iCloud Private Relay and Hotel Wi-Fi: Why It Breaks and How to Fix It
Private Relay is great for privacy at home. At a captive portal, it silently blocks the login page.
What iCloud Private Relay does
iCloud Private Relay (available to iCloud+ subscribers) routes your internet traffic through two separate relay servers — one operated by Apple, one by a third-party CDN. Neither relay knows both who you are and what you’re browsing. It also encrypts your DNS queries so your ISP can’t see which sites you visit.
The result: improved privacy on untrusted networks. Exactly the kind of network you’re on at a hotel or airport.
Why it breaks captive portals
Captive portals work by intercepting your unencrypted HTTP traffic and redirecting you to a login page. When Private Relay is active:
- Your DNS queries go to Apple’s encrypted DNS resolver, bypassing the network’s DNS hijacking
- Your HTTP traffic goes to Apple’s proxy servers, encrypted, before reaching the local network
- The router can’t see, intercept, or redirect any of it
Your Mac appears to be connected. The Wi-Fi icon shows full bars. But every request silently fails — the portal never gets a chance to redirect you.
There’s no error message. No indication that Private Relay is the problem. You just sit there watching Safari spin.
How to turn off Private Relay temporarily
On macOS:
- System Settings → [Your Name] (Apple ID)
- iCloud
- Private Relay
- Toggle it Off
After turning it off:
- Disconnect from the Wi-Fi network
- Reconnect
- The login page should now load
Turn Private Relay back on once you’re authenticated — don’t leave it off for your whole stay.
Why you have to disconnect and reconnect
When you join a network with Private Relay active, macOS probes the network using the relay. Once you turn Private Relay off, your Mac may not automatically re-probe the network to detect the captive portal. Disconnecting and reconnecting forces a fresh probe.
Alternatively, use the Force Login Page button in Hotspot Guide’s Diagnose tab, which re-triggers the portal detection probe without requiring you to disconnect.
Does this happen on iOS too?
Yes. iCloud Private Relay has the same effect on iPhone and iPad. If your Mac gets online but your phone is still stuck, check Private Relay in the iPhone’s Settings → [Your Name] → iCloud → Private Relay.
Is there a permanent fix?
The underlying issue is a design conflict: captive portals require network-level traffic interception, and Private Relay is specifically designed to prevent that. There’s no way to have both at the same time.
Your options:
- Turn Private Relay off before connecting to hotel/airport Wi-Fi (and remember to turn it back on)
- Use Hotspot Guide to diagnose and get a one-tap link to turn it off when you forget
- Use your phone as a hotspot to avoid the captive portal entirely (not ideal, but sometimes the fastest option)