QuickStart - Carriers/Country Coverage

WayFi has created a verified networks list to show what has worked in the field so far. However, this list is constantly growing and is not exhaustive. Please note that Alta Labs has no control over adding countries or carriers.

What is AltaBoost?

AltaBoost is a feature that allows cellular devices to use your Alta Labs Wi-Fi network as if it were a cell tower. In simple terms, it takes your phone’s cellular data (and even voice calls) and routes them securely over your Wi-Fi connection. AltaBoost uses a technology called Passpoint (also known as Hotspot 2.0) to broadcast a special Wi-Fi network that participating mobile carriers recognize automatically.

When AltaBoost is enabled, any compatible smartphone or device within range of your access point will automatically connect and establish a secure, encrypted link (like a VPN) to its mobile carrier through your Wi-Fi. The Alta AP then carries the device’s cellular data over your internet uplink – effectively giving you “5G over Wi-Fi” coverage in areas where cell signals are weak. This process is seamless: supported devices won’t need any manual login or configuration. If a device does see a login prompt or “Sign in to network” message, it usually means that device’s carrier is not supported (or the connection was rejected by the carrier). Keep in mind, the actual connectivity is controlled by the mobile carrier – Alta Labs cannot override a carrier’s decision to accept or reject offloaded traffic.

Check out our video about AltaBoost below!

Enabling AltaBoost

Log in to https://manage.alta.inc or the Alta Networks mobile app and ensure you have selected the site you wish to enable AltaBoost for.

1. Navigate to Settings
2. Click the Passpoint button
3. Click Add AltaBoost

By default, AltaBoost comes pre-configured, so no further setup is required. The system automatically applies the correct SSID parameters for carrier offloading. However, you may optionally adjust advanced settings – for example, assign a specific VLAN for AltaBoost traffic, set bandwidth limits, or customize the SSID’s color indicator. Just remember to save any changes. (We strongly recommend using a dedicated VLAN for AltaBoost, as discussed in the Securing AltaBoost section below.)

What are the benefits of providing AltaBoost?

AltaBoost offers a range of advantages for both network operators and end users, particularly in environments where consistent mobile coverage is a challenge.

1. Extended Coverage

AltaBoost routes mobile traffic over your existing Wi-Fi infrastructure, helping fill in gaps where cellular coverage is weak or unavailable—such as basements, interior rooms, or rural buildings. Users stay connected in places where traditional cell signals may not reach.

2. Seamless User Experience

Thanks to Passpoint technology, supported devices connect automatically—no popups, no passwords, no app required. The experience is similar to how a phone transitions between towers: users’ devices just connect and route traffic securely over the AltaBoost-enabled network.

3. Broad Compatibility

AltaBoost is compatible with a wide range of mobile providers in the United States and abroad. This includes many major national operators as well as regional and virtual carriers. Support for international networks is growing regularly.

Due to marketing and contractual restrictions, Alta Labs cannot publicly list specific carrier names. However, you can refer to our list of verified networks to see which carriers and identity providers have been observed successfully connecting via AltaBoost.

Keep in mind: that list is not exhaustive. Because of how this technology works, there are many carriers that likely support it but have not yet attempted a connection. Even when a connection is attempted, the carrier ultimately decides whether to allow traffic. The verified list should be viewed as a helpful reference, not a definitive guarantee.

4. Free to Enable

There are no fees or licenses required to activate AltaBoost. It’s a built-in feature of your Alta Labs access points and cloud dashboard. You’re offering real-world value to users by improving mobile coverage—and there’s no cost to you. Note that AltaBoost is a voluntary offloading service; there is no financial incentive or revenue share attached.

For example, consider a hotel, bar, or retail store where mobile coverage drops off in the back of the building. Enabling AltaBoost ensures that supported users maintain their connectivity over Wi-Fi without noticing any difference—they’ll be able to message, browse, or even make calls without ever switching networks manually.

Residential use is permitted but not recommended.
AltaBoost was built for public and enterprise venues—places like campuses, government buildings, co-working spaces, or event locations where multiple users benefit from enhanced coverage. In a typical home, there’s little need for this level of integration, since household devices already use standard Wi-Fi or Wi-Fi calling. Additionally, enabling AltaBoost in a residential setting may result in nearby passersby connecting automatically, which could use your bandwidth.

