The free Wi-Fi at the airport, café and hotel is wonderfully convenient — and it is also a place where attackers love to wait. Public hotspots put you on the same network as strangers, which means your traffic can be watched. The good news: a few simple habits keep you safe without giving up convenience.
How Risky Is Public Wi-Fi?
Not every café is a trap, and modern websites encrypt much of your browsing automatically. But public networks are open by design, and there are well-known ways attackers misuse them. The more sensitive the activity — banking, email, work logins — the more attention you should pay.
The Main Threats
- Eavesdropping. Others on the same network can potentially capture data that isn't encrypted.
- Evil twin networks. A fake hotspot with a similar name (e.g. "Cafe_WiFi_Free" next to "Cafe_WiFi") to trick you into connecting to an attacker.
- Man-in-the-middle attacks. An attacker positioned between you and a website, reading or altering your traffic. See network security basics.
- Malware delivery. Fake login pages and pop-ups on public networks push harmful downloads.
What a VPN Does (and Doesn't)
A VPN (virtual private network) encrypts the connection between your device and the VPN server, so the people on the local network see only meaningless scrambled data. It is one of the fastest wins for public Wi-Fi safety.
Practical Tip
A VPN is not a magic shield. It protects your connection, not your decisions — you still shouldn't hand your password to a phishing site, and you still need strong passwords.
Safe Habits on Any Network
- Confirm the exact network name with the venue before connecting — watch for look-alike names.
- Use a VPN, especially when entering passwords or doing anything sensitive.
- Check for the padlock (HTTPS) in the address bar, and prefer apps whose security you trust.
- Avoid banking and shopping on unknown networks; use your phone's mobile data instead.
- Disable automatic connection to open networks on your device.
- Turn off file sharing and "AirDrop-like" discovery features while on public networks.
- Forget the network when you leave so your device doesn't reconnect later.
Protect the Device Itself
Your defense starts on the device: keep it updated, use a screen lock, and enable multi-factor authentication on your accounts so stolen credentials are not enough. If you reconnect to a suspicious network frequently, review which networks your devices trust and remove the ones you don't use. See malware protection for the rest of the picture.