wifi.colorado.edu Explained: UCB Wireless, UCB Guest, and eduroam Compared
A conference guest checking into a dorm room for a week-long summer camp needs a network that works in five minutes with no CU Boulder account at all. A visiting researcher from a partner university needs one that already recognizes the login from their home institution. A CU Boulder student needs a network built to stay connected, semester after semester, across every building on campus. All three land on the same answer page — wifi.colorado.edu — and three different correct networks, which is exactly where the confusion starts, especially for anyone whose last visit to campus predates late 2025.
What Changed at wifi.colorado.edu in Late 2025
As of December 17, 2025, new CU Secure and CU Guest Wi-Fi networks went live in every campus building, and the networks they replaced — UCB Wireless and UCB Guest — were discontinued, according to the Office of Information Technology's campus Wi-Fi page. eduroam was not part of that change; it kept running through the transition exactly as it had before. If a search for CU Boulder's Wi-Fi still turns up "UCB Wireless" or "UCB Guest," those are the retired names — CU Secure and CU Guest are the networks that replaced them, not two more options alongside them.
That naming lag shows up in CU Boulder's own web pages, not just in old search results. CU Boulder Conference Services, which handles lodging and support for camps and conferences held on campus, still instructs arriving guests to "select UCB Guest wireless from your available Wi-Fi network options" — the old name, on a live university page. The same page describes the login: connect, accept the terms and conditions when the browser opens, and "You will be prompted to re-accept these terms and conditions every 24 hours." That 24-hour detail comes from Conference Services; OIT's own Wi-Fi pages don't state a re-accept interval for CU Guest. Readers searching the old network name are not wrong to have seen it; the rename is real, but not every corner of the university's own site has caught up yet.
CU Secure: the Everyday Network for CU Boulder Affiliates
CU Secure is the network OIT recommends for any CU Boulder student, faculty, or staff member connecting a laptop, smartphone, or tablet on campus. Access requires an active IdentiKey, and the setup is a one-time step rather than a login typed in every visit: install a certificate (on most devices) or an app (on Android) that configures the device to join CU Secure automatically afterward. The wifi.colorado.edu portal is where that happens: it links to the certificate installer, step-by-step instructions for iPhone and iPad, Android, Mac and Windows, and separate links for logging in to CU Guest and for registering a specialty device. For the guest side in more detail, see our guide on how to connect to CU Boulder guest Wi-Fi.
CU Secure is built for the devices that stay with a person day to day. It is explicitly not the right network for a different category of device, which is where CU Guest comes back in.
CU Guest: Built for Visitors — and for Devices CU Secure Won't Take
CU Guest is the network for anyone on campus without an IdentiKey: conference attendees, camp participants, prospective-student tour groups, and casual visitors. Conference Services describes the flow for its guests: select the guest network (which that page still calls "UCB Guest") from the device's Wi-Fi list and accept the terms and conditions when the browser opens. The same page says the terms screen comes back every 24 hours, so multi-day visitors should expect it rather than treating the first login as a one-time step. Our step-by-step CU Boulder guest Wi-Fi guide covers the connection in more detail.
CU Guest also has a job that has nothing to do with visitors at all. Per OIT's campus Wi-Fi page, "specialty" Wi-Fi devices — gaming consoles, smart TVs, and similar gear that isn't a personal laptop or phone — must connect through CU Guest for security reasons, even when the device belongs to someone with a fully registered CU Secure account on their own laptop. A student with CU Secure working perfectly on a laptop will still need CU Guest for a game console in a dorm room, and wifi.colorado.edu links to a page for registering a specialty device such as a gaming console or scanner.
eduroam: One Login Across Hundreds of Campuses
eduroam is a different kind of network entirely — an international, federated Wi-Fi service that lets a member of one participating institution log in at another using the same credentials they already have at home. CU Boulder affiliates with an IdentiKey can use it on campus, and visitors from other eduroam-participating institutions can use it too, logging in with their own institution's username and password rather than requesting anything from CU Boulder at all. Someone visiting CU Boulder from a university that doesn't participate in eduroam uses CU Guest instead.
