Technical WiFi guides
Deep, expert-led technical guides on guest WiFi, analytics, captive portals, and venue technology.
Ready to move from research to rollout? See how Purple's captive portal software handles branded guest sign-in, analytics, and compliance in one platform.
Browse by topic
Start with the pillar guide for your project, then use the step-by-step guides below for the detail.
Guest WiFi guide
The master hub: deployment models, sign-in methods and compatibility with Cisco Meraki, HPE Aruba and Ruckus.
Captive portal guide
How captive portals authenticate guests, from click-through and social login to SMS and vouchers.
Enterprise WiFi security guide
WPA3 Enterprise, EAP-TLS, iPSK and PEAP compared, with where each one fits.
Multi-tenant WiFi guide
Per-resident networks for apartments, student housing and coworking, with iPSK and VLAN segmentation.
WiFi analytics guide
Measure footfall, dwell time and return visits from the access points you already run.
WiFi marketing guide
Turn guest WiFi sign-ins into consented first-party data for email, SMS and CRM campaigns.
481 guides

Using Packet Capture (PCAP) to Diagnose Slow WiFi Performance
This technical reference guide provides IT managers, network architects, and venue operations directors with a structured, packet-level methodology to diagnose and resolve slow enterprise WiFi performance using Packet Capture (PCAP) analysis. By dissecting raw 802.11 frames — including retransmission rates, airtime utilisation, and physical layer metadata — teams can isolate RF-layer bottlenecks from wired or application issues with precision. Applicable across high-density venues including hotels, retail chains, stadiums, and conference centres, this guide delivers actionable diagnostic workflows, real-world case studies, and configuration remediation steps to reclaim network capacity and protect guest experience.

Troubleshooting 802.1X Authentication Failures (RADIUS/EAP)
Step-by-step diagnostic guide for resolving 802.1X, EAP-TLS, PEAP, and RADIUS authentication errors on enterprise WiFi networks.

A Step-by-Step Guide to Diagnosing WiFi Roaming Issues
This comprehensive guide provides enterprise IT leaders and network architects with an authoritative, step-by-step methodology for diagnosing and resolving WiFi roaming issues. By combining technical deep-dives into IEEE 802.11k/v/r standards with real-world case studies and packet-level analysis, this reference equips teams to eliminate the 'sticky client' problem and deliver seamless mobile connectivity. It covers the full diagnostic workflow from RF site surveys and controller configuration audits through to over-the-air packet capture analysis and post-remediation validation.

How to Implement Time and Bandwidth Restrictions on Guest WiFi
An authoritative technical reference guide on implementing time and bandwidth restrictions on enterprise guest WiFi networks. This guide provides actionable architectural blueprints, vendor-neutral configurations, and real-world case studies to help IT leaders balance network performance, security compliance, and visitor experience.

Monetising Guest WiFi Through Data Analytics and Splash Pages
This authoritative guide provides IT managers, network architects, and CTOs with a comprehensive technical framework for transforming guest WiFi from a cost centre into a high-yield first-party data asset. It outlines network architecture, data analytics integration, captive portal optimisation, and global compliance strategies to drive measurable venue revenue.

Legal Liabilities and Content Filtering on Public Guest Networks
This guide provides IT managers, network architects, and CTOs with a definitive technical and legal framework for deploying content filtering on public guest WiFi networks. It covers the regulatory obligations under GDPR, the UK Online Safety Act 2023, and PCI DSS, alongside a multi-layered architecture for DNS filtering, captive portal authentication, application-layer firewalling, and VLAN segmentation. Venue operators in hospitality, retail, healthcare, and transport will find actionable implementation steps, real-world case studies, and decision frameworks to build a legally defensible, high-performance guest network.

Bandwidth Management and Quality of Service (QoS) in Co-Working Spaces
An authoritative technical reference guide for IT managers, network architects, and venue operations directors on implementing robust Bandwidth Management and Quality of Service (QoS) frameworks in co-working environments. This guide details network segmentation, traffic prioritisation, vendor-neutral configurations, and real-world ROI metrics to deliver enterprise-grade connectivity. It covers IEEE 802.11e/WMM standards, VLAN design, per-user rate limiting, and troubleshooting strategies with measurable business outcomes.

VLAN Segmentation Best Practices for Multi-Tenant Environments
This guide provides IT managers, network architects, CTOs, and venue operations directors with an authoritative, vendor-neutral blueprint for implementing VLAN segmentation in multi-tenant WiFi environments. It covers the IEEE 802.1Q standard, Dynamic VLAN Assignment via 802.1X and RADIUS, and step-by-step deployment guidance for hospitality, retail, stadium, and public-sector venues. Proper VLAN segmentation is the foundational control for PCI DSS and GDPR compliance, lateral movement prevention, and delivering high-performance wireless connectivity across shared physical infrastructure.

Dynamic Pre-Shared Keys (DPSK) for Multi-Tenant Security
This authoritative technical reference guide explores Dynamic Pre-Shared Keys (DPSK) as a high-security, low-friction alternative to 802.1X for multi-tenant WiFi environments. It details the underlying architecture, vendor implementations, dynamic VLAN steering, and API-driven lifecycle automation. IT managers and network architects will find actionable guidance on deploying DPSK to achieve robust tenant isolation, regulatory compliance, and seamless device onboarding.

Why your captive portal is not loading on iPhone: Fix Apple CNA errors
Troubleshoot and fix captive portal popup failures on iPhone and iOS. Learn how Apple CNA, iCloud Private Relay, and MAC randomisation break WiFi logins, and how to fix them.

