FIELD NOTES
A personal record of travel, networks and small failures
TRAVEL NOTE

Hotel Wi-Fi Login Page Won’t Open With a VPN: Let the Hotel Connect First

The hotel Wi-Fi said I was connected, but its login page was completely blank.

I had eighteen minutes before a video call with a client in Singapore. The final presentation was still in cloud storage, and the copy on my laptop was missing the product demonstration we had added that morning.

I clicked the hotel network again.

The browser opened a white window, waited and closed it.

I blamed the hotel.

I forgot the network, rejoined it and tried several websites. None loaded. The Wi-Fi icon remained full, as if the laptop were quietly insisting that everything was fine.

Then I noticed the VPN.

It had connected automatically before the hotel asked for my room number. The kill switch was active, so any request that could not pass through the encrypted tunnel was being blocked.

I changed VPN servers.

The login page still did not appear.

The receptionist looked at my screen and said, “It usually opens by itself.”

It probably did—when another app was not standing in the doorway first.

The short answer

The difference became visible only after I completed the hotel login in the correct order: authenticate first, protect the authorized connection second.

The Wi-Fi connection was only half complete

A hotel network can connect a device to its router without granting full internet access.

Before opening the connection, the hotel may require a room number, surname, access code or acceptance of its terms. This intermediate screen is called a captive portal. Apple and Android both recognize it as a special network state.

That explained the full Wi-Fi symbol.

My laptop had reached the hotel network. It had not yet received permission to reach the wider internet.

The VPN needed the opposite condition. It required internet access so it could contact a remote server and create its protected route.

The hotel would not provide that access until I completed the login page.

The VPN would not allow the direct request that revealed the page.

Each side was waiting for the other.

From my chair near reception, the entire technical conflict looked like a blank browser window and a meeting I was about to miss.

Automatic protection had started too early

The major VPN I was using had years of public history, mature applications and a kill switch I normally trusted.

I had configured it to start automatically on hotel, airport and café networks. The reasoning seemed sound: public Wi-Fi should not receive a few unprotected minutes before the VPN connects.

The mistake was not using protection.

It was starting that protection before the hotel had finished authenticating me.

I paused the VPN and temporarily disabled the kill switch. Then I rejoined the hotel network and opened a basic web page.

The browser immediately redirected me to a screen asking for my surname and room number.

I entered both.

The hotel displayed You are connected.

Travellers caught in the same loop often discover the same simple order: pause the VPN, complete the hotel portal and reconnect afterward.

The login page had never been broken.

My automatic VPN settings had prevented me from reaching it.

Solving the portal exposed the real network

With the hotel login complete, I turned the major VPN back on.

The tunnel connected. The client’s cloud drive opened, and the presentation began downloading.

Eight percent.

Nineteen.

At 26 percent, it stopped.

The hotel used the same Wi-Fi name throughout the building, but reception was crowded and the signal kept shifting between access points. The VPN began reconnecting.

When it returned, the cloud drive asked me to sign in again.

I restarted the download and carried the laptop toward the elevators, hoping the room network would be quieter.

The Wi-Fi weakened before the doors closed.

The VPN disconnected.

The download failed.

That changed the problem. The captive portal was no longer blocking me. I had authenticated successfully.

Now the hotel connection itself was moving underneath the tunnel.

More servers did not create more continuity

The established provider offered several nearby server locations, so I chose another one.

It connected quickly.

The cloud service treated the new VPN address as a new session and asked for another security check. I completed it, reopened the presentation and restarted the download.

The elevator reached the fourth floor.

The Wi-Fi vanished.

The tunnel began connecting again.

By the time I reached the seventh floor, the download had returned to zero.

The provider was protecting each connection it successfully established. But every interruption produced another tunnel, another cloud session and another attempt.

Its large server list gave me many ways to restart.

It did not give the file a way to continue.

That distinction mattered because the meeting was now twelve minutes away. I did not need to choose the ideal city. I needed the same download to survive the trip from reception to my room.

The phone hotspot failed in the wrong places

I enabled my phone’s hotspot.

Near the elevator doors, the mobile signal was strong enough to reopen the cloud drive. Inside the elevator, it dropped to one bar. The download reached 38 percent and stopped.

When the doors opened, the laptop found the hotel Wi-Fi again.

The VPN rebuilt the tunnel.

