Networking

Guest WiFi Done Right: Convenience for Visitors, Security for You

Offering guest WiFi is table stakes for customer-facing businesses — and handing out your real network password is the most common security mistake we see. The right setup gives visitors great WiFi and gives them absolutely nothing else.

Isolation is the whole point

Proper guest WiFi lives on its own VLAN: guests reach the internet and nothing internal — not your point of sale, not your cameras, not the shared drive, and (with client isolation on) not even each other's laptops. A visitor's compromised phone becomes harmless instead of a foothold.

The password problem

If your "guest" network shares a password with your business network — or the guest password has been the same since 2019 and lives on a sticky note — you don't have a guest network; you have an open door. Guest access should be either open-with-portal or rotated on a schedule without touching staff access.

Captive portals: use them well

A branded landing page can show terms of use, your logo, and a promotion. Keep the friction low — a single tap-through beats forms most guests will fake anyway. Vouchers or daily codes fit businesses (like clinics or client offices) that want access to be granted, not ambient.

Bandwidth manners

Per-client speed limits keep one streaming visitor from starving the phones and the card readers. Your voice VLAN and business traffic should always win under load — QoS again, doing quiet work.

The housekeeping most setups skip

• Content filtering appropriate to a public network
• Scheduled availability (guest WiFi off at 10pm tells loiterers the same thing your lights do)
• Separate SSID naming that doesn't advertise your equipment or suite number
• Logging suitable for tracing abuse if it ever happens

An afternoon, done properly

On business-grade equipment like Ubiquiti, real guest WiFi — isolated, branded, limited — is an afternoon's configuration, not a project. It's included in every wireless network we design; if yours predates that thinking, it's a quick fix.