MacBook does not get online on plane Wi-Fi, but the phone does

Plane Wi-Fi holds all traffic until you sign in on the airline's page. The phone often works because nothing on it hides that page.

Applies to: All current macOS versions. The Off, Fixed and Rotating options for the private Wi-Fi address are in macOS 15 Sequoia and later.Checked: 29 October 2026

Symptoms

  • The Mac joins the plane's network, but no sign-in page opens.
  • Safari shows a security warning or a blank page. The phone signed in with no problems.
  • The Mac was online, then the airline's page asks you to sign in or pay again.
  • The airline's page says that your pass is in use on another device.

Likely causes

  • A VPN or iCloud Private Relay. A VPN or Private Relay can stop the plane network from sending you to its sign-in page.
  • Custom or encrypted DNS. A custom DNS server or a DNS profile does not use the plane's DNS. The network then cannot redirect you to its sign-in page.
  • A new private Wi-Fi address. The plane network can link a pass to the Wi-Fi address of a device. A new private address makes the Mac look like a new device.
  • The phone signed in another way. The phone can have signed in through the airline's app, or before the Mac joined. It often has no VPN or DNS profile either.
  • The airline's own setup. Airlines and their Wi-Fi providers use different sign-in pages and rules. Some show the page only after take-off. Some ask you to use their app.

How to check

  1. Hold the Option key and click the Wi-Fi icon. Make sure that you are on the airline's network.

  2. Show the DNS servers of the Wi-Fi service. A custom server shows here.

    networksetup -getdnsservers Wi-Fi

    Output There aren't any DNS Servers set on Wi-Fi. means that the Mac uses the plane's DNS.

  3. Look for a VPN at the top of the service order.

    networksetup -listnetworkserviceorder
  4. Look for DNS profiles. On macOS 15 and later, choose Apple menu > System Settings > General > Device Management.

  5. On macOS 13 and 14, choose Apple menu > System Settings > Privacy & Security > Profiles.

  6. Choose Apple menu > System Settings > Wi-Fi. Click Details next to the plane's network.

  7. Read the values of Private Wi-Fi address and Limit IP address tracking.

How to fix it

  1. Turn off the VPN until you are signed in. Also pause its kill switch, if it has one.

  2. If the sign-in page does not appear, forget the network first. Then join it again from the Wi-Fi menu.

  3. Forgetting the network removes its settings. Do it before the next steps, not after.

  4. In the network's Details, turn off Limit IP address tracking. This also turns off Private Relay for that network.

  5. Set Private Wi-Fi address to Fixed before you buy or redeem a pass. Do not change it after that.

  6. If you use custom DNS, remove it for a short time.

    sudo networksetup -setdnsservers Wi-Fi empty

    Needs an administrator password.

  7. If a DNS profile is installed, remove it for the flight. Install it again after you land.

  8. In a browser, open a page that uses http, not https. For example, open http://captive.apple.com.

  9. Sign in, or buy or redeem the pass, on the airline's page. Use the address only if the airline gives it.

  10. If the pass is in use on the phone, log out there first, if the airline's page allows it.

  11. After you sign in, turn on the VPN, Private Relay and your DNS again.

With Kilobat

  1. Check for a sign-in page with Kilobat's diagnosis.

    kilobat diagnose --json

    Output measurements.captivePortal is true when the network wants a sign-in.

  2. Show the address of the sign-in page that the network sent Kilobat's check to.

    kilobat portal

    Output When a sign-in page is in the way, it prints its address. kilobat portal open opens it in your browser.

  3. If you set DNS with Kilobat, return to the network's DNS for the sign-in.

    kilobat dns automatic
  4. Changing DNS needs an administrator password.

  5. For the provider, the price and how to connect on your airline, see In-flight Wi-Fi by airline.

Questions

Why does my phone work when the Mac does not?

The phone often signed in first, or through the airline's app. It also often has no VPN, custom DNS or DNS profile.

What is the address of my airline's sign-in page?

It differs by airline and Wi-Fi provider. Use the address only when the airline publishes it. Otherwise open http://captive.apple.com.

Can I use a VPN on plane Wi-Fi?

Turn it on only after you sign in. Airline rules for VPNs differ, and many airlines do not publish one.

Why do I have to pay again after I changed a setting?

The network can link the pass to the Wi-Fi address. A new private address or a forgotten network can look like a new device.

Sources

Checked on 29 October 2026.