Is Public Wi-Fi Safe? How to Stay Secure in Cafés, Hotels and Airports
Free Wi-Fi at the coffee shop, the hotel, the airport: it's everywhere, and it's convenient. Public Wi-Fi is much safer than it used to be, because most websites now encrypt your connection. But there are still real risks, and a few simple habits avoid nearly all of them.
What are the actual risks?
• Fake hotspots: a scammer sets up a network called "Airport Free WiFi" or "Cafe_Guest" and waits for people to connect. Everything you do goes through their equipment.
• Fake login pages: some fake hotspots show a "sign in" page that asks for your email password or card details.
• Unencrypted websites and apps: on an open network, anything that isn't encrypted can potentially be seen by others on the same network.
• Your device being visible: if file sharing is switched on, other people on the network may be able to see your shared folders.
• Fake login pages: some fake hotspots show a "sign in" page that asks for your email password or card details.
• Unencrypted websites and apps: on an open network, anything that isn't encrypted can potentially be seen by others on the same network.
• Your device being visible: if file sharing is switched on, other people on the network may be able to see your shared folders.
Habit 1: Make sure you're on the real network
• Ask staff for the exact network name, or look for it on an official sign.
• Be suspicious of networks with generic names or duplicate names with slight differences.
• If the sign-in page asks for anything more than an email address or a room number, such as a password for another account or payment details, close it.
• Be suspicious of networks with generic names or duplicate names with slight differences.
• If the sign-in page asks for anything more than an email address or a room number, such as a password for another account or payment details, close it.
Habit 2: Check for the padlock
Before you log in to anything, look for https:// and the padlock in your browser's address bar. That means the connection to the website is encrypted.
Never ignore a certificate warning on public Wi-Fi. Messages like "Your connection is not private" are exactly what you'd see if someone were intercepting your connection.
Habit 3: Tell your computer it's a public network
• Windows: when you connect, choose Public network (or go to Settings → Network & internet → Wi-Fi → your network → Public network). This hides your computer from other devices and turns off file sharing.
• Mac: keep the firewall on (System Settings → Network → Firewall) and turn off File Sharing (System Settings → General → Sharing).
• Mac: keep the firewall on (System Settings → Network → Firewall) and turn off File Sharing (System Settings → General → Sharing).
Habit 4: Use your phone for sensitive things
For online banking, shopping or anything important, use your phone's mobile data or turn on its personal hotspot and connect your laptop to that. It's your own private connection.
Habit 5: Consider a VPN
A VPN (virtual private network) encrypts all your internet traffic between your device and the VPN service, so others on the public network can't see it. It's useful if you work from cafés or hotels a lot.
Choose a reputable paid provider, or the one your employer gives you. Be wary of free VPNs, which may make money from your data.
Habit 6: Don't let devices auto-join
Turn off auto-connect for public networks, and forget them when you leave. That stops your device from automatically joining a fake network with the same name later.
Habit 7: Keep everything updated
Up-to-date operating systems and browsers protect you from known attacks, wherever you connect.
The bottom line
Public Wi-Fi is fine for browsing and email, as long as you're on the real network, look for the padlock, and set the network to Public. For banking and sensitive accounts, use your phone's mobile data or a VPN. A little caution goes a long way.
