How to Stay Safe on Public Wi-Fi: 12 Practical Security Tips

Free Wi-Fi in cafés, hotels, airports, bus stations, campuses and shopping centres is convenient, especially when mobile data is expensive. But public networks are shared with strangers, and some are set up or misused by criminals to trick people into revealing passwords, banking details or personal information.

The good news: modern encryption on most websites and apps has made public Wi-Fi safer than it used to be, and a few simple habits reduce the remaining risks significantly. This guide explains the real risks, 12 practical safety tips, what to avoid, and what to do if you think your accounts have been compromised.

Make a quick decision at the hotspot

Imagine you’re at a bus terminal and two networks have nearly identical names. Ask a staff member which one the terminal operates. If you only need directions, use the verified connection and visit the site you intended to open. If you need to approve a payment or the sign-in screen asks for an unrelated password, switch to mobile data.

The Real Risks of Public Wi-Fi

According to the US Federal Trade Commission (FTC), most websites and many mobile apps now use encryption to protect information sent between your device and the site, which makes using public Wi-Fi much safer than in the past. However, risks remain:

• Fake hotspots ("evil twins"): a criminal creates a network with a convincing name, like "Airport_Free_WiFi", to capture what you do or send you to fake login pages.
• Phishing pages: a network's sign-in page or pop-up asks for personal details, passwords or payment information it doesn't need.
• Unencrypted sites and apps: information sent to older sites without HTTPS can be seen by others on the network.
• Exposed devices: file sharing or outdated software can expose your device to others on the same network.
• Shoulder surfing: people physically watching your screen or keyboard in public places.

Remember that encryption protects the connection, but it doesn't prove a website is legitimate. Scam sites can use HTTPS too.

12 Practical Safety Tips

1. Confirm the network name with staff

Ask the café, hotel or venue for the exact network name and password. Be suspicious of similar-looking networks or open networks with generic names.

2. Prefer password-protected networks

Networks using WPA2 or WPA3 encryption are safer than completely open networks, though other users with the same password still share the network.

3. Check for HTTPS and the correct address

Look for https:// and the padlock icon, and check the website address is spelled correctly before logging in. Type important addresses yourself or use official apps and bookmarks.

4. Use official apps for banking and mobile money

Official apps from your bank or mobile money provider generally use encryption. Download them only from official app stores. If you're unsure, use mobile data for financial transactions.

5. Turn on two-step verification

Two-step (two-factor) verification means a stolen password alone isn't enough to access your account. Enable it on email, social media, banking and work accounts. Our guide to protecting your online accounts shows how.

6. Use strong, unique passwords

If one account is compromised, unique passwords stop criminals from accessing your other accounts. A reputable password manager helps.

7. Keep your device and apps updated

Updates fix security weaknesses. The FTC recommends keeping your browser, apps and operating system up to date.

8. Turn off automatic connections and sharing

Stop your device automatically joining open networks. On laptops, set public networks as Public (Windows) so file and printer sharing are off, and turn off AirDrop or nearby sharing when not needed.

9. Don't give extra personal information to log in

Be cautious if a Wi-Fi sign-in page asks for more than seems necessary, such as your ID number, card details or email password. Never enter your email password on a Wi-Fi sign-in page.

10. Consider a reputable VPN

A virtual private network (VPN) encrypts traffic between your device and the VPN provider. It can add protection on untrusted networks, but choose a reputable provider carefully: a VPN can see your traffic, and some free VPN apps are themselves risky.

11. Use your phone's hotspot for sensitive tasks

Your mobile data connection, shared through a password-protected personal hotspot, is often a safer choice for banking, work systems or exam portals.

12. Log out and forget the network

Log out of accounts when you finish on shared or public computers, and tell your device to "forget" networks you don't plan to use again.

Safe vs Risky Activities on Public Wi-Fi

Public Computers Are a Bigger Risk

Shared computers in internet cafés, libraries and hotels may have malware or keyloggers installed. Avoid logging into email, banking or job portals on them. If you must, use private browsing, never let the browser save passwords, log out completely, and change your password later from your own device.

Example: Spotting a Fake Hotspot

Example (fictional): Rehema arrives at a hotel and sees two networks: "Hotel_Guest" (password protected) and "Hotel Guest FREE" (open). She asks reception, who confirm only "Hotel_Guest" is theirs. The open network was not run by the hotel. By checking first, she avoided a possible fake hotspot.

What to Do If Something Goes Wrong

1. Change your passwords immediately from a trusted device and network, starting with email.
2. Turn on two-step verification if it isn't already enabled.
3. Contact your bank or mobile money provider immediately if you entered financial details or notice unauthorised transactions.
4. Check account activity for unfamiliar logins and sign out of other sessions.
5. Scan your device for malware.
6. Report to the platform, your employer's IT team (for work accounts) and the police where appropriate.

Learn to recognise related tricks in our guide to phishing and mobile money scams.

Public Wi-Fi Safety Checklist

• ☐ Confirmed the network name with staff
• ☐ HTTPS and correct web address checked
• ☐ Two-step verification enabled on key accounts
• ☐ Device and apps updated
• ☐ File sharing and auto-connect turned off
• ☐ Banking done on mobile data or official app
• ☐ Logged out and forgot the network after use

Frequently Asked Questions

Is public Wi-Fi safe for online banking?

Official banking apps and HTTPS websites use encryption, which reduces risk. Still, for maximum safety, many experts suggest using mobile data or a trusted network for financial transactions, and always enabling two-step verification.

Do I need a VPN on public Wi-Fi?

Not always. Encryption on most sites already protects much of your traffic. A reputable VPN adds a layer of protection on untrusted networks, but it's not a substitute for updates, strong passwords and caution.

Can someone hack my phone just because I joined public Wi-Fi?

The risk is lower for updated devices with sharing turned off, but outdated software and open sharing settings increase exposure. Keep your phone updated.

Is a password-protected café network private?

Not fully. Everyone who has the password shares the network, so continue using HTTPS and other precautions.

Sources

• US Federal Trade Commission: Are public Wi-Fi networks safe? What you need to know
• US Federal Communications Commission: Home network tips

Note: This article is general security guidance. Follow your employer's IT policies for work devices and accounts. Examples are fictional. Last reviewed: November 2026.