Ubiquiti UniFi Captive Portal
Setup Guide
Add a branded captive portal to your UniFi guest WiFi with CaptiFi: capture guest emails on sign-in, automate Google reviews and run marketing on autopilot. Works with every UniFi access point.
• A running UniFi Network Application (UDM, UDM Pro, Cloud Key or self-hosted)
• A CaptiFi account - create one here
• Your External Portal URL from the CaptiFi dashboard
On this page
Set up in the wizard
Choose UniFi in the set-up wizard on your CaptiFi dashboard at my.captifi.io. The wizard offers three ways to connect a UniFi console: controller sign-in, an API key, or the Remote Tunnel for consoles behind another router. When CaptiFi cannot connect, the wizard names the cause and offers the Remote Tunnel or a CaptiFi device right under the message. The cause is one of three: the console could not be reached from the internet, it answered but not as a UniFi console with the Integration API, or it refused the API key. For the Remote Tunnel it shows the one-line install command for your console, tells you when the tunnel is up, takes your local API key and lets you pick the WiFi network to put the sign-in page on.
1 3-step setup overview
Setting up CaptiFi on UniFi takes under an hour on your own controller. There are three jobs:
| Step 1 | Create an open guest WiFi network in the UniFi Network Application. |
|---|---|
| Step 2 | Turn on the hotspot portal, set it to External Portal Server and paste your CaptiFi URL. |
| Step 3 | Add the CaptiFi domains to pre-authorisation access so the splash page loads before sign-in. |
Three ways to connect a UniFi console
CaptiFi has to talk to your UniFi controller to read your sites and let guests online. Pick the path that matches where your console sits; the UniFi setup guide on docs.captifi.io walks through each one click by click.
| API key | For a console CaptiFi can reach: it has a public IP, or you can add a firewall rule or port forward. CaptiFi authenticates with a key you can revoke at any time from UniFi, and multi-factor authentication on your Ubiquiti account does not get in the way. |
|---|---|
| Remote Tunnel | For a console behind another router, an ISP using CGNAT, or an ISP router you do not control. The console dials out to CaptiFi over a secure tunnel, so there are no inbound ports and no changes to your router. Cloud Key Gen2 and Gen2 Plus are included. You paste a one-line install command over SSH, wait about 30 seconds, and the tunnel reconnects by itself after a reboot or a power cut. |
| Controller sign-in | A local username and password, for a UniFi Network version too old for API keys where the console can still be reached from the internet. |
2 Create a guest WiFi network
In the UniFi Network Application, go to Settings → WiFi and click Create New:
| Name | Something guests recognise, for example Free WiFi |
|---|---|
| Security | Open (the captive portal handles sign-in) |
| Network / VLAN | Assign to a guest VLAN to isolate traffic (recommended) |
3 Enable the external hotspot portal
Still in your WiFi network settings, scroll to Hotspot Portal (older builds call this Settings → Guest Hotspot):
| Hotspot Portal | Enabled |
|---|---|
| Portal type | External Portal Server |
| Redirect URL | Paste your CaptiFi External Portal URL |
4 Add the pre-authorisation domains
Add CaptiFi to Pre-Authorization Access (the UniFi walled garden) so the splash page can load before a guest signs in:
- site.app.captifi.io
- app.captifi.io
- fonts.googleapis.com
- fonts.gstatic.com
5 Test the solution
Connect a phone to your new guest WiFi. You should be redirected to your branded CaptiFi splash page. Enter a test email, complete the login, and confirm you reach the internet.
Verify the capture in your CaptiFi dashboard under Guest Visits.
Works with your existing UniFi kit, or use our included device
You do not have to buy anything new. There are two paths: your existing kit works on every plan, and the plug-and-play device is included with every plan.
| Use your existing UniFi kit | If you already run UniFi access points and a UniFi Network Application, follow the steps above. CaptiFi sits in front as the external portal. No extra hardware. |
|---|---|
| Use our included plug-and-play device | No UniFi controller, or you would rather not touch it? We post you a pre-configured CaptiFi device. Plug it into your existing network by Ethernet, enter its 8-digit activation PIN from your phone, and it pulls its config from the cloud. Guest WiFi is live in about five minutes, start to finish, with no controller, static IP or firewall change. |
Lite: £19.99 a month on your own network
Already run UniFi? Lite is guest capture and CSV export on the access points you have, 500 new guests a month, for one site. The splash page keeps CaptiFi branding.
Related guides and pages
UniFi captive portal FAQ
Does CaptiFi work with the UniFi Dream Machine?
Yes. CaptiFi works with UDM, UDM Pro, UDM SE, Cloud Key Gen2 and self-hosted UniFi Network Server, and with every UniFi access point including the U6 and U7 ranges.
Does CaptiFi work with UniFi behind CGNAT or double NAT?
Yes. When your console sits behind another router, or your ISP uses CGNAT or gives you a router you do not control, use the Remote Tunnel. The console dials out to CaptiFi over a secure tunnel, so no inbound ports or port forwards are needed, and Cloud Key Gen2 and Gen2 Plus can run it. The set-up wizard offers it whenever CaptiFi cannot reach your console.
Do I need RADIUS to use CaptiFi with UniFi?
No. CaptiFi authorises guests through the UniFi Controller API after they finish the splash page. That is simpler and more reliable than RADIUS for most venues.
Why is my UniFi splash page not loading?
Almost always the pre-authorisation list is missing a CaptiFi domain, or the built-in UniFi portal is still active and causing a redirect loop. Confirm all four domains are added and that only the CaptiFi external portal is enabled.
Will CaptiFi slow down my UniFi WiFi?
No. CaptiFi is an external service and authorisation happens in milliseconds. Once a guest is signed in, their traffic runs straight over your UniFi network. Speeds are unaffected.
Do I need to rebuild my existing UniFi network?
No. You add one open guest network and enable the external portal on it. Your existing business and staff networks stay untouched.
Is UniFi guest WiFi email capture GDPR compliant with CaptiFi?
Yes. CaptiFi captures guest details with clear consent and keeps a full audit trail, so your UniFi guest WiFi stays UK GDPR and PECR compliant.
Turn your UniFi guest WiFi into a marketing machine
Start a free 30-day trial, or watch a live demo first.
Setting this up for a client?
CaptiFi partners resell at a 30-40% wholesale margin, with white-label available at the same wholesale rates. You set your own retail price and bill your clients directly. The full wholesale rate card is published in six currencies (GBP, USD, EUR, CAD, AUD and NZD).
- ✓ Wholesale rate card published upfront, in your account currency
- ✓ Free 6-month internal demo licence for one internal test venue (testing and demos only)
- ✓ Partner dashboard, demo site and deployment guides within 48 hours of approval