Roku Error Code 021 — Fix Wi-Fi Password or Network Rejected

What Does This Error Mean?

Roku error code 021 means your Roku was rejected when trying to join your Wi-Fi network. This can happen because of a wrong password, a network security setting that blocks the Roku, or a router configuration issue. It is different from error 014 — the Roku is finding the network but being turned away when it tries to join.

Affected Models

Roku Express
Roku Streaming Stick
Roku Ultra
Roku Premiere
Roku TV

Common Causes

The Wi-Fi password entered on the Roku is incorrect or has been changed recently
Your router's MAC address filtering is blocking the Roku from joining the network
Your router's security protocol (WPA3) is not fully supported by an older Roku model
The router has too many connected devices and has reached its DHCP limit
Your router is set to allow only specific approved devices to connect

How to Fix It

Re-enter your Wi-Fi password carefully on the Roku. Go to Settings > Network > Set up connection > Wireless. Select your network and type the password again.

Passwords are case-sensitive. Make sure Caps Lock equivalent is not on when typing. Confirm the password by testing it on another device first.
Check if your router has MAC address filtering enabled. Log into your router admin page (usually 192.168.1.1 or 192.168.0.1) and look for a MAC filtering or device access control setting.

If MAC filtering is on and your Roku's MAC address is not in the allowed list, it will be rejected. Find your Roku's MAC address under Settings > Network > About.
Restart your router. Unplug it from power for 30 seconds and plug it back in. This resets active connections and DHCP leases.

If your router was at its maximum device limit, restarting it frees up expired connections and may allow the Roku to join.
Check your router's security settings. If it is set to WPA3 only, try changing it to WPA2/WPA3 mixed mode. Older Roku devices do not support WPA3.

WPA3-only mode is found on some newer routers. Switching to mixed mode restores compatibility with older devices.
If you recently changed your Wi-Fi password, update it on all devices including the Roku. The Roku will keep using the old password until you manually update it.

Roku devices do not detect password changes automatically. You always need to re-enter the new password manually.

When to Call a Professional

If you manage a business or school network with strict device policies, your IT administrator may need to add the Roku's MAC address to the allowed device list. For home users, Roku support at support.roku.com can help if all other steps fail.

Frequently Asked Questions

Where do I find my Roku's MAC address?

Go to Settings > Network > About on your Roku. You will see your Roku's wireless MAC address listed there. This is a unique identifier for your Roku's Wi-Fi adapter — it looks like six pairs of letters and numbers separated by colons.

What is MAC address filtering and should I use it?

MAC filtering is a router feature that only allows specific listed devices to join your network. It provides a small additional layer of security, but it is not very strong because MAC addresses can be faked. For most home users, a strong Wi-Fi password is sufficient security and MAC filtering adds unnecessary complexity.

I never changed my password. Why am I getting error 021?

Error 021 can appear if your router restarted and the Roku's DHCP lease is no longer valid. It can also appear if your router firmware was updated and reset some security settings. Try forgetting the network on your Roku and re-entering the password from scratch — this often clears the issue.