Custom Captive Portal: HTML and CSS Guide
This authoritative technical reference guide outlines the development standards, CSS architecture, and network-level constraints required to design and code a custom captive portal landing page. It provides frontend developers and network architects with actionable strategies to navigate Apple CNA and Android webview environments, ensuring pixel-perfect, compliant, and highly performant guest WiFi experiences.

Captive Portal Authentication Methods Compared
This authoritative technical reference guide evaluates the architectural, operational, and compliance trade-offs of five core captive portal authentication methods. It provides network architects, IT directors, and marketing managers with the quantitative data and decision frameworks required to balance guest onboarding friction with data-collection requirements across enterprise venues.

Captive Portal vs Splash Page
This authoritative guide breaks down the critical distinction between captive portals and splash pages in guest WiFi networks. It clarifies how the underlying network interception mechanism works in tandem with the visual guest interface, helping IT leaders and venue operators make informed architectural and procurement decisions.

Managing BYOD (Bring Your Own Device) Security on Staff Networks
An authoritative, technical reference guide for enterprise IT managers and network architects on securing Bring Your Own Device (BYOD) access on staff networks. This guide outlines the exact network architecture, authentication protocols, and MDM integration workflows required to mitigate data leakages and maintain regulatory compliance across high-footfall venues.

Captive portal login troubleshooting and fixes
Troubleshoot captive portal login failures step by step. Fix CNA popup suppression, HSTS certificate errors, NeverSSL probes, and RADIUS timeout issues.

How to Implement 802.1X Authentication with Cloud RADIUS
This technical reference guide provides a comprehensive framework for implementing 802.1X authentication with Cloud RADIUS across distributed enterprise estates. It details the architecture, EAP method selection, deployment sequencing, and risk mitigation strategies required to secure network access while eliminating the operational overhead of on-premises infrastructure.

What is Cloud RADIUS? A Comprehensive Guide to RADIUS as a Service
This comprehensive guide explores Cloud RADIUS (RADIUS as a Service), detailing its architecture, EAP methods, and implementation strategies. It provides IT leaders with actionable insights on migrating from on-premises servers to a scalable, secure, and compliant cloud-based authentication model.

Migrating from On-Premises RADIUS (NPS) to RADIUS as a Service
This authoritative guide details the technical architecture, implementation methodology, and business impact of migrating from on-premises Microsoft Network Policy Server (NPS) to a cloud-native RADIUS as a Service model. It provides IT leaders and network architects with practical frameworks to reduce operational overhead, eliminate single points of failure, and secure enterprise authentication across distributed venues.

Understanding RSSI and Signal Strength for Optimal Channel Planning
This guide provides a comprehensive technical deep-dive into RSSI, Signal-to-Noise Ratio (SNR), and RF propagation principles for optimal channel planning. It equips IT managers, network architects, and venue operations directors with actionable strategies to mitigate Co-Channel and Adjacent Channel Interference, optimise AP placement, and leverage analytics for measurable business impact across hospitality, retail, and public-sector environments.

Privacy by Design: Anonymising WiFi Data for GDPR Compliance
This authoritative guide details the technical architecture and implementation strategies for anonymising WiFi data to ensure GDPR compliance. It provides IT leaders and network architects with actionable frameworks for balancing robust venue analytics with strict data privacy requirements.

20MHz vs 40MHz vs 80MHz: Which Channel Width Should You Use?
This guide provides a definitive, vendor-neutral technical reference for IT managers, network architects, and venue operations directors on selecting the correct WiFi channel width - 20MHz, 40MHz, or 80MHz - across enterprise deployments in hospitality, retail, events, and public-sector environments. It covers the underlying IEEE 802.11 mechanics, real-world capacity trade-offs, and step-by-step deployment guidance to help teams make the right call this quarter. Understanding channel width selection is one of the highest-leverage decisions in any wireless LAN design, directly impacting throughput, interference, client density support, and the reliability of guest-facing services.

What is a WLC (Wireless LAN Controller) and Do You Still Need One?
This comprehensive guide explores the evolution of Wireless LAN Controllers (WLCs) and provides a technical framework for determining the right architecture in 2026. It covers traditional hardware, cloud-managed, and controller-less models, detailing their impact on compliance, scalability, and guest experience.

Power over Ethernet (PoE) for Access Points: An Implementation Guide
This guide provides infrastructure technicians, network architects, and IT decision-makers with a definitive technical reference for deploying Power over Ethernet (PoE) access points across enterprise venues including hotels, retail estates, stadiums, and public-sector facilities. It covers IEEE standards from 802.3af through 802.3bt, power budget calculation, cabling requirements, VLAN segmentation, and security compliance, with concrete implementation scenarios and measurable ROI benchmarks. Understanding PoE architecture is foundational to any [Guest WiFi](/guest-wifi) or [WiFi Analytics](/guest-wifi-marketing-analytics-platform) deployment, as the reliability of the physical layer directly determines the quality of data capture, user experience, and operational uptime.

Mesh Network vs Access Points: Which is Better for Large Venues?
This technical guide provides a definitive comparison between mesh networks and traditional wired access points for large-scale venues, covering architecture, performance trade-offs, and deployment strategy. It equips IT managers, network architects, and CTOs with actionable frameworks to design high-performance, compliant WiFi infrastructures for hospitality, retail, events, and public-sector environments. The guide also maps these architectural decisions to Purple's hardware-agnostic guest WiFi and analytics platform, demonstrating how the right infrastructure choice drives measurable business outcomes.
Got questions about your specific setup?
Our team works with venue operators, IT managers, and network engineers across 80,000 venues. Book a 20-minute call and we will show you how others like you solved it.