Skip to main content
WiFi for PBSA and university halls

A private network for every resident, on one shared building network

Private Area Networks give each student their own isolated bubble for every device they bring, from laptop to PlayStation. Move-in runs itself, move-out revokes itself, and it all layers on the access points already in your buildings.

  • A Private Area Network per resident
  • Consoles and smart TVs on their own key
  • Cloud RADIUS with a 99.9% uptime SLA
  • No rip and replace
Students unpacking and connecting laptops, phones and a games console in a shared kitchen at a student residence
Private Area Network activeLaptop, phone, console and TV in one bubble
Move-in dayConnected in about 60 seconds, no helpdesk ticket
Runs on the access points already in your buildingsCisco MerakiHPE ArubaRuckusJuniper MistUbiquiti UniFiCambiumExtremeFortinet
The gap

Residents expect the WiFi they had at home. Most halls give them a flat network.

A student arrives with a laptop, a phone, a console, a smart TV and a speaker, and expects them all to work together the way they did at home. On a shared building network that means every one of those devices is visible to hundreds of strangers, and the helpdesk inherits the problem in September.

A typical residence today

  • One building passphrase, shared on a flat network every resident can see across
  • Consoles and smart TVs that need a MAC address emailed to the helpdesk
  • AirPlay and casting that find every TV on the floor, or none at all
  • Former residents whose devices still connect after the tenancy ends

With Purple

  • Each resident gets their own Private Area Network, invisible to their neighbours
  • Browserless devices join the resident's bubble with their own iPSK, no ticket needed
  • mDNS reflection keeps casting working inside the bubble, and only inside it
  • Access is revoked one resident at a time, synced to a live directory
One platform, four networks

Residents, intake, staff and visitors, each on the right network

Four populations that usually mean four tools and four sets of credentials, run from a single pane of glass on the hardware you already own.

Residents

The at-home experience, with enterprise isolation

Purple creates a Private Area Network for each resident the moment they sign in. Their phone, laptop, console and smart TV can find and talk to each other, and stay invisible to everyone else in the building, all on a single SSID with the 802.1X and WPA3-Enterprise architecture intact.

  • Micro-segmentation per resident: the student in Room 101 never sees the devices in Room 102
  • The bubble follows the resident from their flat to the study room, gym and between your sites
  • mDNS reflection keeps AirPlay, Chromecast and printing working inside the bubble
  • Each resident's key can carry its own VLAN, firewall rules and bandwidth role

Unlike a VLAN per room, a Private Area Network is created per person at sign-in, so it moves with the resident instead of being pre-provisioned against a door number.

Explore multi-tenant WiFi
A student in their en-suite room casting from a phone to a smart TV while a games console sits under the screenPrivate Area Networks
Intake and move-out

Hundreds of arrivals on one weekend, and no queue at reception

Intake is the hardest week of the year for any residence network. Residents sign in once through the Purple app, get a personal WiFi Pass, and every device they own reconnects automatically from then on. Onboarding and offboarding sync to a live directory, so access starts with the tenancy and ends with it.

  • Phones and laptops onboarded in about 60 seconds with the Purple app
  • Passpoint profiles reconnect automatically and survive iOS MAC address rotation
  • Joiners, movers and leavers handled without manual credential management
  • University halls can sync residents from Microsoft Entra ID, Google Workspace or Okta over SCIM
Explore Passpoint
Students arriving at a residence with boxes and suitcases on move-in day, one checking a phone as it connectsIntake
Staff and building systems

Keep site teams and building devices off the resident network

Reception, maintenance and cleaning teams need their own secure access, and so does the kit that runs the building: door controllers, cameras, laundry systems and sensors. Staff sign in with their work account, and every device that cannot sign in gets a private key and VLAN of its own.

  • Staff sign in with Microsoft Entra ID, Okta or Google Workspace, and leavers are revoked when their account is disabled
  • Door controllers, cameras and sensors each on their own xPSK key, revocable one at a time
  • Time-limited keys for contractors, with no device management needed
  • Every session logged against a named person or device, time and location
Explore staff WiFi
A residence maintenance technician checking a networked door controller in a corridor with a tabletStaff and devices
Visitors and lettings

Guest WiFi that helps fill next year's rooms

Parents at move-in, prospective residents on a viewing and summer guests all need to get online, and every one of them is a lead for next year's lettings. Purple gives them a branded captive portal, separate from resident networks, with the questions your lettings team wants answered. Kexgill in Hull asks visitors whether they study at the University of Hull and sends lettings offers by SMS through a Twilio connector.

