Skip to main content
WiFi for hospitals, NHS trusts and private healthcare

One secure network for every clinician, patient and device on your site

Identity-based WiFi for clinical and admin staff, a private key for every connected device, filtered WiFi for patients and visitors, and a sign-in that cuts missed appointments. Run from one dashboard, on the access points you already own.

  • Microsoft Entra ID, Okta and Google Workspace sign-in
  • xPSK for ward and medical devices
  • DNS content filtering for patients
  • ISO 27001 certified, UK RADIUS region
A nurse and a doctor talking at a bright hospital ward station while a visitor waits nearby with a phone
Signed in with Entra IDClinical staff VLAN, no shared password
Patient WiFi filteredMalicious and unsuitable sites blocked at DNS
Trusted by NHS trusts and hospital groupsCroydon Health ServicesSt George’s Healthcare NHS TrustHomerton University HospitalHospital ÁngelesEl ChopoMédica Sur
The gap

Your hospital runs on a network that was never designed for it

A hospital site carries clinicians, agency and bank staff, contractors, patients on long stays, anxious visitors and thousands of connected devices, all on the same access points. Most trusts still run it with shared keys and an open guest network. That gap usually shows up in four places.

A typical hospital today

  • A staff WiFi key shared across wards and written on the back of a door
  • Leavers, locums and agency staff who can still connect long after their shift pattern ends
  • Printers, bedside TVs, sensors and medical kit on one flat network with a single key
  • An open patient network with no consent record and no content filtering

With Purple

  • Every member of staff signs in with their own directory account, so there is no key to leak
  • Access ends the moment an account is disabled, and contractor keys expire on their own
  • Each device gets its own key and VLAN, revocable one at a time
  • Patients and visitors get a filtered, branded sign-in with a UK GDPR consent trail
One platform, four networks

Staff, devices, patients and visitors, each on the right network

Four networks that would normally mean four procurements, run from a single pane of glass by the IT team you already have.

Clinical and admin staff

One login for email, clinical systems and WiFi

Nurses, doctors, porters and admin teams connect with the account they already use every day. Purple syncs with Microsoft Entra ID, Okta, Google Workspace and JumpCloud over SCIM, and group membership decides which VLAN and policy each person gets. Cloud RADIUS runs it, with no on-premise server to patch.

  • Joiners, movers and leavers handled automatically from your directory
  • Time-limited keys for agency staff, locums and contractors, with no MDM needed
  • Trust-managed laptops and tablets get EAP-TLS certificates through Intune or Jamf
  • Personal phones onboarded in about 60 seconds with the Purple app

Every session is logged against a named person, device, time and location, which gives you evidence for your Data Security and Protection Toolkit submission.

Explore staff WiFi
A nurse at a hospital ward station signing in on a tablet while a colleague reviews notes on a laptopStaff WiFi
Medical and connected devices

A private key for everything that cannot sign in

Ward printers, bedside TVs, patient tablets, door controllers, sensors and medical equipment that only supports a pre-shared key cannot use a staff login. xPSK gives each one its own key and its own VLAN, so a leaked key exposes one device, not the whole hospital.

  • Revoke a single key without re-keying every device on the ward
  • MAC binding ties each key to the first device that uses it
  • Works under your vendor’s name: iPSK on Cisco, DPSK on Ruckus, MPSK on HPE Aruba and Juniper Mist, PPSK on Extreme and UniFi
  • No per-device licence and no cap on devices per key

St George’s Healthcare NHS Trust moved its hospital charity’s loan iPads onto Purple by letting the devices bypass the sign-in page, saving £12,000 a year on a separate WiFi service.

Explore xPSK
A hospital ward bay with a bedside TV, a networked printer and a patient tablet on a bedside tablexPSK
Patients and visitors

WiFi that keeps patients connected and your network protected

Patients on long stays and visitors in waiting areas need to reach family, stream and work. Purple gives them a branded sign-in on a segmented guest network, with DNS content filtering that blocks malicious and unsuitable sites before they load. At St George’s Hospital it blocks 241,000 threats a week.

  • Captive portal with UK GDPR consent and a full audit trail
  • DNS content filtering with Purple Shield, set per network
  • Patient and visitor traffic kept off every clinical VLAN
  • A Central London NHS trust raised its opt-in rate from 47% to 70% after moving to Purple’s unified accounts
Explore patient WiFi
A patient sitting up in a hospital bed video calling family on a tablet, with a visitor beside the bedPatient WiFi
Patient communications

Fewer missed appointments and fewer lost patients in the corridor

Every patient who joins your WiFi has a screen in their hand at the moment they need help. Croydon Health Services uses Purple for wayfinding and missed-appointment prevention, saving 80,000 hours of staff time a year and £1.2m since it went live.

