VPN for travel: the hotel login page sets the order

The order in one line

Finish the hotel's login page with the tunnel off, then switch the tunnel on and load one page to confirm. Everything below is the seven steps that get you there, plus the standard that explains why the pop-up behaves as it does. Skip the pause and the tunnel usually sits on connecting, because the router is still holding your device in its waiting room.

Seven steps, in the order that works

1. 1

   1. Before you leave, import the link into Happ on every device you carry, up to 5 on one link, and confirm that a server list appears. Breaks: a different app shows one entry, "App not supported". Proof: servers appear in Happ.

2. 2

   2. Check that the Telegram chat with the bot opens on the line you will use abroad or at the airport. Breaks: it does not open and the link cannot be fetched on the road. Proof: the chat loads.

3. 3

   3. At the hotel, join the Wi-Fi with the tunnel switched off. Breaks: a tunnel left on keeps the device in the waiting state. Proof: the Wi-Fi name shows connected, no internet yet.

4. 4

   4. Wait for the login pop-up; if none comes, open a plain http address by hand. Breaks: a browser that forces https often does not trigger it. Proof: the room and surname form appears.

5. 5

   5. Finish the form and load one ordinary page. Breaks: the session expires after a short idle spell. Proof: the page opens.

6. 6

   6. Switch the tunnel on and wait for the connected state. Breaks: it stays on connecting, which means the login is not finished. Go back to step 4.

7. 7

   7. Load an address lookup page. Proof: it shows a server country, not the hotel provider.

Why the pop-up appears at all

The pop-up is not a trick of the hotel brand. The IETF defined the Captive Portal API in RFC 8908 in September 2020 (IETF), and the API must be reached over TLS. A router tells a device where the portal is through DHCP or router advertisements, and the standard sets out which option carries it. When the tunnel starts before the portal is satisfied, its first handshake goes to a router that is holding every packet, which is why a pause comes before the tunnel.

Where a device learns the portal address

What each row means in practice

RFC 8910 was published in September 2020 (IETF) and replaced an older option code that had clashed with another vendor. Many hotels do not use these options at all and rely on redirecting your first http request, so the pop-up may or may not appear by itself on a newer phone. If it does not appear, the manual http address in step 4 is the fallback, and nothing in Happ has to change. The table tells you why two hotels behave differently, not which one yours is.

The Telegram line you need before you go

In May 2025 Vietnam's regulator ordered carriers to block Telegram, and OONI recorded the block on FPT, VNPT and Viettel from 25 May to 10 July 2025 (OONI). Telegram opens again in 2026 measurements, but the order was never publicly withdrawn, so treat the bot chat as something to test on each line rather than assume. If it does not open where you are, the link cannot be fetched there, and this page has no workaround to offer.

When this fails

It fails when the hotel blocks tunnels, drops devices that use one, or has no working portal. Rules about tunnels differ by country and change, and the hotel's terms and local law stay with you. We have no server in Vietnam, so no step gives a Vietnamese address. We sell this subscription, so test the seven steps on your own phone at home before you rely on them in a room.

Questions