Public Wi-Fi Safety: How to Stay Secure
Free Wi-Fi in cafes, airports, and hotels is convenient, but open networks can let others on the same network snoop on your traffic or trick you with fake hotspots. A few habits make public Wi-Fi safe to use.
The real risks
Public Wi-Fi introduces a few specific dangers:
- Evil twin hotspots: a fake network named like the real one ("Airport_WiFi_Free") that routes your traffic through an attacker.
- Snooping: on some open networks, others can attempt to intercept unencrypted traffic.
- Fake captive portals: login pages that harvest your credentials or push malware.
How to stay safe
You can use public Wi-Fi safely with these steps:
- Prefer your phone’s hotspot or mobile data for anything sensitive.
- Use a trusted VPN to encrypt your connection on public networks.
- Make sure sites show HTTPS (the padlock) before entering anything.
- Confirm the exact network name with staff, avoid look-alikes.
- Turn off auto-connect so your device does not join unknown networks on its own.
What to avoid
On open Wi-Fi, hold off on:
- Online banking or entering payment details when you can wait.
- Logging into important accounts without a VPN.
- Accepting software "updates" that a captive portal suddenly offers.
How it plays out in the real world
Based on real, widely reported incident patterns; names and details are illustrative.
The free airport Wi-Fi in a backpack
Waiting at gate B7, travelers found "Airport_Free_WiFi" with full bars and no password. It was actually a hotspot running on a laptop in a backpack three seats away. Its login page asked users to "sign in with email" to get online, and dozens typed their real email passwords.
The network worked fine afterward, pages loaded and flights were checked, so nobody suspected that the login page had been the entire point.
- Anyone can name a network anything. Broadcasting "Airport_Free_WiFi" requires no permission. An evil-twin hotspot looks identical to the real thing, and there is no visual way to tell them apart.
- A Wi-Fi login page never needs your email password. Captive portals may ask for an email address; they never need the password to your inbox. That request is a harvest.
- Your phone's hotspot is the safest public network. For anything sensitive, use your own cellular hotspot or a reputable VPN, and turn off auto-join for open networks.
Test yourself
Test your Wi-Fi safety knowledge, free.
Frequently asked questions
Is public Wi-Fi actually dangerous?
Most everyday browsing over HTTPS is reasonably safe, but open networks add real risks like fake hotspots and snooping. Using a VPN and avoiding sensitive logins removes most of the danger.
Does a VPN make public Wi-Fi safe?
A trusted VPN encrypts your traffic so others on the network cannot read it, which addresses the biggest risks. Combine it with checking for HTTPS and avoiding fake hotspots.
How do I spot a fake hotspot?
Be wary of duplicate or slightly-off network names, networks with no password in a place you would expect one, and captive portals that ask for too much. When unsure, confirm the official name with staff.