Marina WiFi providers: slip holders, visiting boats and seasonal capacity

Choose a marina WiFi provider that runs three separate networks on one estate. Berth holders get a private key each, visiting crews get an open sign-in network and staff get a secured network. Then insist on an outdoor survey with docks full, a written summer capacity figure, same-day revocation and consented visitor data.

Which marina WiFi provider should you choose?

A marina serves three groups whose needs pull in opposite directions. Long-term berth holders treat the dock as home. They expect their smart TV, laptop and boat monitoring kit to connect once and stay connected. Visiting crews arrive for one or two nights. They want to be online within a minute of tying up, without a phone call to the marina office. Your staff need a locked-down network for the marina office, fuel dock, ship store registers and CCTV.

Most marina WiFi providers handle one of these groups well. Few handle all three on the same access points. The provider you choose should run separate networks for each group, cover docks and boatyard to an agreed standard, and scale for summer without a year-round bill. Use the matrix below to match your situation to what you ask for.

Your situation	What to ask the provider for	Why it matters
Berth holders share one password printed in the marina office	A private key per slip, revocable individually	Changing a shared password disconnects every holder at once
Liveaboards complain that smart TVs cannot get online	A pre-shared key network, not a captive portal, for berth holders	TVs and boat monitoring devices cannot complete a web sign-in page
Visiting crews queue at the office for the password	An open guest network with a captive portal sign-in	Crews connect from the boat, and you capture consented contact details
Card terminals in the ship store share the guest network	A separate staff and payment network	PCI-DSS uses network segmentation to reduce what falls in scope
Coverage collapses at regatta weekends	A contracted peak capacity figure and event uplift	Summer device counts can be several times the winter figure
You want visiting crews to come back	Consented opt-ins feeding a marketing list	Visitor sign-ins become a return-visit audience

Where marina WiFi providers genuinely differ

Every provider will promise coverage and speed. The real differences sit in five areas: separation, outdoor coverage, peak capacity, slip-level access control and what happens to visitor data.

How should berth holders and visiting crews be kept on separate networks?

Run at least three logical networks, each mapped to its own VLAN (virtual LAN, a way of splitting one physical network into isolated segments). Slip holders, visiting crews and staff should never see each other's traffic or devices.

The harder question is how slip holders authenticate. A captive portal (the web page that appears before you get online) suits visiting crews. It fails for slip holders, because smart TVs, gaming consoles and onboard monitoring units cannot fill in a web form. Slip holders need a pre-shared key network instead.

A single shared key is the wrong answer. Use an identity pre-shared key (iPSK): every slip holder gets their own passphrase on the same network name. Hardware vendors use different labels for the idea, including iPSK, PPSK (private pre-shared key) and DPSK, but the principle is the same. Each key maps to one slip holder. You can revoke it without touching anyone else.

Purple's Identity-Based Networks go one step further with a private network bubble. A slip holder's own devices can find each other, so a cell phone can cast to the TV aboard. They cannot see the boat on the next slip. That is the at-home experience with enterprise security that liveaboards expect.

Approach for slip holders	Smart TVs and onboard kit	Revocation when a slip changes hands	Isolation between boats	Suits
One shared password	Connects	Change password, re-issue to every holder	None by default	Very small marinas only, short term
Captive portal sign-in	Fails on devices without a browser	Expire the login per device	Client isolation possible, no device discovery	Visiting crews, not slip holders
Private key per slip (iPSK)	Connects	Revoke one key; other holders unaffected	Private network bubble per slip	Annual and seasonal slip holders
IEEE 802.1X with RADIUS	Fails on many consumer devices	Disable one account	Per-account policy	Staff on managed devices

IEEE 802.1X is the standard for port-based network access control. It checks each person's credentials against a RADIUS server (a central authentication service) before letting a device on. It suits staff on managed laptops and tablets. Tie it to your identity provider, such as Microsoft Entra ID, Okta or Google Workspace, so a dockmaster who leaves loses WiFi when their account is disabled.

