To the knowledge base

Setting up Wi-Fi guest access (private hotspot) in the FRITZ!Box

The FRITZ!Box's Wi-Fi guest access offers your guests separate internet access. Devices in the guest network are denied access to devices in the home network. For this purpose, the FRITZ!Box provides an additional Wi-Fi network with its own security settings and a captive portal, if needed.

You can make guest access available that either requires a password or does not require one:

  • A password is required to use private Wi-Fi guest access. Data transmitted via the guest access can be secured using the encryption methods WPA2 and WPA2. The private Wi-Fi guest access is suitable for friends and acquaintances who want secure access to the internet when visiting you at home.
  • The public Wi-Fi hotspot can be used without entering a password. As in any public hotspot, data is transmitted without encryption. However, wireless devices that support OWE (Opportunistic Wireless Encryption) can exchange encrypted data with the FRITZ!Box at the same time. Public Wi-Fi hotspots are suitable for use in cafés or doctors' offices, for example.

In the FRITZ! Mesh, guest access can also be used on all Mesh Repeaters (for example FRITZ!Repeater). The FRITZ!Box (Mesh Master) automatically transmits all of the settings for the guest access to the Mesh Repeaters.

Requirements / Restrictions

  • The FRITZ!Box's Wi-Fi network must be enabled.
  • Devices in the guest network are configured to automatically obtain IP settings via DHCP.
  • Guest access is not available if the FRITZ!Box uses the existing internet connection of another router (IP client mode).
  • IPTV playback and other FRITZ!Box functions (such as the MAC address filter, port sharing, telephony) are not available when using guest access.

1 Configuring guest access

  1. Click "Wi-Fi" ("Wireless") in the FRITZ!Box user interface.
  2. Click "Guest Access" in the "Wi-Fi" menu.
  3. Enable the guest access.
  4. If you want offer your friends and acquaintances password-protected internet access:
    1. Enable the option "Private Wi-Fi guest access".
    2. For the "Name of the Wi-Fi guest access (SSID)", enter the name that your guests should see when they search for Wi-Fi networks.
    3. Select the desired encryption method from the drop-down list "Encryption".
    4. Enter a password that is between 8 and 63 characters long in the "Network key" field. Use numerals, letters, and other characters, and mix upper and lower case letters.
    • If you want to offer your guests internet access that is not password-protected:
      1. Enable the option "Public Wi-Fi hotspot".
      2. For the "Name of the Wi-Fi hotspot (SSID)", enter the name that your guests should see when they search for Wi-Fi networks.
  5. Click "Additional Settings" further below.
  6. If you want to receive a log of the devices' logging in and off of your guest access, enable the "Enable Push Service" option.
  7. If you want guests to see a captive portal, enable the option "Display Captive Portal" and customize it.
  8. If you do not want the guest access to be permanently enabled, select when the guest access should be disabled automatically.
  9. If you want to allow compatible wireless devices in the public Wi-Fi hotspot to use OWE to encrypt data, enable the option "Allow encrypted data transfer in a public hotspot (OWE)".
  10. If the wireless devices should be allowed to exchange data with each other, enable the option "Wireless devices may communicate with each other".
  11. If you also want to allow other types of internet access, disable the option "Restrict internet applications".
  12. Click "Apply" to save the settings.

Now guests who know the name of the guest Wi-Fi network (SSID) and have the network key can use your private hotspot.

Note:You can also use a FRITZ!Fon to enable and disable guest access in the "Home Network > WLAN" menu. The push service sends you a daily email message informing you about which wireless devices used the guest network.

2 Regulating internet use for the guest access

All devices in the guest network are assigned the "Guest" access profile in the FRITZ!Box parental controls. This way, in Germany all websites the German federal government has deemed offensive or harmful to minors are blocked by default.

You can manually adjust the "Guest" access profile if necessary, for example if you want to limit internet use in the guest network to certain times or block access to certain websites:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the (Edit) button for the "Guest" profile.
  4. Select the option "restricted" for the "Period".
  5. Click the "Internet use blocked" button and then hold down the left mouse button while you drag the mouse across the areas of the timetable when internet use should be blocked.

    Fig.: Internet access allowed at night and blocked in the morning

  6. If you want to block certain websites, enable the options "Filter websites" and "Block websites". You can create your own list of blocked websites or only block websites that are indexed by the German federal government (BPjM module).

    Note:The BPjM module is only available if you select Germany as the country of use under "System > Region and Language".

  7. Click "OK" to save the access profile.