The device will not join your 2.4 GHz Wi-Fi
Almost every smart device is 2.4 GHz only. Almost every modern router is designed to hide which band you are on. That is the whole problem.
Why this keeps happening#
Smart home devices use 2.4 GHz for range, wall penetration and chip cost, and that has not changed in 2026. Meanwhile routers ship with one SSID covering both bands and a steering algorithm that decides for you, because that is better for laptops and phones.
The onboarding flow collides with that design. A typical setup runs like this: the app talks to the device over Bluetooth LE or a temporary access point the device broadcasts, then hands over the SSID and password, then waits for the device to appear on the network. The SSID it hands over is usually the one the phone is joined to, sometimes without asking. If the phone is on the 5 GHz side of a combined SSID, the app may pass credentials the device cannot use, or fail its own check that phone and device ended up on the same network.
The device is not broken and the app rarely says any of this. It says "setup failed, please try again". A Matter device fails the same way for the same reason, one stage earlier than the Matter-specific causes.
The test that settles it in ten minutes#
This works because it removes ambiguity rather than because 5 GHz is harmful. Some routers offer a "temporarily disable band steering" or "IoT setup mode" toggle that does the same thing more gently. Mesh systems from Amazon, Google and TP-Link often bury it, and some do not expose it at all, which is when a temporary guest SSID on 2.4 GHz becomes the workaround.
Causes in order of likelihood#
1. Band steering on a combined SSID#
Covered above. The permanent fix is two SSIDs: one for 5 and 6 GHz clients, one 2.4 GHz only network for IoT devices. Give the IoT SSID a distinct name, disable band steering on it, and use it for every smart device from then on. The network setup a smart home wants has the full configuration, including what to do if you also run VLANs.
Some IoT stacks also handle 802.11k, v and r roaming badly, which shows up as devices that pair fine and then disconnect repeatedly. If your access points support disabling fast roaming per SSID, do it on the IoT network.
2. Separate SSIDs, wrong one selected#
Once you have split SSIDs, the failure inverts: the phone sits on the 5 GHz network and the app silently offers that SSID. Join the phone to the 2.4 GHz network before you start, and check the SSID the app prefilled instead of tapping through it. This is the single most common self-inflicted failure after splitting bands.
3. WPA3 and mixed mode security#
This one is widely reported rather than formally documented, so treat it as a strong suspicion instead of a certainty: many 2.4 GHz IoT devices support WPA2-PSK only, and onboarding failures on WPA3-only networks, and on WPA2/WPA3 transition mode with protected management frames required, come up constantly in vendor support forums.
The mechanism is plausible and worth testing. If the device cannot negotiate the offered security, it fails at association with no useful error. Set your IoT SSID to WPA2-PSK, or to transition mode with management frame protection optional, and retry. Keep your main network on WPA3, which is where your laptops and phones live and where it actually matters. Securing a smart home network covers how to keep that split sane.
4. Hidden SSIDs#
Hiding the SSID provides no meaningful security and breaks a surprising amount of IoT onboarding. Many setup apps enumerate visible networks and cannot offer one that is not broadcasting, and some device firmware handles non-broadcast networks poorly. Un-hide the network, pair everything, and if you must, hide it again afterwards, accepting that every future device will need the same dance.
5. Captive portals and ISP guest networks#
Devices cannot accept terms of service. Any SSID that intercepts traffic with a portal page will let a device associate and then swallow its traffic, so the device looks online at the router and unreachable everywhere else. Do not put smart devices on an ISP guest network, a landlord network or anything with a splash page.
6. Guest networks and client isolation#
Client isolation, sometimes called AP isolation, blocks traffic between devices on the same SSID. Guest networks enable it by default. It is exactly the wrong setting for a smart home: the device joins, gets an address, and your phone and hub can never reach it. If your IoT devices are on a separate SSID, confirm client isolation is off there. This also breaks mDNS discovery, so it produces the same symptoms as a Matter pairing failure at the final stage.
7. Phone MAC randomization#
Phones use a private, randomized MAC address per network by default. If your router has a MAC allowlist, a DHCP reservation or a parental control rule keyed to your phone's real address, the phone lands somewhere unexpected, such as a restricted VLAN, and setup fails for reasons that look nothing like Wi-Fi.
Turning private address off for your home SSID during setup is a legitimate diagnostic step. Note that some IoT devices randomize too, which is why MAC-based rules are a poor foundation for smart home network design in the first place.
