Wi-Fi in schools and tutoring centres has a usage pattern found neither at home nor in an office. Not because the device count is larger, but because everything moves in unison.
Thirty students open the same app in the same minute as class begins, then all stop when the bell rings. The peak is extremely sharp, and that's what makes a seemingly adequate network suddenly stutter.
Sizing by devices, not floor area
The most common mistake is installing one router for the whole building and hoping the signal reaches. Coverage may reach; capacity does not.
| Situation | Estimated active devices | Access points |
|---|---|---|
| One classroom, 30 students | 30–35 | 1 business-class unit |
| Small tutoring centre, 3 rooms | 60–80 | 3 units, one per room |
| School with 12 classrooms | 350–450 | 12 units + common areas |
| Staff room and admin | 15–25 | 1 unit, separate network |
Note the calculation is per room, not per square metre. Walls between classrooms actually help here — they keep access points in adjacent rooms from interfering with each other.
Home routers aren't built for this. Their practical limit is around twenty devices, and in a classroom that's exceeded before the lesson starts. A more detailed calculation method is in the venue Wi-Fi capacity guide.
Capacity and coverage are two different problems. If the complaint is "the signal doesn't reach the end classroom", you need more access points. If it's "everything slows once class starts", you need equipment that handles many simultaneous connections. Raising transmit power doesn't solve the second — the guide to Wi-Fi signal boosters.
Four networks that need separating
This is the most decisive part, and the cheapest when designed in from the start.
| Network | Contents | Reachable by students? |
|---|---|---|
| Administration | Office computers, student records, finance | No |
| Teaching | Teacher laptops, projectors, printers | No |
| Students | Student devices in classrooms | Internet only |
| Devices | Security cameras, attendance systems, automatic bells | No |
There are two reasons, equally important. Security: admin computers hold student records and grades, and shouldn't share a network with personal devices carried in daily. Stability: classroom congestion mustn't cause the attendance or payment system to fail.
For a school with one router, the built-in guest network handles the most important separation — how to do it is in the guide to separating a guest network. Once there are several access points in the same building, the separation needs to move to the cable level, and the concept is in the guide to what a VLAN is.
One setting not to miss: client isolation on the student network. Without it, one student's device can reach another's in the same room.
Content filtering
For small schools and tutoring centres, DNS-level filtering is the most practical approach. It applies to every device on the network with nothing installed on each one.
How it works: the router points to a resolver that filters certain categories, so site names in those categories are never translated into addresses. The steps are in the guide to changing DNS, and the mechanism is explained in the guide to what DNS is.
Three things to state plainly to school management:
- This filtering is imperfect. It stops most, not all, and can be bypassed by a student using their own mobile data.
- It doesn't replace supervision. Arranging classrooms so screens face the teacher is far more effective than any filter.
- Occasionally it filters too much. Educational sites sometimes get blocked, so someone needs to be able to add exceptions quickly.
Preparing the network for online exams
Exams are when the network is tested hardest, and failure costs the most. What to prepare:
Test with the real number of devices
Not five sample devices. Gather a full cohort and run a simulation in the same room the exam will use.
Prioritise exam traffic
QoS lets exam devices or services go first, so background downloads from other devices don't interfere.
Prepare a backup line
A mobile modem on a different carrier from the main subscription. Two subscriptions from the same provider will fail together — the guide to 5G home internet vs fibre.
Provide backup power for network equipment
A power cut mid-exam mustn't mean the whole session is lost — the guide to a UPS for your router.
Prepare a manual procedure
A written plan for network failure: who announces it, whether the exam is postponed, and how already-submitted answers are preserved.
Obligations over student data
This is the most frequently overlooked part, with the heaviest consequences.
Student data is personal data under Law No. 27 of 2022. What makes it weightier than ordinary customer data: most students are children, and consent for them must come through a parent or guardian.
For that reason, the safest advice for a school Wi-Fi portal is to collect no data at all. A page showing only the usage rules and a continue button gives you the control you need without creating a retention obligation. How it works is in the captive portal guide, and the rules that apply if you do collect data are in the guide to customer data collection rules.
For security cameras, one thing is specific to educational settings: some areas must never be recorded at all — toilets, changing rooms, and counselling rooms. Notice and retention requirements are covered in the guide to CCTV and privacy rules.
Building it in stages
Schools rarely install everything at once. The order that delivers the most benefit first:
- Separate the admin network from the student network. Can be done today with existing equipment, and closes the largest risk.
- Change the router admin password and turn off WPS — the guide to securing a router.
- Add access points in the busiest classrooms. Start with one or two; the whole building doesn't need doing at once.
- Set up DNS filtering on the router. Free, and applies across the board.
- Run cable to other classrooms during any renovation. Cable is cheap; opening a ceiling twice is not.
If a ceiling is already open for other work, run cable to every classroom even if the equipment isn't bought yet. The cost line items most often left out are in the guide to guest Wi-Fi costs for businesses, and the questions to ask an installer in the guide to choosing a Wi-Fi installer.
Frequently asked questions
How many access points does one classroom need?
Generally one business-class unit per classroom of thirty to forty devices. What decides it isn't the room's size but the number of devices connecting simultaneously — and in a classroom, they all connect within the same minute.
Must student and admin networks be separated?
They must. Admin computers hold student records and grades, and shouldn't share a network with personal devices carried in every day. The separation also keeps classroom congestion from disrupting office work.
How do I filter inappropriate content?
The most practical approach for a small school is DNS-level filtering, since it applies to every device at once with nothing to install. Be aware this filtering is imperfect and doesn't replace supervision.
Do schools have obligations over student data?
Yes. Student data is personal data, and most students are children — whose consent must come through a parent or guardian. This makes collecting data through a Wi-Fi portal something best avoided entirely.