Optional Carrier Offload Partnerships

AltaBoost operates as a free and optional service for most users. However, if you operate a large public venue and are interested in exploring formal carrier offload arrangements—which may involve contractual terms or compensation—Alta Labs can assist through its partners XNET and WayFi Wireless. Please contact the Alta Labs sales team to discuss opportunities for carrier-grade offload partnerships tailored to your deployment.

Data Privacy with AltaBoost

We understand that handing off cellular traffic to your Wi-Fi raises questions about privacy. Rest assured, AltaBoost is designed with user privacy in mind, and neither Alta Labs nor its partners are snooping on your personal data. Here’s what data is and is not collected when devices use AltaBoost:

• Alta Labs (Access Point): The Alta AP and cloud controller see only anonymized identifiers for the connection – essentially a temporary username/ID used for the Passpoint authentication, the device’s MAC address, and the AP’s own identifier (BSSID). This is basic connection metadata that’s already visible in your Alta dashboard for any connected client. Alta does not see any of the content of your traffic (no URLs, no call audio, etc.).
  
  

WayFi Wireless (Passpoint roaming partner): Our upstream partner facilitating the carrier connection receives the same minimal device info as above, plus data usage metrics (e.g. how much bandwidth was used during the session). Importantly, no browsing history, DNS queries, personal user identities, or content of your data is collected. The user’s cellular traffic is encapsulated in a secure tunnel directly to the mobile carrier’s network. In other words, even though the data goes over your Wi-Fi, its contents remain encrypted and private between the device and the carrier.

Securing AltaBoost

Because AltaBoost allows external devices (e.g. phones of cellular users) to use your network for internet access, it’s critical to isolate this traffic from your private LAN. We strongly recommend enabling AltaBoost only on an isolated VLAN or network segment for security. This ensures that AltaBoost devices can access the internet via your network, but cannot reach or see any of your internal devices or data.

Here are best practices to secure AltaBoost on your network:

1. Use an isolated VLAN for AltaBoost: If you have an Alta Labs Route10 router, create a new VLAN dedicated to AltaBoost traffic. In the Route10 settings, go to Settings -> Networks and add a new network (VLAN). Mark this VLAN as Isolated (so it has no access to other local networks).
   
   
2. Assign AltaBoost SSID to that VLAN: Next, go to Settings -> WiFi and edit the AltaBoost SSID that was created when you enabled the feature. Under the Advanced options for that SSID, set the Default Network VLAN to the new isolated VLAN’s ID you just created. Save the changes. Now all AltaBoost client devices will be placed on that isolated network by default.
   
   
3. For third-party routers/firewalls: If you’re not using Route10, you should still assign the AltaBoost wireless network to its own VLAN or guest network on your infrastructure. Treat AltaBoost traffic like you would a public guest Wi-Fi: give it internet access but no access to your sensitive internal subnets. Configure any inter-VLAN firewall rules to block AltaBoost VLAN from reaching your main LAN.
   
   

By isolating the AltaBoost network, you prevent any connected phone from interacting with your other devices – they’ll only be able to use the internet. This containment keeps your network safe while offering the service.

Optional security enhancements: You may choose to monitor or filter the AltaBoost traffic just as you would any guest internet usage. For example, Alta’s Route10 router supports enabling Intrusion Detection and Prevention (IDS/IPS) on specific VLANs, which can be turned on for the AltaBoost VLAN if desired (see Route10’s security settings). Similarly, you could apply Deep Packet Inspection (DPI) or content filtering using a third-party firewall or gateway on that segment. These measures are not required for AltaBoost to function – the cellular traffic is already encrypted (calls, text, etc.) – but they can add extra peace of mind or compliance with any policies you have. Implementing such features is up to you and can be tailored to your needs.

Frequently Asked Questions (FAQ)

Q: What does the “login prompt” mean when connecting?
A: If your device shows a “Sign in to Wi-Fi” splash page or login prompt when trying to use AltaBoost, it indicates the device did not automatically authenticate via Passpoint. In most cases, this happens because your mobile carrier is not supported by AltaBoost (so the seamless connection failed). Essentially, your phone is treating the AltaBoost network like a regular public hotspot because it couldn’t validate it as a carrier partner. There is no manual username/password you can enter to gain access – if you see a login page, that device won’t be able to use AltaBoost on that network. (In short, a login prompt = the device/carrier isn’t supported for automatic offload.)