For visiting crews, an open network with a captive portal remains the fastest sign-in. Ask whether the provider supports OWE (Opportunistic Wireless Encryption, defined in RFC 8110). It encrypts traffic on an open network without a password. Ask too whether they support OpenRoaming, which lets returning crews connect automatically from a trusted identity.

What coverage questions matter on docks and in the boatyard?

Pontoon WiFi is outdoor WiFi with unusual physics. Water reflects radio signals. Aluminum masts block them. Steel and aluminum hulls shield anyone sitting in the cabin. On tidal sites, a floating pontoon moves relative to any access point fixed to the harbor wall.

Ask every provider these questions:

• When will you survey? A survey in February, with half the slips empty and no visiting masts, understates the obstruction. Insist on a survey, or a validation walk, with the marina near summer occupancy.
• Where will access points be mounted? Service pedestals, light columns and pontoon posts each give a different height and line of sight. Ask for the mounting plan per pontoon, not a heat map of the whole site.
• What enclosure rating is the hardware? Salt spray corrodes connectors. Ask for the IP rating under IEC 60529 and for marine-grade fixings.
• How does each pontoon get backhaul and power? Ethernet over copper is limited to 328 feet (100 meters) per run under IEEE 802.3. Long pontoons may need fiber or point-to-point wireless bridges.
• Which 5 GHz channels are allowed outdoors? In the US, the FCC sets which bands are license-exempt outdoors under FCC Part 15 regulations. The provider should design to those rules, not to an indoor plan.
• Is the boatyard in scope? Boats on stands, metal sheds and workshop staff create different coverage needs from the pontoons.

Coverage should be written into the contract per area: each pontoon, the fuel dock, the boatyard, the harbor office, and any bar, restaurant or hotel on site.

How much capacity do you need when summer peaks arrive?

Capacity planning starts with devices, not boats. Estimate crew per visiting boat, devices per person and the share connected at the evening peak. Do the same for slip holders aboard. Ask each provider to state the concurrent device figure they have designed for, per pontoon and site-wide.

Newer access points help. IEEE 802.11ax (WiFi 6) improves performance when many devices share the air. Still, newer radios do not replace a written capacity figure. Ask also how bandwidth is shared. A per-device or per-network rate limit stops one crew streaming in 4K from slowing the pontoon for everyone else.

How should access be issued and revoked as slips change hands?

Treat slip holders the way IT treats staff: joiners, movers and leavers. A joiner signs a slip agreement and receives a key. A mover changes slip or sells to a new owner on the same slip. A leaver's agreement ends.

Each event should trigger a WiFi action on the same day. Ask the provider who issues keys, how long it takes and whether the harbor office can do it without a support ticket. Ask whether a key can carry an expiration date matching the slip agreement. Ask whether they can take a feed from your marina management system. If they cannot, the harbor office should issue and revoke keys from a single dashboard.

Seasonal and short-term leases need keys with fixed end dates. Visitor slips should never receive a slip holder key. They belong on the guest network.

How do visitor sign-ins become a list for return visits?

Visiting crews are your best prospects for next season. A captive portal can ask for an email address and, separately, for permission to market. Under the TCPA and CAN-SPAM, marketing email needs a clear, freely given opt-in. Regulations confirm that pre-checked boxes do not count as consent.

Purple uses conscious-choice opt-ins, so WiFi access never depends on agreeing to marketing. On the Engage plan, consented visitors form a first-party data list you can segment by visit date, length of stay, and repeat visits. The WiFi Analytics dashboard shows how many crews come back. Purple is ISO 27001 certified and CCPA/CPRA compliant, which matters when a provider holds your visitor data.

Keep slip holder records out of the marketing list unless they opt in separately. They are already in your marina management system and expect a different relationship.

