Free Wi-Fi at the airport, the coffee shop, the hotel lobby — it feels like a small convenience, but it comes with risks that most people don't think about until something goes wrong. The good news is that a few simple habits can protect you almost completely, even when you're connected to a network you don't control.
What Makes Public Wi-Fi Risky
When you connect to Wi-Fi at home, your router creates a private network that only your devices join. Public Wi-Fi is fundamentally different — it's an open network shared with dozens or hundreds of strangers simultaneously.
This creates two main risks:
- Eavesdropping: On an unsecured network, a technically skilled person nearby can intercept the data your device sends and receives. If a website isn't encrypted (more on that in a moment), that data — including what you type — can potentially be read.
- Fake networks: A criminal can set up a Wi-Fi hotspot with a convincing name — "Starbucks Free WiFi" or "Airport Guest Network" — and wait for people to connect. Once you're on their fake network, they can monitor everything you do online.
The Good News: Most Browsing Is Already Encrypted
Here's something reassuring: the vast majority of reputable websites now use a security standard called HTTPS, which encrypts the data traveling between your device and the website — even on public Wi-Fi. You can tell a site uses HTTPS by looking for a small padlock icon in your browser's address bar, and by checking that the web address starts with "https://" rather than just "http://".
When you're on an HTTPS site, someone eavesdropping on the network can see that you're visiting, say, your bank's website — but they cannot see your username, password, or account details. That's a meaningful layer of protection.
Still, not every site uses HTTPS, and there are other risks beyond website traffic. So it pays to be careful.
What You Should Avoid on Public Wi-Fi
Even with HTTPS protection on most sites, some activities are simply better left for your home network:
- Online banking and financial transactions. The stakes are too high. Use your phone's cellular data instead, or wait until you're home.
- Logging into accounts with sensitive information — health records, Social Security or Medicare portals, tax services.
- Shopping with your credit card. Again, cellular data or home Wi-Fi is safer.
- Accessing work accounts that contain confidential information.
Smart Habits for Any Public Network
These practices significantly reduce your risk whenever you connect to Wi-Fi you don't own:
- Verify the network name before connecting. Ask a staff member at the coffee shop or hotel what the correct network name is. Don't just pick the strongest signal or the one that sounds most official.
- Look for the padlock. Before entering any login information on a website, confirm the padlock icon is present in the address bar and the address starts with "https://".
- Turn off automatic Wi-Fi connections. Most phones and laptops can be set to automatically join known networks — but they can also automatically join networks with familiar-sounding names. Go into your Wi-Fi settings and disable "Auto-Join" for networks you don't fully trust, or turn off Wi-Fi entirely when you're not actively using it.
- Use your phone as a hotspot when it matters. If you need to do something sensitive while away from home, your smartphone's cellular data connection is far more secure than public Wi-Fi. Most phone plans include a "personal hotspot" feature that lets your laptop share your phone's connection.
- Log out when you're done. When you finish using a website or app on a public network, actively log out rather than just closing the window. This prevents your session from remaining open.
- Keep your software updated. Operating system and browser updates frequently include security patches. An up-to-date device is more resistant to the kinds of attacks that take advantage of public networks.
Should You Use a VPN?
You may have heard about Virtual Private Networks, or VPNs. A VPN creates an encrypted tunnel for all of your internet traffic — not just HTTPS websites — making it much harder for anyone on the same network to see what you're doing.
VPNs are a worthwhile extra layer of protection, particularly if you travel frequently or regularly use public Wi-Fi for sensitive tasks. Reputable paid VPN services (look for well-reviewed options like Mullvad, ProtonVPN, or NordVPN) are generally more trustworthy than free VPNs, which sometimes collect and sell your data — defeating the purpose.
That said, a VPN is optional. For most people who follow the other habits in this article — especially avoiding financial transactions on public networks — the risk is already quite manageable.
Hotels and Airports Deserve Extra Caution
Hotel and airport Wi-Fi networks tend to have more users, weaker security configurations, and are more frequently targeted by criminals precisely because travelers are often tired, distracted, and doing things they wouldn't normally do in a hurry. These are exactly the moments to slow down and be deliberate about what you access. If you need to check your bank account while waiting for a flight, use your phone's cellular data — not the airport's free Wi-Fi.
The Simple Rule
Public Wi-Fi is perfectly fine for low-stakes browsing — reading news, checking the weather, looking something up. The habit to build is simply this: anything involving a password, a payment, or personal information should wait for your home network or your phone's cellular connection. That one rule, consistently applied, will keep you safe in almost every situation.