Is Public Wi-Fi Safe? How to Protect Yourself in Cafés, Airports and Hotels
Free Wi-Fi in cafés, airports, hotels and malls is convenient, but it's not as safe as your home network. Anyone can connect, and some hotspots are set up specifically to trap users. The good news is that a few habits protect you well.
The real risks
- Fake hotspots (evil twins): a scammer creates a network with a convincing name like "Airport_Free_WiFi" to capture your traffic or show fake login pages.
- Snooping: on open networks without a password, others may see unencrypted traffic.
- Fake login pages: "Sign in to use Wi-Fi" pages that ask for your email password or card details.
- Device attacks: other devices on the network can try to connect to yours if sharing is on.
Most websites and apps now use encryption (HTTPS), which reduces the risk, but doesn't remove it.
Confirm the official network
Ask staff for the exact network name and password. Be wary of networks with no password or duplicates with similar names.
Set the network as Public
On Windows, choose Public network when connecting. This turns off file sharing and makes your PC invisible to others. On Mac, turn off sharing features.
Avoid sensitive tasks
Avoid online banking, shopping and entering passwords on public Wi-Fi if you can. Use mobile data or your phone's hotspot instead, which is much safer.
Check for HTTPS
Look for the padlock or "https://" in the address bar. Never enter passwords on sites without HTTPS. Be suspicious of certificate warnings on public networks.
Consider a VPN
A reputable VPN encrypts all traffic between your device and the VPN server, protecting you on untrusted networks. See what is a VPN. Avoid unknown free VPNs, which may sell your data.
Turn off auto-connect
After using a public network, choose Forget so your device doesn't reconnect automatically later, possibly to a fake network with the same name.
Use 2FA
If a password is stolen, two-factor authentication stops attackers from getting in.
Bonus: public charging stations
Use your own charger and plug into a wall socket rather than unknown USB ports. If your phone asks to "Trust this computer" when charging, tap Don't Trust.
Travel checklist for staying safe online
- Before you go: update your phone and laptop, turn on 2FA for email and banking, and back up your devices.
- Get a local SIM or eSIM or roaming package so you rely less on public Wi-Fi.
- Use your phone as a hotspot for your laptop instead of hotel Wi-Fi for sensitive work.
- Turn off Bluetooth and AirDrop/Nearby Share when not needed, or set them to contacts only.
- Keep devices locked and never leave them unattended in public places.
- Avoid shared computers in hotel lobbies for logging into accounts. If you must, use private browsing and log out.
About Wi-Fi login pages
Many public networks show a "captive portal" page to accept terms or enter a room number. These are normal, but be careful:
- A genuine portal might ask for your room number, surname, or a code from a receipt.
- Be suspicious of portals asking you to sign in with your email password, social media password or card details for "free" Wi-Fi.
- Never install software or "security certificates" to use public Wi-Fi.
Signs you may have connected to a fake network
Unexpected certificate warnings, login pages for well-known sites that look slightly wrong, or being asked to log in again to accounts you're already signed into. Disconnect immediately and switch to mobile data.
Frequently asked questions
Is hotel Wi-Fi with a password safe?
Safer than open Wi-Fi, but everyone with the password shares the network. Follow the same precautions.
Is WhatsApp safe on public Wi-Fi?
WhatsApp messages are end-to-end encrypted, so they're protected even on public networks.
Keep reading
What Is a VPN and Do You Actually Need One?
A plain-English explanation of VPNs: what they protect, what they don't, when they're useful, and how to choose a trustworthy one.
SIM Swap Scams: How Criminals Steal Your Phone Number
Learn how SIM swap fraud works, the warning signs, and how to protect your bank and accounts that rely on SMS codes.
10 Signs Your Account Has Been Hacked (and What to Do)
Recognise the warning signs that your email, social media or other accounts are compromised, and take back control quickly.