Walk into most cafes, salons, clinics, or waiting rooms in Nairobi today and one of the first things a customer looks for is the WiFi password. Offering guest internet has gone from a nice extra to something people quietly expect. The problem is that a lot of businesses set it up in the fastest possible way — handing out the same password used for the till and the office computers — and then wonder why card payments hang at the counter or the CCTV feed keeps dropping.
Guest WiFi done properly is easy to live with. Done carelessly, it quietly competes with the parts of your business that actually earn money. Here is how to get it right.
Keep guest traffic separate from your business network
This is the single most important rule. Your POS terminal, card machine, CCTV recorder, printers, and staff computers should sit on their own private network that customers never touch. Guests get a completely separate connection. On a business-grade router this is done with a guest network or a separate VLAN, so the two never mix. If a customer’s laptop is carrying malware, or ten people start streaming video at once, your payment and security systems stay untouched.
Decide how guests get online
There are a few common approaches, and the right one depends on your foot traffic:
- A simple shared password — fine for a small office or a quiet shop, but easy to over-share and hard to change.
- A captive portal (hotspot login page) — customers connect, a branded page opens, and they tap to accept terms or enter a code. This is the standard for anywhere with steady public traffic.
- Vouchers or paid access — useful for hostels, co-working spaces, and events where you want to control usage or recover some cost.
WebSpace Internet connections support both PPPoE and Hotspot setups, so a business can run a private line for operations and a managed hotspot for customers on the same installation.
Set sensible limits
An open guest network with no rules will always be abused eventually. A few limits keep it healthy for everyone:
- Cap the bandwidth per device so no single guest can consume the whole connection.
- Reserve capacity for your business network so operations always come first when things get busy.
- Add a time limit per session — 30 to 60 minutes is plenty for most customers and encourages turnover.
- Filter obviously inappropriate content, especially if children are around.
Treat the login page as free marketing
If you use a captive portal, that first screen every customer sees is valuable space. Put your logo, a link to your menu or services, your social media handles, or a current promotion on it. It costs nothing extra and turns a technical step into a small brand touchpoint.
Cover the basic housekeeping
Change the guest password on a schedule if you use one. Keep your router’s firmware updated. Make sure the network name clearly says it is a guest network so staff never connect work devices to it by mistake. And put the router somewhere central and ventilated, not hidden inside a cupboard behind the counter.
Get it set up once, properly
Most of this is a one-time configuration. Once your business and guest networks are cleanly separated and the limits are in place, guest WiFi becomes something you barely think about — it just works, and it stops being a threat to your day-to-day operations.
If you run a business in Kasarani or greater Nairobi and want guest WiFi set up the right way — separated from your POS and CCTV, with a proper hotspot login — talk to the WebSpace Internet team on 0702 447 334 or through our contact page.