Passpoint, also known as Hotspot 2.0, is a Wi-Fi Alliance certification based on IEEE 802.11u that lets devices discover, securely authenticate to, and roam between participating WiFi networks automatically, with no captive portal or manual sign-in.
Passpoint, also called Hotspot 2.0, is a Wi-Fi Alliance certification that lets devices join participating WiFi networks automatically and securely, with no captive portal, password entry, or network picking. A device carrying a Passpoint profile recognises a compatible network, authenticates silently, and connects with full over-the-air encryption - the WiFi equivalent of a phone roaming onto a partner mobile network.
Passpoint is built on IEEE 802.11u. Before associating, the device uses ANQP (Access Network Query Protocol) to ask the network who it is and which identity providers it trusts. If an installed profile matches, the device authenticates over WPA2- or WPA3-Enterprise using an EAP method (EAP-TTLS, EAP-TLS, or EAP-SIM/AKA for mobile-operator offload), typically against RADIUS infrastructure. The profile is provisioned once - via an app, an operator, or a one-time portal visit - and every later connection is automatic.
They are not mutually exclusive: a venue can run a portal for first-time guests and offer a Passpoint profile to regulars, keeping the splash page touchpoint while giving frequent visitors seamless reconnection.
OpenRoaming, run by the Wireless Broadband Alliance, is a global federation built on Passpoint: identity providers (device makers, operators, apps) and network operators agree common terms, so a device with one OpenRoaming-linked identity can join thousands of venues worldwide automatically. Adoption is growing in stadiums, airports and city networks, though the everyday hospitality hotspot remains portal-based for now.
A captive portal is a web page that public WiFi users see before being granted internet access - typically used to authenticate users, accept terms, and capture data such as email or social-login identity.
RADIUS (Remote Authentication Dial-In User Service) is a network protocol providing centralised authentication, authorisation, and accounting (AAA), defined in RFC 2865, and used by enterprise WiFi, VPNs, and captive portals to control network access.
A WiFi hotspot is a physical location where people can access the internet over WiFi, provided through one or more access points, with access controlled by a captive portal, password, voucher, or paid plan.
An SSID (Service Set Identifier) is the public name of a WiFi network - a label of up to 32 bytes that access points broadcast so nearby devices can find and join the network.
Capture guest emails, run automated email/SMS campaigns, and grow Google reviews - all from your existing WiFi.