficient; HD video is comfortable starting at around 5 Mbps; video calls depend more on ping, which flows well below 100 ms.

Run the test twice and consider the worst result. If it falls below what you need, switch bands, get closer to the access point, or compare it with mobile data: sometimes the carrier's 4G network beats crowded Wi-Fi.

Wi-Fi map apps: where do they fit into this story?

Apps like WiFi Map help you find the nearest public hotspot and read what other users have said about it: whether the network is online, if it's fast, if registration is required. They also list networks whose owners have chosen to share their passwords, such as a café that wants customers to stay connected, and the map can be downloaded for offline use, which is helpful when traveling. Each of them is described in... A guide to apps that show you the nearest public Wi-Fi..

These maps do not authorize the use of a private network nor do they replace the password provided by the responsible party. A collaborative registration may be incorrect or outdated. Prefer points confirmed by the establishment and respect time, session, and usage limits.

For travelers who want a city map that works even without an internet connection, GPS apps that work offline Completing the kit: you download the region at home and use public Wi-Fi only for what you need a network connection for.

Errors that leave the person disconnected despite having a full signal.

Connection selection. The system may use mobile data when Wi-Fi is unavailable. Check the login prompt before concluding that the network is working; a temporary test without mobile data helps identify which connection the page was accessed through.

Session expired. Many websites allow access for a limited time (half an hour, an hour, the whole day) and then require login again. When browsing suddenly "crashes," open an http:// address again and the screen will return.

The network is full. At 6 PM at a terminal, the signal is saturated. The 2.4 GHz band shows a full signal but doesn't deliver; the 5 GHz band, with fewer people, is usually better.

Common questions

My phone connects, but no websites load. What should I do?

Turn off mobile data, open your browser and type an http:// address without the "s". The portal screen should appear. If it doesn't, forget the network, turn off VPN and private DNS and connect again.

Can I use my bank's app on a public network?

The bank's app encrypts the conversation with the server, so the network itself cannot read the content. The risk lies in the fake network that imitates the official one. If you have mobile data, use it for banking; if not, log in to the portal, turn on the VPN, and only then open the app.

Is there an app that shows your neighbor's Wi-Fi password?

Wi-Fi maps display shared hotspots and information; they should not be used as tools to discover credentials for private networks. Confirm authorization to use the network and request the password from the administrator when necessary.

Why does the network ask me to log in again all the time?

The session may have expired or the portal may be malfunctioning. Changes to the network identifier may also require new access. Check the service rules before changing the private MAC address; preserve this protection whenever the network operates with it.

Confirm the network name with the administrator, connect, and open the authentication portal. If there is an error, check the connection, VPN, and DNS as per the guide.

Read also

• Free internet: apps that show you the nearest public Wi-Fi.
• GPS without internet: how to download maps and navigate with your cell phone
• Removing viruses from your cell phone: step-by-step guide on Android and iPhone.
• iPhone protection: apps, accounts, and settings to review