For a CU Boulder affiliate, the first eduroam connection asks for two pieces of software before it works: a SecureW2 onboarding agent, which configures the network connection and is meant to prevent person-in-the-middle attacks, and a SafeConnect Policy Key, which checks that the connecting device's hardware and software meet campus security requirements. Visitors from other eduroam institutions follow their own institution's setup instead: OIT's eduroam page says they "may need to download your institution's eduroam installer," and should contact their home institution's service desk if something goes wrong.
eduroam's reach is also larger than any single campus. It runs across more than 100 countries at thousands of hotspots, and the global network recorded more than 9.2 billion authentications in 2025 alone, according to eduroam.org. That scale is the entire point of the service: a researcher with a login at an eduroam member institution anywhere in that network can expect the same "select eduroam, log in with home credentials" experience at CU Boulder that they'd get at their own school.
Who Should Use Which Network
OIT's own access table lines up cleanly with who's standing in front of the login screen:
| Who's connecting | CU Secure | eduroam | CU Guest |
|---|---|---|---|
| CU Boulder user with an active IdentiKey | Yes | Yes | Yes |
| Visitor from an eduroam-participating institution | No | Yes | Yes |
| Guest visiting campus with no CU account | No | No | Yes |
A CU Boulder affiliate technically qualifies for all three and should default to CU Secure for personal devices, reserving CU Guest for specialty gear. A visiting academic from a eduroam member institution has a real choice between eduroam and CU Guest, and eduroam is the better one — it needs no request to CU Boulder at all. Everyone else lands on CU Guest by default, which is exactly what it's built for.
Coverage, Common Problems, and Getting Help
Wi-Fi covers roughly 90% of indoor building space on campus, per OIT, but access points aren't mounted outdoors — expect the signal to be genuinely spotty walking between buildings, not just weak. Graduate and family housing apartments are a separate case entirely: those units run on Comcast-provided internet rather than campus Wi-Fi, so a CU Secure or CU Guest login isn't the relevant fix for an apartment connection issue.
A few fixes cover most day-to-day problems before a help-desk call is needed. If a device has more than one campus network — CU Secure, eduroam, and CU Guest, say — all set to auto-connect, it can latch onto whichever one it sees first rather than the strongest signal; disabling auto-join on all but one network avoids that. Personal Wi-Fi routers and hotspots are not allowed on campus and can interfere with the shared signal, so a dorm room with its own router is often the cause of a weak connection, not the network itself. A device with a dual-band (2.4GHz and 5GHz) Wi-Fi card generally performs better than an older single-band one on either CU Secure or eduroam. When none of that resolves it, OIT's IT Service Center takes calls at 303-735-4357 during the semester, Monday through Friday, 7:30 a.m. to 7 p.m.
Tips for Using wifi.colorado.edu's Networks
- Start at wifi.colorado.edu. It links to the CU Secure certificate installer, per-device instructions, the CU Guest login and specialty device registration in one place.
- Conference and camp guests should expect the login screen again the next day. Conference Services says the terms prompt returns every 24 hours; it's not a sign the first login failed.
- A gaming console or smart TV always needs CU Guest, even in a room where a laptop is already connected to CU Secure without any trouble.
- Visitors from another university should check eduroam first, not CU Guest. If the home institution participates, eduroam works with the visitor's own login and needs nothing from CU Boulder.
- If an old page or an old search result says "UCB Wireless" or "UCB Guest," it's describing the pre-December-2025 network. CU Secure and CU Guest are the current versions of those two networks, not separate additional options.
- Turn off auto-join on every campus network except the one actually in use. A device set to auto-connect to CU Secure, eduroam, and CU Guest simultaneously can end up on the weakest signal of the three without any error message.
Beyond Campus
CU Boulder's Wi-Fi networks cover the university's own buildings, but a visitor's day rarely stays inside campus boundaries — Boulder's downtown corridor, cafés, and public spaces run on entirely separate networks with their own logins and coverage areas. Readers planning a full day between campus and the rest of the city can browse every confirmed WiFi location in Boulder in the full WiFi directory.