Roku Error Code 130 — What It Means & How to Fix It

What Does This Error Mean?

Roku error code 130 means the Roku failed to establish a secure SSL/TLS connection to a streaming service or Roku's servers. SSL is the encryption system that protects your data when communicating with websites and streaming services. This error is most commonly caused by an incorrect date and time setting on the Roku — SSL certificates are time-sensitive and will be rejected if the device clock is wrong. It can also be caused by an overly strict network firewall.

Affected Models

Roku Express
Roku Streaming Stick
Roku Ultra
Roku TV
Roku Premiere
Roku Express 4K

Common Causes

The Roku's internal clock has the wrong date or time, causing SSL certificate validation to fail
A captive portal (hotel Wi-Fi, public Wi-Fi, or workplace network) is intercepting HTTPS connections
A firewall or parental control system on your router is blocking SSL traffic from the Roku
The Roku's software is severely out of date and its SSL certificate bundle has expired
A proxy or VPN configured on the network is performing SSL inspection that the Roku cannot handle

How to Fix It

Restart your Roku. Go to Settings > System > System restart. After it reboots, the Roku will sync its clock from Roku's time servers. An incorrect clock is the most common cause of SSL certificate errors. Check that the time shows correctly after restarting.

After a power outage or if the Roku was unplugged for a long time, its clock can be reset. A restart and internet sync corrects the time automatically.
Check your network for a captive portal. On your phone or computer, open a browser and see if you are redirected to a login page before you can use the internet. Captive portals (common on hotel Wi-Fi, public hotspots, and some ISP modems) block all SSL traffic until you log in — and Roku cannot log into these portals.

Roku devices cannot interact with captive portals. The only workaround is to use a mobile hotspot or a router that connects through the captive portal and shares a clean connection to the Roku.
Update your Roku software. Go to Settings > System > System update > Check now. Install any available updates. Severely outdated Roku software contains older SSL certificate bundles that may no longer be trusted by current streaming services.

Roku devices typically update automatically, but if one was stored or unplugged for a long time, it may be many versions behind. The update may take a few minutes and the device will restart.
Check your router for SSL inspection or HTTPS filtering. Some routers — especially those with parental control or security suites — can intercept HTTPS traffic for monitoring. Log into your router admin panel (usually at 192.168.1.1) and check for any SSL, HTTPS, or deep packet inspection settings. Disable them if found.

SSL inspection substitutes the router's own certificate for the website's certificate. Devices like Roku that have a fixed certificate store will reject this as an unknown certificate.
Try connecting your Roku to a different network such as your phone's mobile hotspot. If the error clears, the problem is with your home network configuration — most likely a router firewall or SSL interception setting.

Testing on a hotspot is the fastest way to rule out a home network issue. If Roku works fine on a hotspot but not your home Wi-Fi, the router is the problem.

When to Call a Professional

If the error only occurs on a corporate, hotel, or public Wi-Fi network, there is likely nothing wrong with your Roku — the network itself is intercepting secure connections. Contact the network administrator. For home networks, contact your ISP if router settings seem correct but SSL errors persist.

Frequently Asked Questions

What is an SSL certificate and why does Roku care about it?

An SSL certificate is a digital ID that a server presents to prove it is who it says it is. When your Roku connects to Netflix, Netflix shows its SSL certificate. Your Roku checks that the certificate is valid, current, and issued by a trusted authority. If the certificate is expired, from an unknown authority, or your Roku's clock says it is the wrong time, the certificate check fails and you get error 130. It is a security feature — Roku will not send your credentials to a server it cannot verify.

I am in a hotel and getting this error. What can I do?

Hotel Wi-Fi uses a captive portal that intercepts all internet traffic until you accept terms or log in. Roku cannot navigate these portal login pages. Your options are: use a travel router that you connect to the hotel Wi-Fi and then share the connection to your Roku, or use your phone as a mobile hotspot and connect the Roku to that instead. Some hotel networks also have a wired Ethernet port — you can use a Roku Ultra with an Ethernet adapter and request a registered MAC address from the hotel front desk.

Can this error mean my Roku is broken?

Rarely — error 130 is almost always a network or configuration issue, not a hardware fault. If the error appears on every network you try (home Wi-Fi, mobile hotspot, and a friend's network), then a software issue or severely outdated firmware may be to blame. Try a factory reset (Settings > System > Advanced system settings > Factory reset) and update the firmware immediately after setup. If it persists after that, contact Roku Support at support.roku.com.