Managed guest Wi‑Fi for venues and MSPs

Guest Wi‑Fi without shared passwords. Easier for visitors. More control for your venue.

Tagnect uses NFC tags to connect guests to your Wi‑Fi while your team controls groups, session time, time windows and the traffic policies your network equipment supports.

Works with the equipment you already run

Ubiquiti UniFiTP‑Link OmadaCisco MerakiMikroTik RouterOSOpenWrtJuniper Mistcoming soonHPE Arubacoming soon
See all integrations →

Choose your use case

Built around how your venue works

🍽️

Restaurants & cafés

Put a tag on each table or at the counter. Give guests a simple way to connect and manage access by group or session.

Explore restaurants →
🏨

Hotels & hospitality

Hand out tags with key‑card materials or place them in guest areas. Manage guest access through your property's network.

Explore hospitality →
🎫

Events

Organize access by attendee group, badge or event area, and plan the deployment around the venue's network capacity.

Plan event Wi‑Fi →
🤝

MSPs & partners

Add managed guest Wi‑Fi to your service portfolio. Each customer gets its own tenant; you are invited as a manager.

Partner program →

How Tagnect works

Three steps

1

Place and program the tag

A manager programs the NTag in the Tagnect Manager app and assigns it to a group and its access policy.

2

The guest taps the tag

On first use, the guest installs the free Tagnect app from the App Store or Google Play; after that, a tap requests access.

3

The network applies the access

Tagnect coordinates with your network equipment and applies the configured policy — session time, time window and, where supported, traffic rules.

What venue teams can manage

Your rules, applied by your network

Session duration, time windows, grace periods, groups and OTP access are Tagnect features and work in every deployment. Only bandwidth, quota, VLAN, client isolation and device limits depend on the specifications of the network controller.

  • GroupsOrganize tags and policies for guests, staff, VIPs or any group you define.
  • Session duration & time windowsDecide how long access lasts and when each group may connect, with a configurable grace period — in every deployment.
  • OTP for devices without NFCLaptops and other devices connect with a one‑time passcode generated in the Tagnect app or issued by a manager.
  • Device limits & traffic controlsBandwidth, quota, VLAN, client isolation and device limits, according to your controller's specifications.
  • Several locationsEach location (each physical street address) is its own tenant, with its own subscription, even if it uses the same network name (SSID). Partners and owners are invited as managers of the tenants they operate.

No vendor lock‑in

Use the equipment you already run

Tagnect works across vendors: Ubiquiti UniFi, TP‑Link Omada, Cisco Meraki, MikroTik RouterOS and OpenWrt routers. Juniper Mist and HPE Aruba are in development. You pick the equipment; Tagnect adapts.

🧩

Managed controllers

UniFi, Omada and Meraki: Tagnect drives the controller through its API, with rotating per‑group credentials plus the traffic controls it offers. On Meraki, straight in the vendor cloud — no connector.

See compatibility →
🛠️

MikroTik routers

One line in the RouterOS terminal: Tagnect builds isolated networks for guests, staff and devices and runs inside the router itself — no computer on site.

See compatibility →
📦

OpenWrt routers

For smaller venues: a compatible OpenWrt router running the Tagnect controller. Ready‑to‑use appliances are being negotiated with manufacturers.

Options for venues →

A more controlled guest Wi‑Fi

No password on the wall

Tagnect delivers time‑scoped Wi‑Fi credentials through the guest app, which reduces reliance on passwords printed on signs or shared broadly. Security outcomes are risk reduction, not a guarantee — see Security & IT for the details.

  • Time‑scoped credentialsCredentials rotate automatically; a copied password stops opening new connections after its time block and grace period.
  • No captive‑portal loginGuests never type a password into a web page, which removes a common phishing vector.
  • Device validationOn managed controllers, devices can stay restricted until the server validates the access.
  • Less personal dataNo guest sign‑up or profile: the venue offers Wi‑Fi without accumulating personal data.
  • Operations stay out of itCheckout, card terminals and internal systems stay on the venue's own network; Tagnect handles only the guest network.

See how Tagnect fits your network

Tell us whether you run a restaurant, hotel, event or MSP portfolio. We'll review your setup and suggest the right next step.