ExplainerOnline Safety and Scams
Public Wi-Fi safety: what to do and what to avoid
Find out how safe cafe, hotel and airport Wi-Fi really is, which habits protect you, and when to use your phone's own connection instead.
- Any device
Free Wi-Fi in cafes, hotels, libraries and airports is handy, and for most everyday browsing it is reasonably safe. Learn what actually protects you, which risks remain, and a short routine to follow when you connect.
The core idea
On public Wi-Fi, you share a network with strangers and you do not control the router. What matters is whether your connection to each website is encrypted (scrambled so others cannot read it). The Federal Trade Commission (FTC), a US government agency, says that connecting to public Wi-Fi is generally safe because most websites now encrypt your data. Older sites often did not, which left logins exposed to anyone snooping on the network.
The padlock is not a promise of honesty, though. Scammers can build fake sites that also use encryption, so the FTC notes your data is protected in transit but "won't be safe from scammers operating the site".
Text version of this diagram
- Your device connects to Public router (Shared Wi-Fi).
- Public router connects to Internet (Venue connection).
- Internet connects to Website (HTTPS if the site uses it).
What helps, and what does not
| Habit | What it does |
|---|---|
| Look for the padlock or https | Shows the connection to that site is encrypted. Does not prove the site is genuine. |
| Two-step verification | Means a stolen password alone is not enough to sign in. |
| Updates switched on | Keeps your system, browser and apps patched. The FTC advises automatic updates. |
| Mobile data or a hotspot | Avoids the shared network entirely for sensitive tasks. |
| A VPN | Can encrypt traffic from your device to the VPN company. Quality varies, and it does not stop fake sites. |
| A network with no password | Adds no protection. Do not assume a public network is encrypted. |
A simple routine
Before you connect
- Ask staff for the exact network name. Fake networks with a similar name are a known trick, and the sign-in page should match what staff tell you.
- Keep your device updated. On Windows, open . On iPhone, open .
- Turn on two-step verification for your important accounts. See strong passwords and two-step verification.
While connected
- Join the network and, if a sign-in page appears (called a captive portal), read it before you accept. Never enter a card number or a password for an account there unless the venue clearly charges for access.
- Check for the padlock or
httpsat the start of the address on every site where you sign in. This applies in mobile browsers too. - Keep sensitive tasks, such as banking and filling in forms with ID numbers, for your mobile data or home network.
- Do not ignore security warnings from your browser. If one appears on a site you know, close it.
- Sign out of accounts when you finish.
When you leave
- Disconnect, and make your device forget the network so it does not rejoin by itself. On Windows 11, open , select the network, then select Forget.
- On an iPhone, open , tap the (i) next to the network, then tap Forget This Network. On Android, tap the gear next to the network, then Forget.
Treat pop-ups on public Wi-Fi with care
Public networks are a common place to meet fake warnings that say your device is infected and ask you to ring a number. Never call a number from a pop-up or install a "security" program because a page told you to. See how to spot tech support scams.
A better option for sensitive tasks
If you must do something private away from home, your phone's own connection avoids the shared network. Many phones can share it as a personal hotspot, which is covered in how to set up a mobile hotspot. Your plan may limit or charge for this, so check with your mobile provider through its official website.
About VPNs
A VPN (virtual private network) sends your traffic through an encrypted tunnel to the VPN company. It can help on open networks, but it does not make you anonymous, and you are trusting that company with your traffic. Choose a provider carefully and avoid free apps from unknown makers.
What this means for you
Casual browsing on a cafe network is generally fine. Save banking and anything involving ID numbers for your own connection, keep updates on, use two-step verification, and forget the network when you leave.
Frequently asked questions
Is a hotel Wi-Fi with a room number and password safer?
It is only a little safer. Others at the hotel still share the network. Follow the same habits.
Can I check my email on public Wi-Fi?
Usually yes, if you use the official app or website with https and have two-step verification on. Avoid it if you are unsure of the network.
Do I need a VPN?
Not for casual browsing on most sites. It can add a layer if you often use open networks, but it is not a substitute for updates, strong passwords and two-step verification.
My device says "connected, no internet" at the cafe. Is something wrong?
Often you must accept the sign-in page first. If it does not appear, see Wi-Fi connected but no internet.
Was this guide helpful?
Thank you for your rating.
Ratings are not available right now. You can still use the contact page to tell us what you think.
Rating this guide needs JavaScript. You can send feedback on the contact page instead.
Official resources used
Pages consulted while preparing this guide. Check them for the latest details.
Need more help?
If this guide did not solve your problem, send us a message and tell us what you tried.
Beware of fake support
Real support never asks you to call an unfamiliar number, pay with gift cards or let a stranger control your computer.