Q: Do I need to configure anything on my phone or network manually?
A: No manual configuration is required in most cases. AltaBoost is designed to be a zero-touch experience for both network administrators and users. Once you enable AltaBoost in your Alta Labs dashboard, everything runs automatically behind the scenes:

• For users: Any Passpoint-compatible device that is supported by its carrier will automatically detect and connect to the AltaBoost SSID. The phone or tablet uses its SIM credentials or a secure carrier-issued certificate to authenticate silently in the background—no need to select a network, type a password, or install anything.
  
  
• For network administrators: Once AltaBoost is turned on, your Alta access points begin broadcasting the correct Passpoint network with all required parameters. There’s no need to manually configure RADIUS servers, roaming agreements, or device policies. Optionally, we strongly recommend assigning the AltaBoost SSID to an isolated VLAN for security (see Securing AltaBoost), but no other technical setup is required.
  
  

If a user’s device is not supported by a participating carrier, AltaBoost will still allow them to connect via OpenRoaming if they have a compatible profile installed. OpenRoaming is a global federation of identity providers (IDPs), and many organizations—including device manufacturers, school networks, municipalities, and public Wi-Fi services—support it.

If a user is not connecting automatically, or sees a login prompt, they may still be able to join using an OpenRoaming profile. We recommend pointing users to this guide to learn more:
👉 How to Get an OpenRoaming Profile

OpenRoaming can help expand compatibility and ensure users without native carrier support still benefit from seamless connectivity where AltaBoost is deployed.

Q. Does WiFi calling need to be enabled in order for voice to route across the offload connection?

Passpoint respects the phones wifi calling setting, so it must be turned on for calls to use WiFi including carrier offload to make voice calls while connected. It does not override the phone's WiFi calling setting. If a phone is connected to WiFi only and tries to make a call, some phones suggest enabling WiFi calling automatically. Others may fail to make or receive calls until WiFi calling is enabled.

Q: What carriers are supported by AltaBoost?
A: AltaBoost currently works with most major cellular providers in the United States, including national MNOs and many regional or MVNO carriers that utilize those networks. International support is also growing.

That said, due to marketing rights and contractual limitations, Alta Labs is not permitted to publicly list or name any specific carriers.

The best way to verify support is to simply enable AltaBoost and test with a device on the carrier you’re interested in. If the device connects automatically without any login prompt, that’s a strong sign the carrier supports offloading via AltaBoost. If it doesn't connect or shows a login screen, it may not be supported or may have rejected the connection.

We maintain a verified networks list to show what has worked in the field so far. However, this list is constantly growing and is not exhaustive. Because of how Passpoint and OpenRoaming work, there are many carriers that technically support offload but haven't yet appeared in our logs—or they may choose to reject certain traffic even if a connection attempt is made. Think of the verified list as a ballpark guide: it helps illustrate what’s been observed and what seems possible, but it’s not a definitive indicator of compatibility.

For specific carrier-related questions, you’re always welcome to reach out to our team at sales@alta.inc.

Q: How secure is AltaBoost?
A: AltaBoost is very secure. It leverages the Passpoint (Hotspot 2.0) standard, which uses WPA2-Enterprise/WPA3-Enterprise encryption and SIM-based authentication (or similar credentials) to ensure only authorized devices connect. When a device connects through AltaBoost, it actually establishes an encrypted tunnel directly to the carrier’s network (think of it like a private road to your carrier). This means the data packets are encrypted and authenticated – other Wi-Fi users cannot snoop on that traffic. Your Alta AP is just passing along encrypted data to the internet, and the carrier handles it from there with their usual security measures. Additionally, by isolating AltaBoost on its own VLAN as recommended, you add another layer of protection, ensuring AltaBoost devices can’t access anything on your internal network. In summary, using AltaBoost is as secure as using your cellular data normally, since all the carrier’s encryption and security protocols still apply (just over a Wi-Fi link).