Where each option fits

Two worked scenarios show how the questions above translate into decisions. The venues are illustrative; the figures follow from each venue's own numbers.

Worked scenario 1: a marina with a hotel and restaurant

Situation. Consider a 250-slip marina with a 60-room hotel and a waterfront restaurant. It has 210 annual slip holders and 40 visitor slips. Slip holders share one password, changed once a year at renewal. Owners who sold their boats in spring kept access until the following January. Liveaboards' smart TVs could not join the hotel's captive portal, so they asked for the staff password instead.

What was done. The marina moved to three networks on its existing access points. Each slip holder received a private key with an expiration matching their lease agreement, inside their own private network bubble. Hotel guests and visiting crews shared one branded Guest WiFi network with a captive portal and conscious-choice opt-ins. Staff moved to IEEE 802.1X tied to Microsoft Entra ID, with card terminals on a separate segment.

Outcome. The annual password change, which disconnected 210 slip holders at once, stopped entirely. A leaver now loses access on the day their agreement ends, instead of up to 12 months later. The other 209 keys are unaffected. Staff credentials stopped circulating on the docks, because slip holders no longer needed them. The same guest network serves the hotels side and the marina, so one consented list covers both.

Worked scenario 2: regatta week at a 400-slip marina

Situation. Consider a 400-slip marina with 320 annual holders and 80 visitor slips. During regatta week, visiting boats raft three deep, so 80 visitor slips hold 240 boats. The marina assumes four crew per boat and two devices each, giving 1,920 visiting devices. It assumes 60% connect at the evening peak: 1,152 devices. It assumes half of slip holders are aboard with three devices each: 480 more. The planning figure is roughly 1,630 concurrent devices.

What was done. The marina wrote 1,700 concurrent devices into the contract for the five event days. Temporary access points went onto the two visitor docks, with removal agreed for the week after. The event ran its own captive portal page with the regatta's branding, the same pattern used in event venue WiFi providers: per-event captive portals, exhibitor access and attendee reporting. Slip holders kept their private keys, so the event load never touched their sign-in.

Outcome. The marina paid for peak capacity for five days, not 52 weeks. The event portal produced a separate consented list of regatta crews, ready for next year's early-booking campaign. Capacity was tested against a figure the provider had signed, not a verbal promise.

What each one costs to run

Running cost on a marina comes from five places. Provider quotes often show only the first two.

Cost item	Shared password with captive portal	Identity-based: per-slip keys, guest portal and staff 802.1X
Outdoor access points and mounts	Same hardware	Same hardware; hardware-agnostic platforms reuse existing kit
Licensing	Guest portal license	Guest, slip holder and staff network licenses
Harbor office time when a slip changes hands	Change password, reprint notices, answer calls from every holder	Revoke one key, issue one key
Security exposure	Former holders and anyone shown the password stay connected	Access ends with the lease agreement
Marketing return	Little or no consented data	Consented visitor list for return-visit campaigns

Hardware is often the largest single cost, so ask whether the provider needs new access points at all. Purple runs as a cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. If your outdoor estate is sound, you change the software layer, not the hardware. Why your next WiFi upgrade doesn't need new hardware sets out the reasoning.

The hidden cost is staff time. Every shared-password change becomes a day of phone calls and dock visits. Individual keys move that work to a single action per slip.

What should the contract say about seasonal peaks?

Write the summer into the contract, not into an email. A good marina WiFi contract names:

• The peak period by date. For example, the start of May to the end of September, plus named event weeks.
• A concurrent device figure for peak and off-peak. Per dock and site-wide, so you can test it.
• Event uplift. Temporary access points, who installs and removes them, and the notice period you must give.
• Support hours that match the season. Weekend and evening coverage in summer, when visiting crews arrive and the marina office is busiest.
• Fault response times per area. A dead access point on the visitor dock in August matters more than one in the boatyard in January.
• Flexibility to scale down. Whether licenses or temporary hardware reduce outside the season.
• Data terms. Who controls visitor data, where it is processed and how consent records are kept under CCPA/CPRA.

