One wrong click on a pop-up months ago can leave CapCut permanently blocked - no error, no explanation, just no internet connection. This page makes the proper allow rule in Windows Defender Firewall, covers a missing list entry, and explains the antivirus-suite version of the same fix.
The firewall is the single most common cause of CapCut reporting no internet on a healthy PC. Windows asks once, briefly, whether a new app may talk to the network - and a dismissed prompt becomes a silent, permanent block. The repair is not to weaken your protection; it is to give this one app an explicit permission, which takes about two minutes.
The first time CapCut runs, Windows may show a prompt asking whether to allow it on private and public networks. Many users click Cancel or close it, and from that moment the app is blocked with no visible error - it simply reports no internet. Updates make it worse: a new CapCut version can look like a new program to the firewall, and the old permission no longer matches. The fix is a clean allow rule, not a weaker firewall.
If the tick boxes are greyed out, click Change settings at the top first - you need an administrator account for this.
No CapCut entry at all? Click Allow another app, then Browse, and point to the CapCut program file inside its install folder (inside your user AppData Local folder, under Programs and CapCut in recent versions - the exact path varies by version, so use the shortcut target: right-click the CapCut desktop shortcut, Open file location). Add it, tick both network types, and save. Launch CapCut once more so Windows registers the running program.
Many antivirus suites install their own firewall and switch the Windows one off. In that case the allow rule must be made inside that suite - look for its firewall or application control section and allow CapCut there; changing Windows Firewall settings will have no effect. Never stack the fix by disabling the suite entirely and leaving it off. If you disabled it only as a two-minute test and CapCut suddenly worked, you have found your culprit - now make the proper rule and switch protection back on.
Watch the fix applied live in the video - the exact firewall screens and ticks, step-by-step.
Watch Full VideoCheck for duplicate entries - an old unticked CapCut line can belong to the old version while the new one runs unlisted. Also confirm which firewall is actually active: if an antivirus suite replaced Windows Firewall, the rule must be created inside that suite instead.
Tick both. Laptops move between home and other networks, and Windows labels networks Public by default in many places. Allowing both means CapCut keeps working wherever you edit, while the firewall still guards every other app.
Yes - an outbound allow rule for a known app from the official CapCut website is normal and expected. It does not open your PC to incoming attacks; it simply lets CapCut reach its own servers for effects, templates and materials.