Public Wi-Fi used to have a reputation for being dangerous every time you connected. Today, widespread HTTPS encryption makes ordinary browsing much safer than it once was. But shared networks still deserve a little care.
The main risks are connecting to a fake hotspot, using an unsafe website, or trusting a network to be more private than it is.
Before you connect
Confirm the network name. In a hotel or café, ask staff which network is official rather than choosing a similar-looking name from a long list. A network with a familiar name is not necessarily operated by the business.
Avoid automatic joining when you do not need it. Your device may reconnect to networks it remembers. Review saved networks periodically and remove unfamiliar ones.
Keep your phone and laptop updated. Operating-system and browser updates help close security flaws that attackers might exploit.
While you are connected
Use HTTPS websites. Modern browsers normally show a warning if a connection is not secure. Do not enter passwords or payment details into a page that triggers a security warning.
Remember that HTTPS is not a trust badge. A scammer can operate a fake website over an encrypted connection. If a page asks for unusual account verification, open the service’s official app or website yourself.
Use MFA or passkeys. They can reduce the damage if someone steals a password, although not all methods are equally resistant to phishing.
Treat unexpected login portals cautiously. Some venues use a sign-in page before granting internet access. If it requests sensitive information unrelated to Wi-Fi access, verify it with staff.
Should you use a VPN?
A reputable VPN can offer an additional layer of privacy from the local network operator, particularly if you do not trust that network. It is not mandatory for every public hotspot, and it will not make a malicious website safe.
For sensitive work, follow your employer’s security requirements. If you have serious doubts about a hotspot, using your phone’s mobile data may be simpler.
After you disconnect
Forget networks you will not use again, especially temporary hotspots. If you entered credentials on a suspicious site, change the password from a trusted connection and review your account’s sign-in history.
Quick takeaway
The biggest improvements are simple: connect to the right network, use updated devices, check browser security warnings, and verify unusual requests through trusted channels. A VPN can be useful, but it is only one part of staying safe online.
Sources and further reading
- FTC: Are public Wi-Fi networks safe?
- EFF: Choosing the VPN that’s right for you
- CISA: Secure Our World