What is Passpoint (Hotspot 2.0)?

Definition

Passpoint, also called Hotspot 2.0, is a WiFi Alliance standard that lets a device discover, authenticate to, and encrypt a connection with a public network automatically, with no SSID selection and no captive portal. Credentials are provisioned once, then the device joins participating networks the way a phone joins a mobile network.

How it differs from a captive portal

A captive portal is an interruption by design: connect, wait, read, tap, then browse. Passpoint removes the interruption. The device queries nearby networks before associating, learns which identity providers they accept, matches that against credentials it already holds, and joins with enterprise-grade encryption automatically. The guest sees connected WiFi and nothing else. That is a materially better experience, and it is the reason large venues, transport hubs and carrier offload programmes have adopted it.

What a venue gives up

The trade-off is direct. No portal means no splash screen, no email capture, no consent moment, and no branded surface. Identity lives with the credential issuer, typically a carrier or a roaming federation, not with the venue. For a venue whose goal is a guest marketing list, Passpoint alone delivers none of it. For a venue whose goal is frictionless connectivity at scale, that is exactly the point. The two models answer different questions and are not really competitors.

Running both

The common pattern in larger venues is a Passpoint-enabled SSID for seamless roaming alongside a conventional portal SSID for guests without credentials. Returning guests get instant access, first-time guests go through the portal, and the venue still builds a list from the population that has no roaming credential. It requires more configuration and a certificate infrastructure, so it is generally worth it for airports, stadiums, hotel groups and large retail estates rather than a single independent venue.

More in Networking