Q: What data is collected when devices use AltaBoost?
A: Very minimal, anonymized data. Alta Labs and its partners do not collect any personal web browsing data or content from users. The system only logs what it needs to facilitate the connection:

• Alta Labs (AP/Dashboard): sees an anonymized username/ID for the session, the device’s MAC address, and which AP (BSSID) it connected to. This is essentially the same info you’d see for any client device on your Wi-Fi network.
  
  
• WayFi Wireless (roaming partner): sees the above information plus how much data was used during the session (for network management purposes).
  
  

They do not see the websites you visit, your call contents, DNS queries, or any sensitive personal data. All of that actual traffic stays encrypted between the user’s device, the mobile carrier. In other words, AltaBoost isn’t spying on anyone – it’s just ferrying data back and forth. The privacy of users is preserved just as if they were on normal cellular data.

Q: Can I use AltaBoost at home (residential)?
A: Technically yes, you can enable it on any Alta Labs Wi-Fi network – but it’s generally not recommended for home use. AltaBoost is intended for scenarios like businesses, public venues, or enterprise campuses where multiple visitors might benefit from improved cellular coverage. In a typical home, you and your family’s devices can simply use the regular Wi-Fi (or built-in Wi-Fi calling features for voice), so there’s little advantage to offloading cellular over Wi-Fi via Passpoint. Additionally, if you enable AltaBoost at home, you could inadvertently provide free internet access to nearby neighbors or passersby who are on a supported carrier, since their phones might auto-connect to your AP. For security and bandwidth reasons, most homeowners prefer not to invite unknown devices onto their network. So while residential use isn’t forbidden, we only recommend using AltaBoost in settings where you explicitly want to offer that service to the public or guests. If you do try it at home, be absolutely sure to isolate it on a VLAN and understand that random devices might connect for cell service without you knowing (that’s the point of the feature!).

Q: What should I do if users can’t connect via AltaBoost?
A: If someone expects to use AltaBoost but their device isn’t connecting, here are a few troubleshooting steps to follow:

1. Verify carrier support: Confirm that their mobile carrier is indeed supported by AltaBoost. If their carrier or plan doesn’t participate, the device won’t connect. (If they saw a login prompt, that’s a strong hint the carrier isn’t supported.) In this case, there’s not much you can do – it’s up to the carrier to join the program.
   
   
2. Ensure AltaBoost is enabled and active: Double-check your Alta Labs dashboard to make sure AltaBoost is turned on for the site and that your access points are online and broadcasting the Passpoint network. It might help to use a tool or the Alta app to see if the AltaBoost SSID is being advertised by your APs.
   
   
3. Check your VLAN/firewall settings: If you have AltaBoost on an isolated VLAN (as recommended), make sure that VLAN has proper internet access. A misconfigured firewall or switch could be blocking the AltaBoost traffic from reaching the internet or the carrier’s servers. For example, ensure the AltaBoost VLAN can reach out on common ports and isn’t restricted by outbound rules. (AltaBoost uses standard ports/protocols over HTTPS, so generally if your internet is open it should work.)
   
   
4. Confirm device compatibility: Most modern smartphones support Passpoint, but it’s worth ensuring the user’s device isn’t too old or configured in a way that disables Passpoint/Hotspot 2.0. On some devices, Passpoint can be turned off in Wi-Fi advanced settings (though it’s usually on by default). Also, dual-SIM or international models might behave differently. Have the user make sure their OS is up to date as well.
   
   
5. Test with a known supported device/carrier: If possible, check AltaBoost using another device that is known to work (maybe your own phone on a supported carrier) to isolate whether the issue is the network or the user’s device. If your device connects fine but theirs doesn’t, it points to a device or carrier-specific issue.
   
   
6. Contact Alta Labs support: If everything should be working (carrier is supported, AltaBoost is enabled correctly, and device is compatible) but users still can’t connect, reach out to Alta Labs support for assistance. There might be an issue on the backend or additional debugging needed. You can also keep an eye on Alta’s release notes or community forums in case it’s a known issue being addressed.
   
   

By following the above steps, you can usually pinpoint why a user can’t connect. In many cases, it comes down to carrier support – if the carrier hasn’t allowed Passpoint offload, the user’s device simply won’t join.