Subway rides often take up a significant part of the day, and having a stable internet connection becomes critical for many users. Xiaomi smartphones powered by MIUI or HyperOS have advanced security functionality that sometimes prevents automatic connection to public networks with authorization via a browser. Free subway Wi-Fi is a great way to save mobile traffic, but the login process is often difficult due to pop-ups and certificates.
The main difficulty is that the Android security system on Xiaomi devices can block redirection to the provider's authorization page. The user sees the message "Connected without Internet access", but the browser silently ignores the login request. In this article, we will discuss not only the standard algorithm of actions, but also the specific settings that are required for phones of this brand.
The right network configuration will allow you to enjoy high speed downloads of pages and videos without breaking the connection. We will look at DNS settings, work with security certificates and methods of bypassing pop-up locks. The key point is to disable the Safe Connection function in the browser for the authorization domain. Following these recommendations ensures stable network operation in tunnels.
Preparing the smartphone for connection
Before starting the procedure, you need to make sure that the basic settings of the device are working correctly. Often users forget that for initial authorization on a public network, you may need mobile Internet to receive an SMS or load the start page. Make sure that the Wi-Fi module is active and operates without errors.
It’s also worth checking if Flight mode is on, which can block wireless interfaces even after it’s turned off if there’s a software failure.Rebooting the communication module is a simple but effective step.
💡
Before connecting to the public metro network, be sure to update your antivirus databases and make sure you have the latest version of the MIUI security system installed.
It is important to clear the network cache if you have previously tried to connect to this provider, but without success. Old configuration files can conflict with new authorization protocols. This is especially true for devices that have not been updated for a long time.
- 📱 Make sure that SIM-The card is active and has a signal to receive SMS.
- 🔄 Reboot your smartphone to reset temporary network errors.
- 📡 Check that geolocation is enabled (required for Wi-Fi to work on some versions of Android).
- 🔋 Make sure the battery is above 15% so that the phone does not go into power saving mode during setup.
Search and selection of the network in the subway
In most major cities, subway networks have standard names that are easy to find on the list of connections available. MT_Free, WiFi Metro or the name of a specific carrier. On Xiaomi smartphones, the list of networks is displayed in the notification curtain or in the settings menu.
When choosing a network, look for a lock icon. Open networks don't require a password for the primary connection, but require further authorization. If the network is protected by a password that is unknown, you won't be able to connect to it in the standard way.
Once you select the name you want, click Connect, and the system can alert you that the network is not password protected and that the data you are transmitting may be visible to others, which is the standard warning for all public access points.
If the connection is successful, the status bar will show a Wi-Fi icon, but the Internet may not work yet, at which point the system tries to determine whether you need authorization, and on MIUI devices this process sometimes takes longer than on Android.
The process of authorization through the browser
The most common login method is to automatically open the ISP's page, and once the phone connects to the access point, the operating system must redirect the browser request to the authorization portal, where you will need to enter your phone number or check through SMS.
If the page does not open automatically, try manually entering any site, such as 8.8.8.8 or neverssl.com, into the browser address bar. These addresses are guaranteed not to use the secure HTTPS protocol at the start, which will force the redirection process to the portal.
☑️ Authorization algorithm
If your browser writes about a security or certificate error, don’t rush to close the tab. Xiaomi devices often require you to accept the provider’s security certificate manually. In browser settings, you may need to temporarily disable the HTTPS protocol or Safe Search mode for the authorization domain.
⚠️ Note: Enter only on the official login page, always check that the address bar contains the domain of the official Wi-Fi provider in the subway, and not a suspicious site-double.
Configuring MIUI Certificates and Security
The MIUI shell and the new HyperOS have aggressive security settings that can block logins. If the login page doesn't load, the problem is often in certificates. You may need to install the provider's root certificate, if it is provided, or change the encryption settings.
Go to Settings → Passwords & Security → Privacy → Special Permits → Install unknown applications. Here you need to check if your browser has permission to set up profiles if it is required for network operation. Although this is rarely required for normal login, it may be necessary for corporate or specific subway networks.
| Setup parameter | Recommended value | Where to find out. |
|---|---|---|
| MAC-address | Random (or MAC devices) | Wi-Fi settings → Network details |
| Protocol EAP | Not stated. | Additional (with manual input) |
| IP settings | DHCP (automatically) | IP settings in the network menu |
| proxy | No. | Additionally. |
| Private DNS | Disabled (for authorization) | Connection and sharing |
| Secure connection | Advanced Protection (disable for the portal) | Browser settings |
It is important to note that the use of third-party DNS-servers (e.g. from Google or Cloudflare) may block redirection to the login page at the authorization stage.
Why is HTTPS not working on the login page?
Solving Connection Problems on Xiaomi
If the automatic login never happened, there may be a problem in the cache. DNS conflict MAC-On Xiaomi smartphones, randomization is enabled by default MAC-Some old subway gateways may not work properly with changing addresses.
Try changing the settings. MAC-Go to the properties of the connected Wi-Fi network and find the item "Privacy" or «MAC-Switch the value from "Random" MAC» on «MAC-Device address. Then disconnect from the network and try to reconnect.
Another common problem is the included “Private” DNS» (Private DNS). This function encrypts everything. DNS-requests, making it impossible for the authorization portal to intercept the request.
- 🚫 Turn it off. VPN-Services, if active, block local redirects.
- 🗑️ Clear the Google Play Services and Settings app data (cautiously reset your network settings).
- 🌐 Try using another browser, such as the built-in Mi Browser or Chrome in incognito mode.
- 📶 Forget the network (delete the profile) and create a new connection with the changed MAC-address.
⚠️ Warning: Don’t try to use third-party apps to “bypass” authorization.They can’t bypass the provider’s server-side check and often contain malicious code that will steal your data.
Automation and session retention
After successful authorization, the system usually saves the session for a certain time. However, on Xiaomi, aggressive battery optimization can kill the process responsible for maintaining the connection, or reset the network when the screen is locked.
Go to the battery settings and find the app that handles network connections or your browser, set the "No Limits" mode, which will allow the network background check system to work correctly even when the screen is off.
💡
For stable operation of Wi-Fi in the subway on Xiaomi, it is critically important to add the network to the power saving mode exceptions and disable randomization MAC-addresses for this access point.
It's also worth checking the date and time settings. If they're shot down, the security certificates will be invalidated, and the browser will block login to the login page. Set up automatic time synchronization over the network.
In some cases, static IP setting helps, but it requires knowing the provider's address range, which is difficult for the average subway user to rely on DHCP, but control the process of getting the address.