  • 58,456 sets of directions issued to patients at Croydon
  • Logic Flows show campaigns such as flu jab bookings only to the patients they apply to
  • Patient feedback surveys on the sign-in, with responses ready for your patient experience team
  • Sign-ups sent to your systems through 400+ data connectors

Homerton University Hospital used a Logic Flow to invite eligible patients and visitors to book their flu jab, and attendance rose 10%, from 5,000 to 5,500.

Explore the captive portal
A hospital volunteer helping an older patient follow directions on their phone in a bright hospital corridorPatient comms
Enterprise network security, without the NAC project

What it takes to build it yourself, and what it takes with Purple

Everything a large trust network team builds and maintains, delivered as a service on the hardware you have.

What you need
Build it in-house
With Purple
RADIUS servers
Buy, host, patch and back up servers in your data centre
Cloud RADIUS with a 99.9% uptime SLA
Certificates
Stand up and run your own certificate authority
EAP-TLS certificates issued, renewed and revoked for you
Joiners, movers and leavers
Manual accounts for staff, agency workers and contractors
Synced from Entra ID, Okta or Google Workspace over SCIM
Medical and connected devices
One shared key, changed every time it leaks
A private key and VLAN for each device
Patient and visitor WiFi
An open network with no consent record or filtering
Branded sign-in, UK GDPR consent and DNS content filtering
Hardware
Often tied to one vendor’s access control licence
Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi and more
A hospital IT lead and a patient experience manager reviewing a network dashboard in a quiet office
Proven in NHS hospitals

Results NHS trusts already report

The same platform that secures staff and device access gives back staff time, protects patients online and grows the number of patients you can contact.

80,000
hours of staff time saved a year at Croydon Health Services
£1.2m
saved at Croydon through wayfinding and fewer missed appointments
241k
threats blocked every week on patient WiFi at St George’s Hospital
70%
opt-in rate at a Central London NHS trust, up from 47%

Figures from Purple customer results: Croydon Health Services, St George’s Hospital and Central London NHS.

How it works

Live without new hardware

  1. 1

    Connect your directory

    Link Microsoft Entra ID, Okta or Google Workspace. Staff groups sync over SCIM.

  2. 2

    Point your access points at Purple

    We configure the staff, device, patient and visitor networks on the access points you already own.

  3. 3

    Switch on, network by network

    Roll out one network at a time with our onboarding team, starting wherever the risk is greatest.

Talk to our healthcare team

See your hospital on one network platform

Tell us about your sites and we will show you how staff, device, patient and visitor access would work on your hardware.

  • Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
  • Single sign-on with Microsoft Entra ID, Okta and Google Workspace
  • ISO 27001 certified, UK GDPR compliant, UK RADIUS region

Book a healthcare demo

A 30-minute call with someone who knows hospital networks.

Hospital WiFi questions, answered

What NHS and private healthcare IT teams ask us most

Do we need to replace our access points?

No. Purple runs on the access points you already own, including Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. There is no on-premise RADIUS server to install.

How do you keep staff, devices and patients apart?

Each population gets its own network and VLAN. Staff sign in with their directory account and land on the VLAN their group allows, each device gets its own xPSK key and VLAN, and patients and visitors use a separate guest network with no route to clinical traffic.

How do agency staff, locums and contractors connect?

Give them a time-limited key that expires on its own, with no MDM or device enrolment needed. Permanent staff who leave lose access automatically when their account is disabled in your directory.

Does it help with our Data Security and Protection Toolkit?

Every staff session is logged against a named person, device, time and location, there is no shared password to manage, and Purple is ISO 27001 certified. That gives you evidence for the network and access control parts of your submission.

How do medical and connected devices connect?

With xPSK. Each device gets its own key and VLAN, bound to the first device that uses it. You can revoke one key without touching any other device. Devices that should skip the sign-in page, such as loan tablets, can be allowed through directly.

What content filtering is applied to patient WiFi?

Purple Shield filters at DNS, blocking malicious domains and unsuitable categories before they load, with policies set per network. At St George’s Hospital it blocks around 241,000 threats a week.

Where is our data held?

Purple has RADIUS regions in the UK, EU and US, is ISO 27001 certified and UK GDPR compliant, and has had zero data breaches since 2012. Patient data captured at sign-in belongs to your organisation.

Recommended solution for Healthcare

WiFi for IT & network teams. Cloud Captive Portals, RADIUS, and analytics layered on top of Cisco, Aruba, Juniper Mist, Meraki, and Ubiquiti.

See WiFi for IT & network teams →

Speak to an expert

Tell us about your venues and we'll show you how Purple fits.