Your hospital runs on a network that was never designed for it
A hospital site carries clinicians, agency and bank staff, contractors, patients on long stays, anxious visitors and thousands of connected devices, all on the same access points. Most trusts still run it with shared keys and an open guest network. That gap usually shows up in four places.
A typical hospital today
- A staff WiFi key shared across wards and written on the back of a door
- Leavers, locums and agency staff who can still connect long after their shift pattern ends
- Printers, bedside TVs, sensors and medical kit on one flat network with a single key
- An open patient network with no consent record and no content filtering
With Purple
- Every member of staff signs in with their own directory account, so there is no key to leak
- Access ends the moment an account is disabled, and contractor keys expire on their own
- Each device gets its own key and VLAN, revocable one at a time
- Patients and visitors get a filtered, branded sign-in with a UK GDPR consent trail
Staff, devices, patients and visitors, each on the right network
Four networks that would normally mean four procurements, run from a single pane of glass by the IT team you already have.
Sign in with the trust account
Identity-based WiFi through Microsoft Entra ID, Okta or Google Workspace. Joiners get access, movers change VLAN, leavers lose it.
02 · DevicesA private key for every device
xPSK gives ward printers, bedside TVs, sensors and medical equipment their own key and VLAN, isolated from people.
03 · Patients and visitorsFiltered WiFi for long stays
A branded sign-in with UK GDPR consent and DNS content filtering, kept apart from every clinical network.
04 · Patient communicationsDirections, reminders and feedback
Use the WiFi sign-in to help patients find their clinic, attend their appointment and tell you how it went.
One login for email, clinical systems and WiFi
Nurses, doctors, porters and admin teams connect with the account they already use every day. Purple syncs with Microsoft Entra ID, Okta, Google Workspace and JumpCloud over SCIM, and group membership decides which VLAN and policy each person gets. Cloud RADIUS runs it, with no on-premise server to patch.
- Joiners, movers and leavers handled automatically from your directory
- Time-limited keys for agency staff, locums and contractors, with no MDM needed
- Trust-managed laptops and tablets get EAP-TLS certificates through Intune or Jamf
- Personal phones onboarded in about 60 seconds with the Purple app
Every session is logged against a named person, device, time and location, which gives you evidence for your Data Security and Protection Toolkit submission.
Explore staff WiFi
Staff WiFiA private key for everything that cannot sign in
Ward printers, bedside TVs, patient tablets, door controllers, sensors and medical equipment that only supports a pre-shared key cannot use a staff login. xPSK gives each one its own key and its own VLAN, so a leaked key exposes one device, not the whole hospital.
- Revoke a single key without re-keying every device on the ward
- MAC binding ties each key to the first device that uses it
- Works under your vendor’s name: iPSK on Cisco, DPSK on Ruckus, MPSK on HPE Aruba and Juniper Mist, PPSK on Extreme and UniFi
- No per-device licence and no cap on devices per key
St George’s Healthcare NHS Trust moved its hospital charity’s loan iPads onto Purple by letting the devices bypass the sign-in page, saving £12,000 a year on a separate WiFi service.
Explore xPSK
xPSKWiFi that keeps patients connected and your network protected
Patients on long stays and visitors in waiting areas need to reach family, stream and work. Purple gives them a branded sign-in on a segmented guest network, with DNS content filtering that blocks malicious and unsuitable sites before they load. At St George’s Hospital it blocks 241,000 threats a week.
- Captive portal with UK GDPR consent and a full audit trail
- DNS content filtering with Purple Shield, set per network
- Patient and visitor traffic kept off every clinical VLAN
- A Central London NHS trust raised its opt-in rate from 47% to 70% after moving to Purple’s unified accounts
Patient WiFiFewer missed appointments and fewer lost patients in the corridor
Every patient who joins your WiFi has a screen in their hand at the moment they need help. Croydon Health Services uses Purple for wayfinding and missed-appointment prevention, saving 80,000 hours of staff time a year and £1.2m since it went live.
- 58,456 sets of directions issued to patients at Croydon
- Logic Flows show campaigns such as flu jab bookings only to the patients they apply to
- Patient feedback surveys on the sign-in, with responses ready for your patient experience team
- Sign-ups sent to your systems through 400+ data connectors
Homerton University Hospital used a Logic Flow to invite eligible patients and visitors to book their flu jab, and attendance rose 10%, from 5,000 to 5,500.
