Website blocked on school, work or public Wi-Fi? Why it happens and what you can do

Disclosure: some links on this page are affiliate links. If you buy through them, CheckIfSiteDown may earn a commission at no extra cost to you. It never affects our status results, and we only recommend services with a strong reputation. Learn more.

A website loads fine at home, but on the school, office, hotel or café Wi-Fi you get "Access denied", a block page, or an error like ERR_CONNECTION_RESET. Nothing is wrong with the site. The network you're on is filtering it. Here's how those filters work, how to confirm one is the cause, and what you can do about it, the right way.

Signs the network is blocking the site

• CheckIfSiteDown shows the site as Up.
• It loads on your phone's mobile data, or at home, but not on this Wi-Fi.
• You see a page with the name of your school, employer, hotel or a security product (such as "Blocked by Fortinet", "Cisco Umbrella", "Zscaler" or "Sophos") instead of the site.
• The error is ERR_CONNECTION_RESET, ERR_CONNECTION_CLOSED or a certificate warning, but only on this network.
• Whole categories fail together: all social media, all games, all video or all streaming sites.

Why networks block websites

• Schools are often legally required to filter content for children, and also block games and social media to keep bandwidth and attention on lessons.
• Workplaces block sites for security (malware, phishing), legal reasons, bandwidth, and productivity policies.
• Hotels, cafés, airports and libraries filter adult content and bandwidth-heavy services, and some block file-sharing to avoid legal trouble.
• Mistakes happen. Filters sort millions of sites into categories automatically, and perfectly legitimate sites regularly end up in the wrong one.

How the filters work

• DNS filtering: the network's DNS server refuses to give out the address of blocked sites, or sends you to a block page. This is the simplest and most common method.
• Web filters and firewalls: a device on the network looks at which site each connection is for and cuts off the ones on its blocklist. That's what causes ERR_CONNECTION_RESET.
• Traffic inspection: some workplace and school devices have a special certificate installed so the network can look inside encrypted connections. If you see certificate warnings only on that network, this may be why.
• Captive portals: on public Wi-Fi, nothing works until you accept the terms on a login page. That's not a block, just an unfinished sign-in.

First, a word about the rules

On a school or employer's network, and especially on a device they own, their acceptable-use policy applies. Getting around a filter can break that policy and lead to real consequences, and on managed devices your activity may be monitored anyway. If you need a blocked site for legitimate study or work, asking for access (below) is the right first move. On public Wi-Fi in a café, hotel or airport, using your own device, you're generally free to protect your connection with a VPN, as long as it's legal where you are.

What you can do

1. Finish the Wi-Fi sign-in (public networks)

If nothing loads at all on hotel or café Wi-Fi, the login page probably hasn't appeared. Open a plain, non-secure page such as http://neverssl.com to make it show up, accept the terms, then try again.

2. Ask for the site to be unblocked

If a site you need for school or work is blocked, ask IT, your teacher or the help desk. Explain which site and why you need it; wrongly categorised sites are usually unblocked quickly. Many filter vendors also let anyone request a re-categorisation through their website-lookup pages.

3. Use your own mobile data

Switching your phone from Wi-Fi to mobile data, or using it as a hotspot, takes you off the filtered network entirely. It's the simplest workaround, if your data allowance permits.

4. Try a different DNS server (your own device only)

If the network uses simple DNS filtering, setting your own device to a public DNS service such as 1.1.1.1 may be enough. Our step-by-step guide shows how to change your DNS server on every device. Many networks block outside DNS, though, and it won't help against firewall filtering.

5. Use a VPN on public Wi-Fi

A VPN wraps all your traffic in an encrypted tunnel to a server elsewhere. The Wi-Fi network can see that you're connected to a VPN, but not which sites you visit, so site-by-site filters can't single them out. On open public Wi-Fi, a VPN also stops other people on the same network from snooping on your connection, which is worth having even when nothing is blocked.

Some networks block VPN connections too. Several providers offer modes designed to look like ordinary web traffic for exactly this situation: NordVPN's obfuscated servers, Proton VPN's Stealth protocol and Surfshark's Camouflage mode. If one server or protocol doesn't connect, try another.

Setting up a VPN for public Wi-Fi

1. Install it before you need it, at home. Some networks block VPN providers' own websites and app stores, so downloading on the spot may not work.
2. Turn on auto-connect on untrusted Wi-Fi, if the app has it, so you're protected the moment you join a public network.
3. Turn on the kill switch, which stops traffic if the VPN drops, so nothing slips out unprotected.
4. Sign in to the Wi-Fi's login page first, then connect the VPN.
5. If it won't connect, switch protocol or turn on the provider's obfuscation or stealth option.

The short version

If a site is up but blocked on one particular Wi-Fi, the network's filter is the cause. On school and work networks, ask for access rather than working around the rules. On public Wi-Fi with your own device, mobile data or a reputable VPN gets you through, and the VPN keeps your connection private as a bonus. For blocks that follow you everywhere, such as "not available in your region", see our guide to websites that stop working when you travel.