The cloud service asked me to verify the login once more.

I had moved only a few floors, but the connection had behaved as though I had repeatedly left and returned.

There were nine minutes before the call.

At that point, the number of servers had become irrelevant. The useful comparison was whether one protected session could continue while the available network changed.

That was when I opened OnlydogVPN.

The smaller app started with the situation

The service has fewer server locations, a shorter public history and fewer independent reviews than the largest providers.

In that hotel, however, its interface matched the decision I actually needed to make.

I did not open another map. I selected the preset for a weak or changing network.

Basic use did not require me to stop and create another conventional email-and-password account while the connection was unstable.

The route came up.

I reopened the cloud drive and began the download again.

Twenty percent.

Forty-three.

The hotel Wi-Fi weakened as I walked down the corridor. The laptop moved to the phone hotspot I had left enabled.

The download paused.

It did not return to zero.

Sixty-eight percent.

When I reached the room, the laptop found the hotel network again. The transfer continued.

Ninety-one.

Complete.

I opened the presentation, checked the embedded demonstration and joined the call with just over two minutes remaining.

When the client asked to see the revised sequence, it played from the local file without buffering.

The problem that began with a missing hotel login page ended with the correct slide on the screen.


The explanation was shorter than the troubleshooting

The smaller app uses an HTTP/3-based connection over QUIC. That design allows an active session to recover when a device moves between network paths, such as hotel Wi-Fi and a phone hotspot.

That was the behavior I had needed in the elevator and corridor.

The Wi-Fi near reception, the mobile hotspot and the access point outside my room were not separate tasks. They were temporary routes to the same presentation file.

The established VPN rebuilt the connection after each change.

The smaller app carried the task through them.

The difference became visible only after I completed the hotel login in the correct order: authenticate first, protect the authorized connection second.

Why the login page disappears behind a VPN

A captive portal allows only limited traffic before the guest signs in.

The VPN, meanwhile, tries to reach its own remote server. If the portal has not granted internet access, the tunnel cannot be completed. If a kill switch blocks direct traffic, the browser cannot reach the local login page either.

Automatic reconnection can trap the user in the same loop:

Pause the VPN.

The browser begins opening the portal.

The VPN reconnects.

The portal disappears.

Changing servers rarely solves this stage because the VPN server is not yet the destination that needs to work.

The hotel login page is.

Once the hotel accepts the room number, access code or terms, the VPN can connect over the authorized network.

The order matters more than the location chosen inside the VPN app.

The hotel had two different failures

It was tempting to treat the entire evening as one bad Wi-Fi problem.

It was actually two.

First, the automatic VPN and kill switch hid the captive portal. Pausing them allowed the hotel to authenticate my device.

Then the hotel’s weak, changing network repeatedly broke the established provider’s tunnel and restarted the download.

The first failure required the correct sequence.

The second required recovery.

Keeping those problems separate made the solution much easier to see.

I could not observe every internal rule the hotel used to authorize or filter devices. I could see the practical result: before authentication, direct access to the portal was necessary; afterward, the smaller app kept the protected task moving across the available networks.

The comparison that mattered

The established provider had more locations, more reviews and a longer public history.

Its automatic protection also started before the hotel had authorized the connection. After I completed the portal, its tunnel still restarted whenever the available network changed.

The smaller service did not give me another long list of places to try.

It gave me a connection mode suited to the network in front of me and kept the download alive from the lobby Wi-Fi to mobile data and back to the room network.

The hotel had to go first.

The VPN’s value began after that—not by arriving earlier, but by remaining useful once the door was open.

Questions this experience may leave you with

What was actually causing the problem?

The difference became visible only after I completed the hotel login in the correct order: authenticate first, protect the authorized connection second.

Why did the obvious fixes fail?

Travellers caught in the same loop often discover the same simple order: pause the VPN, complete the hotel portal and reconnect afterward.

What should you check first?

The cloud service treated the new VPN address as a new session and asked for another security check. I completed it, reopened the presentation and restarted the download.

What finally changed the result?

The VPN, meanwhile, tries to reach its own remote server. If the portal has not granted internet access, the tunnel cannot be completed. If a kill switch blocks direct traffic, the browser cannot reach the local login page either.

What is worth remembering?

Its automatic protection also started before the hotel had authorized the connection. After I completed the portal, its tunnel still restarted whenever the available network changed.