Wi-Fi Connected but No Internet: Fix It on Windows 11 and Mac

Two devices tell you where the fault is

Wi-Fi has two links: device to router, and router to provider. "Connected" proves only the first. Microsoft's Wi-Fi guide says that if another device cannot connect to the same network either, the router or the ISP is more likely the problem.

The test costs 1 minute. Join the same Wi-Fi with a phone and open any site, then compare with mobile data.

• Phone works, laptop does not: the fault is in the laptop (address, DNS or software).
• Phone also fails on Wi-Fi but works on mobile data: the router or the line is at fault. Restart the router, then call the provider.
• Only a cable to the laptop works: the Wi-Fi radio or its settings are at fault.

What the Windows yellow triangle and "No internet" really mean

Windows sets the label with NCSI, the Network Connectivity Status Indicator. On Windows 10 version 1607 and later it fetches http://www.msftconnecttest.com/connecttest.txt, checks that the file says "Microsoft Connect Test", and also resolves dns.msftncsi.com. If a step fails, the taskbar shows "No connectivity" or "Limited Internet access".

The test can fail while the internet works, because a VPN or proxy can delay the probe. Paste the address above into a browser: if you see "Microsoft Connect Test", your connection is fine and only the label is wrong. Microsoft advises against switching off NCSI active probing to silence the warning.

A 169.254.x.x address means the router never answered

A computer set to obtain an address automatically that gets no reply from a DHCP server gives itself a 169.254.x.x address. Microsoft calls this Automatic Private IP Addressing (APIPA), and its Wi-Fi guide reads it as "Windows didn't get an address from the router": check that DHCP is enabled on the router.

Such an address has no gateway and no DNS server, so no website loads. It points at the handshake with the router, not at your provider.

A worked example: reading ipconfig /all on a laptop that shows no internet

Run ipconfig /all and read 4 lines under "Wireless LAN adapter Wi-Fi". These are sample values: IPv4 Address 192.168.1.23, Default Gateway 192.168.1.1, DHCP Server 192.168.1.1, DNS Servers 192.168.1.1.

Step 1: 192.168.1.23 is not 169.254.x.x, so the laptop got an address. Step 2: ping 192.168.1.1. Microsoft's healthy result is 4 sent, 4 received, 0% loss. Step 3: ping 8.8.8.8. If that works but website names fail, DNS is the broken step. Step 4: ping the DNS Servers address; a timeout means you should change DNS.

If step 2 shows 0 replies, the laptop cannot reach the router. Try an Ethernet cable, as Microsoft suggests.

The five Windows commands, in Microsoft's order

Open Command Prompt as administrator, run these 5 commands in the order Microsoft's Wi-Fi guide gives, then restart the PC.

• netsh winsock reset: restores the Winsock catalog and removes custom layered service providers, so VPN or security software may need reinstalling.
• netsh int ip reset c:\resetlog.txt: overwrites the Tcpip\Parameters and DHCP\Parameters registry keys, like reinstalling TCP/IP. It needs a log file name and a restart.
• ipconfig /release: sends a DHCPRELEASE and drops the address.
• ipconfig /renew: asks the router for a new address.
• ipconfig /flushdns: clears the DNS cache, including remembered failed lookups.

Switch DNS to 8.8.8.8 or 1.1.1.1 when pings work but names do not

If ping 8.8.8.8 replies but websites fail, name lookup is broken. Google Public DNS uses 8.8.8.8 and 8.8.4.4 (IPv6 2001:4860:4860::8888 and 2001:4860:4860::8844). Cloudflare uses 1.1.1.1 and 1.0.0.1 (IPv6 2606:4700:4700::1111 and 2606:4700:4700::1001).

Google's page shows the Windows route: Control Panel > Network and Sharing Center > Change adapter settings > Properties on your Wi-Fi connection > Internet Protocol Version 4 > Properties, then enter the DNS addresses. Write down your current settings first.

On a Mac, open System Settings > Network > Wi-Fi > Details > DNS and press the Add button under the server list.

On a Mac: renew the lease, then run Wireless Diagnostics

Apple lists a restart first, because it lets the Mac renew its DHCP lease. Without a restart: System Settings > Network > Wi-Fi > Details > TCP/IP > Renew DHCP Lease, shown only when the service uses DHCP.

Next, quit your apps, hold Option, click the Wi-Fi icon and choose Open Wireless Diagnostics. The Summary pane lists issues and fixes, and the tool does not change your settings. Apple also says VPN or security software can block internet access.

Restart the router properly: 30 seconds off, then a few minutes

Unplug the router, then the modem. Wait at least 30 seconds. Plug in the modem, wait until its lights stop blinking, then plug in the router and give both a few minutes. Microsoft gives no exact total time. If your 2.4 GHz and 5 GHz networks have separate names, try the other one.

Captive portals: hotels, airports and cafes

On public Wi-Fi, the cause is often a sign-in page you have not opened. Microsoft explains that a captive portal answers the probe with a redirect or an empty reply, so Windows flags the network and normally opens the browser on the sign-in page. The alert clears a few seconds after sign-in. If the page never opens, browse to http://www.msftconnecttest.com/connecttest.txt.

Common mistakes that waste an hour

Running ipconfig /release and stopping leaves the adapter with no address, so always follow it with ipconfig /renew. Running netsh int ip reset without a log file name fails. Changing DNS does not help if ping 8.8.8.8 itself fails, because then the route is broken. Windows Network reset is a last resort that reinstalls adapters.

If you are looking at an error message and cannot tell which case it is, Crade can read your screen and explain what it means.

Which fix suits which setup

The second-device test and router restart suit everyone. The Windows commands suit one PC that fails while others work. Public DNS suits home networks where ping 8.8.8.8 works, but not a work laptop that needs its own DNS server; ask IT instead.