No internet, secured: What It Means and How to Fix It

What "No Internet, Secured" Actually Means

The "secured" part of this message confirms that Wi-Fi authentication (WPA2/WPA3) completed successfully — your device exchanged keys with the access point and the wireless link is encrypted. "No internet" means Windows then ran its Network Connectivity Status Indicator (NCSI) probe and determined that internet access is absent. These are two separate checks, and only the second one failed.

NCSI works by sending an HTTP request to www.msftconnecttest.com/connecttest.txt and a DNS query for dns.msftncsi.com. If either probe fails, Windows marks the connection as "No internet." This means the error can appear even when internet access actually works — if only the NCSI probe URL is blocked or DNS cannot resolve it.

Most Likely Causes (Ranked)

1. DHCP did not issue a valid IP — device got 169.254.x.x (APIPA) instead
2. The router's DHCP pool is exhausted — no addresses available
3. ISP outage — the router has a local IP but no WAN connection
4. PPPoE authentication failure on the router — credentials wrong or session dropped
5. DNS not resolving the NCSI probe URL — resolver is slow or broken
6. Captive portal not completed — hotel, coffee shop, or guest network waiting for login
7. Wrong default gateway — DHCP issued an IP but gateway is unreachable
8. VPN left bad routes behind after disconnecting
9. Wi-Fi driver stuck in a bad power state after sleep

Fixes: IP Address and DHCP

ipconfig /release and /renew

Open Command Prompt as administrator and run:

• ipconfig /release
• ipconfig /renew

After renewal, run ipconfig and check the IPv4 address. If it shows 169.254.x.x, the router's DHCP server did not respond — the problem is the router, not Windows. If it shows a valid address (e.g. 192.168.1.x) but internet still does not work, the issue is at the router's WAN connection or DNS.

Forget and rejoin the network

Settings → Network & internet → Wi-Fi → Manage known networks → select the network → Forget. Reconnect and enter the password. This clears cached DHCP state and forces a fresh association.

Fixes: Router WAN and PPPoE

Log into your router's admin panel and check the WAN or Internet status page. If it shows "Disconnected," "No WAN IP," or a PPPoE error, the problem is between your router and the ISP. For PPPoE connections (common with DSL and some fiber services), verify the username and password in the router's WAN settings match exactly what your ISP provided — even a single character difference causes authentication failure. After correcting credentials, click Connect or Apply and wait 30 seconds for the session to establish.

Fixes: DNS and NCSI Probe

If you have a valid IP and can ping your gateway (ping 192.168.1.1) but still see "No internet, secured," the NCSI probe is likely failing due to DNS. Change your DNS to a reliable public resolver: in Windows, go to Settings → Network & internet → Wi-Fi or Ethernet → DNS server assignment → Manual → set IPv4 DNS to 1.1.1.1 (primary) and 8.8.8.8 (secondary). Then flush the DNS cache: ipconfig /flushdns.

Fixes: Captive Portal

On guest networks, hotel Wi-Fi, and coffee shop networks, "No internet, secured" often means the captive portal login page has not been completed. Open a browser and try to load any HTTP (not HTTPS) site — for example http://neverssl.com — which forces the captive portal redirect. Complete the login or accept the terms, and internet access will open up.

Fixes: Network Stack Reset

Run the following commands in an elevated Command Prompt in sequence, then reboot:

• netsh winsock reset
• netsh int ip reset
• ipconfig /flushdns

This clears Winsock catalog corruption, resets TCP/IP stack settings, and removes stale DNS cache entries. It is the most comprehensive single software fix before moving to driver reinstallation.

Distinguishing Partial Connectivity from Full Disconnect

Run ping 8.8.8.8 (tests IP routing to the internet) and separately nslookup google.com (tests DNS). If ping succeeds but nslookup fails, you have IP connectivity but broken DNS — fix the DNS resolver. If ping fails but your gateway pings successfully, your router is up but has no WAN connection — the ISP link is the problem. If neither works, the issue is more fundamental: check the router's WAN status and whether other devices are affected.

Frequently Asked Questions

Why does "No internet, secured" happen after waking from sleep?

Many Wi-Fi drivers fail to properly re-establish DHCP after the adapter is powered back on from a sleep state. Two fixes work well: in Device Manager, find your Wi-Fi adapter → Properties → Power Management → uncheck "Allow the computer to turn off this device to save power." Also update to the latest Wi-Fi driver directly from the laptop manufacturer's support page, not through Windows Update, which often ships older driver versions.

Can this appear even when the internet is actually working?

Yes. If the NCSI probe to www.msftconnecttest.com is blocked by a firewall, DNS filter, or corporate policy, Windows will show "No internet, secured" even though all other internet access works fine. You can verify this by simply opening a browser and loading a website — if it loads, your internet is fine and only the NCSI probe is being blocked.