8. DFS channel changes on 5 GHz#
This one only affects your phone, but it can still break a setup mid-flow. Many 5 GHz channels are shared with radar, and regulators require an access point that detects a radar pulse to leave the channel, commonly for a period of about 30 minutes, after a channel availability check before it can be used at all. When that happens your phone drops off Wi-Fi for several seconds in the middle of onboarding, and the app reports a failure.
If setup fails at seemingly random moments and your phone briefly loses Wi-Fi, pin your 5 GHz radio to a non-DFS channel, or just run setup with 5 GHz off.
9. Legacy rates and channel width#
Two router settings occasionally matter. Some routers disable low 802.11b data rates to improve airtime efficiency, which can lock out older or cheaper IoT chipsets. And 40 MHz channel width on 2.4 GHz is a bad idea in any populated area: it doubles your interference footprint over Zigbee and Thread for very little throughput. Set 2.4 GHz to 20 MHz width and a fixed channel of 1, 6 or 11. 2.4 GHz interference explains why the fixed channel matters for your other radios, and the channel planner does the math.
10. The device is out of range, or the phone is#
2.4 GHz reaches further than 5 GHz, but a device being installed in a garage or an attic may sit at the edge. Pair the device near the router first if the design allows it, then install it. Devices that must be provisioned in place, such as hardwired switches, benefit from a temporary access point nearby more than from any setting change.
When Wi-Fi is the wrong answer#
If you are fighting this repeatedly, count your Wi-Fi devices, and add the question to your pre-purchase checklist. There is no credible published limit for consumer routers, because the constraints stack: DHCP pool size, the per-radio association table (roughly 32 to 64 clients on budget hardware, higher on prosumer access points, rarely documented), NAT and CPU, and airtime. Past roughly 50 Wi-Fi IoT devices, more access points or a different radio is the real answer.
Battery sensors, in particular, do not belong on Wi-Fi at all. A Thread or Zigbee contact sensor runs for years on a coin cell while a Wi-Fi one runs for months. Which radio for which job has the decision table, and Thread versus Wi-Fi for smart devices covers the tradeoff directly.
Why will my smart plug not connect to 2.4 GHz Wi-Fi?
Most often because your phone is on the 5 GHz half of a combined SSID, and the setup app handed the plug credentials for a band it has no radio for. Turn off the 5 GHz radio for ten minutes, reconnect the phone, and pair. If that works, split your SSIDs permanently so it never happens again.
Do I need to disable 5 GHz to set up smart devices?
Only temporarily, and only as a test or a workaround. The durable fix is a separate 2.4 GHz SSID for IoT devices, with band steering and client isolation off. Then you never touch the 5 GHz radio again, and your phones and laptops keep the fast band.
Does WPA3 break smart home devices?
It is widely reported to, though vendors rarely document it. Many 2.4 GHz IoT chipsets support WPA2-PSK only, and onboarding failures appear on WPA3-only networks and on transition mode with protected management frames required. Set the IoT SSID to WPA2-PSK and keep WPA3 on the network your phones and laptops use.
Can smart devices connect to a hidden SSID?
Often not. Setup apps list visible networks, and some device firmware handles non-broadcast SSIDs badly. Hiding an SSID also provides no real security, since the network name is trivially recoverable from client traffic. Un-hide it for onboarding, and preferably leave it that way.
Why does my device show as connected on the router but not in the app?
Client isolation. It lets the device associate and get an address while blocking traffic between clients on that SSID, so your phone and hub can never reach it. It is on by default on guest networks and some mesh systems. Turn it off on the SSID your smart devices use.
Should smart home devices go on a guest network?
No. Guest networks combine client isolation, sometimes a captive portal, and often no multicast forwarding, which is the full set of things that break device discovery. If you want isolation, use a separate SSID on its own VLAN with client isolation off and mDNS allowed across the boundary.
Why does setup fail halfway through, at random?
Look at whether your phone briefly loses Wi-Fi during setup. Access points on radar-shared 5 GHz channels must vacate the channel when they detect a pulse, which interrupts your phone at an unlucky moment. Pin the 5 GHz radio to a non-DFS channel, or run setup with 5 GHz disabled.
Does turning off MAC randomization help?
It helps when your network has rules keyed to MAC addresses: allowlists, DHCP reservations, parental controls or per-device VLAN assignment. A randomized phone address bypasses all of them and can land the phone somewhere it cannot reach the device. Disable the private address for your home SSID during setup, then decide whether you want MAC-based rules at all.
Primary sources
Specification and vendor documentation we checked while writing this page. Where a claim depends on firmware behaviour rather than a published spec, the page says so inline.