iCloud Private Relay and Hotel Wi-Fi: Why It Breaks and How to Fix It

Private Relay is great for privacy at home. At a captive portal, it silently blocks the login page.

What iCloud Private Relay does

iCloud Private Relay (available to iCloud+ subscribers) routes your internet traffic through two separate relay servers — one operated by Apple, one by a third-party CDN. Neither relay knows both who you are and what you’re browsing. It also encrypts your DNS queries so your ISP can’t see which sites you visit.

The result: improved privacy on untrusted networks. Exactly the kind of network you’re on at a hotel or airport.


Why it breaks captive portals

Captive portals work by intercepting your unencrypted HTTP traffic and redirecting you to a login page. When Private Relay is active:

Your Mac appears to be connected. The Wi-Fi icon shows full bars. But every request silently fails — the portal never gets a chance to redirect you.

There’s no error message. No indication that Private Relay is the problem. You just sit there watching Safari spin.


How to turn off Private Relay temporarily

On macOS:

  1. System Settings → [Your Name] (Apple ID)
  2. iCloud
  3. Private Relay
  4. Toggle it Off

After turning it off:

Turn Private Relay back on once you’re authenticated — don’t leave it off for your whole stay.


Why you have to disconnect and reconnect

When you join a network with Private Relay active, macOS probes the network using the relay. Once you turn Private Relay off, your Mac may not automatically re-probe the network to detect the captive portal. Disconnecting and reconnecting forces a fresh probe.

Alternatively, use the Force Login Page button in Hotspot Guide’s Diagnose tab, which re-triggers the portal detection probe without requiring you to disconnect.


Does this happen on iOS too?

Yes. iCloud Private Relay has the same effect on iPhone and iPad. If your Mac gets online but your phone is still stuck, check Private Relay in the iPhone’s Settings → [Your Name] → iCloud → Private Relay.


Is there a permanent fix?

The underlying issue is a design conflict: captive portals require network-level traffic interception, and Private Relay is specifically designed to prevent that. There’s no way to have both at the same time.

Your options:

Get Hotspot Guide

Diagnose captive portal issues in seconds — even before you're online. $9.99, one-time purchase.