If a provider will not put a capacity figure in writing, treat that as your answer.

How to decide for your property

Shortlist two or three marina WiFi providers. Send each the same written questions and score the answers side by side.

1. Can you run slip holder, visiting crew and staff networks on separate VLANs on our access points?
2. Do slip holders get an individual key, and can one key be revoked without affecting others?
3. Can each slip holder's devices see each other but not neighboring boats?
4. Can the marina office issue and revoke keys itself, with an expiration matching the slip agreement?
5. When and how will you survey the docks, and at what occupancy?
6. What concurrent device figure will you commit to in summer, per dock and site-wide?
7. How do you handle event weeks, and what does the uplift cost?
8. How do visitor sign-ins capture marketing consent under the TCPA and CAN-SPAM?
9. Which hardware vendors do you support, and do we need to replace any access points?
10. Which security certifications do you hold?

Purple runs across 80,000+ live venues in over 90 countries and handles 500 million users and logins a year. The questions above are the same ones we answer for hospitality, retail and transportation properties. A marina adds water, tides and a summer that triples your device count.

Frequently asked questions

Will Purple work with the access points already on our docks?

Yes, Purple runs on your existing outdoor access points if they come from a supported vendor. Purple works as a cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. You keep the hardware and change the software layer that controls sign-in, keys and data. If a survey shows coverage gaps, you add access points from the same vendor rather than replacing the property.

How is Purple licensed for a marina?

Purple quotes on the plan you choose, Connect, Capture or Engage, plus any security add-ons such as SecurePass, Verify or Shield. Connect covers access, Capture adds data capture at sign-in, and Engage adds marketing to consented visitors. A marina wanting private slip holder keys and a return-visit list typically looks at Engage. Ask for a quote naming your slip count, sites and peak season so seasonal needs are priced from the start.

How do we move slip holders off a shared password without a flood of complaints?

Run the new key-based network alongside the old shared password for a fixed changeover window. Issue each slip holder an individual key with clear joining instructions, then switch the shared password off on a date you announce in advance. Liveaboards with smart TVs and onboard monitoring rejoin once with their new key. After the switch, you never need to change a password for everyone again.

Is guest WiFi sign-in data CCPA/CPRA compliant?

Yes, provided marketing consent is separate from WiFi access and never pre-checked. Purple uses conscious-choice opt-ins, so a visiting crew can get online without agreeing to marketing. Under the TCPA and CAN-SPAM, marketing email needs a clear opt-in, and regulatory guidelines rule out pre-checked boxes. Purple is ISO 27001 certified and CCPA/CPRA compliant, and you control how long visitor data is kept.

Why not use our broadband provider's router WiFi on the docks?

Because a broadband router gives you one shared network, not three separated ones. It cannot issue a private key per slip, revoke one holder without affecting the rest, or capture consented visitor data. Indoor routers also lack the outdoor ratings and mounting needed for salt spray and dock posts. Keep the broadband line as backhaul and run a managed outdoor network with identity-based access on top of it.

How long does a marina WiFi deployment take?

It depends mainly on whether your existing access points stay. If the outdoor estate is sound, moving to per-slip keys, a guest portal and a staff network is a configuration change, not a building project. New dock access points add survey, cabling, power and marine-grade mounting time. Plan installation for the off-season and validate coverage once slips fill in spring, before the first busy summer weekend.

Can slip holders use smart TVs and boat monitoring devices?

Yes, because slip holders join with their own pre-shared key rather than a captive portal. Smart TVs, gaming consoles and onboard monitoring units can enter a WiFi passphrase but cannot complete a web sign-in page. With Purple's Identity-Based Networks, each slip holder's devices sit in their own private network bubble. A cell phone can cast to the TV aboard, but nobody on the next boat can see either device.