Explore the captive portal
Patient commsWhat it takes to build it yourself, and what it takes with Purple
Everything a large trust network team builds and maintains, delivered as a service on the hardware you have.

Results NHS trusts already report
The same platform that secures staff and device access gives back staff time, protects patients online and grows the number of patients you can contact.
Figures from Purple customer results: Croydon Health Services, St George’s Hospital and Central London NHS.
Live without new hardware
- 1
Connect your directory
Link Microsoft Entra ID, Okta or Google Workspace. Staff groups sync over SCIM.
- 2
Point your access points at Purple
We configure the staff, device, patient and visitor networks on the access points you already own.
- 3
Switch on, network by network
Roll out one network at a time with our onboarding team, starting wherever the risk is greatest.
See your hospital on one network platform
Tell us about your sites and we will show you how staff, device, patient and visitor access would work on your hardware.
- Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
- Single sign-on with Microsoft Entra ID, Okta and Google Workspace
- ISO 27001 certified, UK GDPR compliant, UK RADIUS region
Book a healthcare demo
A 30-minute call with someone who knows hospital networks.
Hospital WiFi questions, answered
What NHS and private healthcare IT teams ask us most
Do we need to replace our access points?
No. Purple runs on the access points you already own, including Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. There is no on-premise RADIUS server to install.
How do you keep staff, devices and patients apart?
Each population gets its own network and VLAN. Staff sign in with their directory account and land on the VLAN their group allows, each device gets its own xPSK key and VLAN, and patients and visitors use a separate guest network with no route to clinical traffic.
How do agency staff, locums and contractors connect?
Give them a time-limited key that expires on its own, with no MDM or device enrolment needed. Permanent staff who leave lose access automatically when their account is disabled in your directory.
Does it help with our Data Security and Protection Toolkit?
Every staff session is logged against a named person, device, time and location, there is no shared password to manage, and Purple is ISO 27001 certified. That gives you evidence for the network and access control parts of your submission.
How do medical and connected devices connect?
With xPSK. Each device gets its own key and VLAN, bound to the first device that uses it. You can revoke one key without touching any other device. Devices that should skip the sign-in page, such as loan tablets, can be allowed through directly.
What content filtering is applied to patient WiFi?
Purple Shield filters at DNS, blocking malicious domains and unsuitable categories before they load, with policies set per network. At St George’s Hospital it blocks around 241,000 threats a week.
Where is our data held?
Purple has RADIUS regions in the UK, EU and US, is ISO 27001 certified and UK GDPR compliant, and has had zero data breaches since 2012. Patient data captured at sign-in belongs to your organisation.
Featured products for Healthcare
The Purple platform pieces most Healthcare venues deploy on day one.
Guest WiFi platform for Healthcare
Captive Portals, analytics, and marketing automation as a cloud overlay.
Captive Portal software for Healthcare
Modern Captive Portals with social login, SSO, and marketing consent.
Passwordless WiFi for Healthcare
EAP-TLS, iPSK, and Passpoint - replace shared passwords with identity.
Recommended solution for Healthcare
WiFi for IT & network teams. Cloud Captive Portals, RADIUS, and analytics layered on top of Cisco, Aruba, Juniper Mist, Meraki, and Ubiquiti.
See WiFi for IT & network teams →Related pillar guides
The topical pillars most relevant to Healthcare. Each guide is the canonical hub for that area of the platform.
Further reading for Healthcare
Technical guides, articles and customer stories for teams running WiFi in this sector.
Guides for Healthcare
- Patient WiFi: A Complete Guide for NHS Trusts and Hospital Operators
- NAC for Healthcare: Securing Medical Devices and Patient Data
- How WiFi Can Improve Patient Experience in Hospitals
- NHS Staff WiFi: How to Deploy Secure Wireless Networks in Healthcare
- Is Hospital WiFi Safe? What Patients and Visitors Should Know
- Hospital Guest WiFi: Patient Experience and Network Separation
- Healthcare WiFi: HIPAA, DSPT and WiFi Compliance Explained
- HIPAA-compliant guest WiFi for healthcare providers
Related industries
Other verticals running on the same Purple platform.
Speak to an expert
Tell us about your venues and we'll show you how Purple fits.