  • Branded captive portal with UK GDPR consent and a full audit trail
  • Custom questions at sign-in, such as university or year of study, sent to your CRM
  • 400+ data connectors for CRM, SMS and marketing platforms
  • DNS content filtering on the guest network, IWF and Friendly WiFi certified
Explore guest WiFi
A residence ambassador showing a parent and a prospective student around a bright common room on a viewing dayVisitors
Shared passphrase versus Private Area Networks

What residence WiFi looks like built the usual way, and with Purple

Most residence networks are a passphrase on a flat network or a VLAN per room. Here is what changes when every resident gets their own bubble.

What you need
The usual way
With Purple
Resident isolation
A flat network, or a VLAN pre-provisioned per room
A Private Area Network per resident, created at sign-in on one SSID
Consoles and smart TVs
MAC addresses registered by hand through the helpdesk
A unique iPSK from the Purple app, joined to the resident's bubble
Casting and discovery
AirPlay finds every TV in the building
mDNS reflection keeps discovery inside the bubble
Move-out
Change the passphrase for everyone, or leave it
Revoke one resident's key with no impact on anyone else
RADIUS
Servers on site to buy, patch and back up
Cloud RADIUS with a 99.9% uptime SLA and UK, EU and US regions
Hardware
Tied to one vendor's licence for per-user keys
Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi and more
A residence operations manager and an IT lead reviewing a calm network dashboard in a quiet office
Built for residence IT and operations

Intake without the ticket queue

In one US university housing deployment across 40 buildings, moving students onto per-resident iPSK bubbles with self-service sign-in cut move-in helpdesk tickets by 60%. Across Purple, removing shared passwords reduces IT helpdesk requests by up to 80%.

60%
fewer helpdesk tickets at move-in, across 40 university housing buildings
60s
to onboard a resident's phone or laptop with the Purple app
99.9%
RADIUS uptime SLA, with UK, EU and US regions
0
data breaches since 2012. ISO 27001 certified.

Figures from a Purple partner deployment in US university housing, Purple platform data and service terms.

Cover of the Purple Student accommodation WiFi brochure

Free brochure

Take this page into your next budget meeting

Everything on this page as an eight-page PDF brochure, ready to share with the people who sign off your network spend.

Get the brochure

Your name and email is all we need. The download appears straight away.

How it works

Live before the next intake, on the hardware you have

  1. 1

    Point your access points at Purple

    We configure cloud RADIUS and the resident, staff, device and visitor networks on the access points already in your buildings.

  2. 2

    Connect your residents and staff

    Link the directory your residents and staff live in, so access starts and ends with each tenancy or contract.

  3. 3

    Roll out building by building

    Our onboarding team switches on one block or site at a time, ideally in the summer window before intake.

Talk to our student housing team

See your residences on one network platform

Tell us about your buildings and bed numbers, and we will show you how Private Area Networks, staff and device access and visitor WiFi would run on your hardware.

  • Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
  • Per-resident iPSK under your vendor's name: iPSK, DPSK, MPSK or PPSK
  • ISO 27001 certified, UK GDPR compliant, UK RADIUS region

Book a student housing demo

A 30-minute call with someone who knows residence networks.

Student accommodation WiFi questions, answered

What PBSA operators and university residence teams ask us most

Do we need to replace our access points?

No. Purple is hardware agnostic and layers on top of your existing infrastructure, including Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. There is no on-premise RADIUS server to install.

How is a Private Area Network different from a VLAN per room?

A VLAN per room is static: it is pre-provisioned, tied to a place rather than a person and does not follow the resident. A Private Area Network is created per resident at sign-in, applies wherever they connect in your buildings and runs on a single SSID.

How do games consoles and smart TVs connect?

Devices without a browser join with a unique iPSK the resident gets from the Purple app. The device lands inside that resident's own bubble, so their console, TV and speaker work together without being visible to anyone else.

What happens when a resident moves out?

Onboarding and offboarding sync to a live directory, so access ends with the tenancy. You revoke one resident's key without changing anything for the other residents in the building.

Can one resident use up all the bandwidth?

Each resident's key can carry its own VLAN, firewall rules and bandwidth role, so you set fair limits per person. Overall capacity still depends on your internet line and access point design, which Purple layers on top of rather than replaces.

Can staff and building systems share the same infrastructure?

Yes, on separate networks. Staff sign in with Microsoft Entra ID, Okta or Google Workspace, and door controllers, cameras and sensors each get their own xPSK key and VLAN, isolated from residents.

Where is our data held?

Purple has RADIUS regions in the UK, EU and US, is ISO 27001 certified, UK GDPR and CCPA compliant, and has had zero data breaches since 2012.

Recommended solution for Student accommodation

WiFi for IT & network teams. Cloud Captive Portals, RADIUS, and analytics layered on top of Cisco, Aruba, Juniper Mist, Meraki, and Ubiquiti.

See WiFi for IT & network teams →

Speak to an expert

Tell us about your venues and we'll show you how Purple fits.