How PPSKs Improve Wi-Fi Security and Management with Captive Portals

Secure, Simple, and Scalable Wi-Fi Access: Introducing PPSKs in Our Captive Portal

TL;DR
Our captive portal solution now supports management of Private Pre-Shared Keys (PPSKs) — unique Wi-Fi credentials for each user or device. This improves security, simplifies access management, and allows granular VLAN control. PPSKs can also work alongside the captive portal — for example, hotels can give guests private VLAN access via PPSK while using the portal for restaurant visitors and day guests. Exclusive to our solution: automatic PPSK expiry and instant email delivery of credentials. Available now in version 2.1.79.

What Are PPSKs?

Unlike a single shared Wi-Fi password, PPSKs assign a unique key to each user or device. This approach greatly improves security, streamlines management, and supports compliance requirements, all while preserving the ease of use of a simple password.

Why This Matters

• Better Security – Compromised credentials no longer require changing the Wi-Fi password for everyone. Just revoke the affected PPSK.

• Easy Management – Create, distribute, or remove PPSKs instantly — even in bulk — through our centralized admin interface.

• More Control – Assign VLANs or tailor network access on a per-user or per-device basis.

• Smooth Onboarding – Users connect as they would with any regular password, without certificates or complex setup.

What Makes Our PPSK Implementation Unique

While PPSKs themselves are already a strong improvement over traditional shared passwords, our implementation includes exclusive features that make them even more practical:

• Automatic Expiry – Optionally set PPSKs to deactivate automatically at a specific date and time. Perfect for temporary access such as short-term guests, contractors, or event participants.

• Instant Email Delivery – Optionally send PPSK credentials directly to a recipient’s email immediately after creation, ensuring fast, accurate distribution without extra steps.

This is the PPSK creation form in our application:

This view shows the PPSK's details together with a downloadable QR code:

PPSK + Captive Portal: Practical Use Cases

PPSKs work perfectly alongside a captive portal, giving you flexibility in how you manage different types of users on the same network:

• Small Hotels & Hospitality – Assign PPSKs to hotel guests so each room or guest gets its own VLAN for secure, private access. Use the captive portal for restaurant visitors or short-term guests.

• Educational Campuses – Give staff and long-term residents PPSKs for secure, ongoing access, while students or visitors authenticate via the captive portal.

• Shared Workspaces – Provide PPSKs to tenant companies for their internal devices, and use the captive portal for guests and visitors.

• Healthcare Facilities – Issue PPSKs to medical staff for secure device access, while patients and visitors connect via the captive portal.

Who Benefits?

• SMBs – Enterprise-grade protection without RADIUS complexity or costs.

• Enterprises – Secure guest and BYOD access while keeping management simple.

• MSPs – Faster client onboarding and offboarding with fewer support calls.

Available Now

The PPSK feature is available in the latest release (v2.1.79) of our captive portal, with VLAN support, automatic expiry, instant email delivery, and full admin-level control. Whether you’re securing a single site or managing networks across multiple clients, PPSKs offer a balanced approach that combines security, flexibility, and ease of use.