How to Stay Safe on Public Wi-Fi
Coffee shops and airports offer free Wi-Fi, but it comes with risks. Here's what to do — and what to avoid.
What Is Public Wi-Fi?
Public Wi-Fi is any wireless internet connection that's available to everyone in a public place — the free Wi-Fi at Starbucks, the airport lounge, a hotel lobby, a library, or a doctor's waiting room. You don't need a password from your own internet provider to connect; you simply tap the network name and you're online.
This is genuinely useful. It lets you check your email, look something up, or video call your grandchildren while you're away from home — without using up your phone's data. But there's a trade-off: these networks are shared with everyone in the building, and that creates risks that your home Wi-Fi doesn't have.
Why Public Wi-Fi Can Be Risky
When you use your home Wi-Fi, only people you've given your password to can join that network. Public Wi-Fi is different — anyone nearby can connect, including people with bad intentions.
A criminal can set up a fake Wi-Fi network with a name that looks legitimate — like "Starbucks_Guest" or "Airport_Free_WiFi" — and when you connect to it, they can see everything you're doing. This is called a "man in the middle" attack, though you don't need to remember the name. What matters is knowing it happens.
Even on legitimate public networks, a skilled attacker on the same network can sometimes intercept data travelling between your device and the internet — including passwords typed into websites that aren't properly protected.ℹ️ How Often Does This Actually Happen?
Public Wi-Fi attacks are real, but they're more common in busy, high-value locations like airports and hotel business centers than in your local coffee shop. The bigger everyday risk is accidentally connecting to a fake network. Staying alert about which network you join goes a long way.
What's Safe — and What Isn't
Not everything you do on public Wi-Fi carries the same risk. Here's a simple guide:
✓ Generally Safe on Public Wi-Fi
- Reading news websites and articles
- Searching Google or looking things up
- Watching videos on YouTube or streaming apps
- Checking the weather or maps
- Video calling via FaceTime, Zoom, or WhatsApp
- Reading (not sending) emails that don't contain sensitive info
✗ Avoid on Public Wi-Fi
- Logging into your bank or financial accounts
- Paying bills or making purchases online
- Logging into accounts with sensitive information (medical, tax)
- Sending emails that contain account numbers or passwords
- Entering your Social Security number anywhere
- Accessing work files or documents
The rule of thumb: if you wouldn't say it loudly in a crowded room, don't send it over public Wi-Fi.
How to Connect Safely
When you do use public Wi-Fi, these habits will protect you:
- 1Verify the network name before connecting. Ask a staff member for the exact name of the Wi-Fi network — don't just pick the strongest signal or one with a plausible-sounding name. Fake networks often have names nearly identical to the real one.
- 2Look for the padlock. When you visit a website, look at the address bar. A padlock icon (🔒) and an address that starts with https:// (not just http://) means the connection to that site is encrypted. Never enter a password on a site without the padlock.
- 3Turn off file sharing. On a Mac, go to System Settings → General → Sharing and make sure everything is turned off. On Windows, when you connect to a new network your computer may ask "Is this a public or private network?" — always choose Public.
- 4Forget the network when you're done. On your iPhone, go to Settings → Wi-Fi, tap the network name, and tap "Forget This Network." This stops your phone from automatically reconnecting next time you're nearby — which could be to a fake version of that network.💡 Your Phone's Data Is Often the Safer Choice
If you need to do something sensitive — like checking your bank balance — while you're out, it's safer to turn off Wi-Fi on your phone and use your phone's cellular data connection (the bars shown in the top corner) instead of public Wi-Fi. Your phone's data connection is private and encrypted in a way public Wi-Fi is not.
What About Hotel Wi-Fi?
Hotel Wi-Fi is public Wi-Fi — the same cautions apply. It's perfectly fine for browsing and streaming, but avoid banking and sensitive accounts. Hotel networks can be especially risky in business districts where many travelers connect with work laptops containing valuable data, making them a more attractive target for criminals.
Some hotel networks also require you to enter your room number or last name before connecting. This doesn't make the network more secure — it just identifies you as a guest. The same rules still apply.
One Extra Layer: Consider a VPN
A VPN (Virtual Private Network) is an app that wraps all your internet traffic in an extra layer of encryption, making it much harder for anyone on the same network to snoop on what you're doing. Think of it as a private tunnel that your data travels through, even on a public network.
VPNs aren't strictly necessary for most everyday use — the safe habits above will protect you well. But if you travel frequently or regularly use public Wi-Fi to check email or log into accounts, a VPN is worth considering. Reputable options include Mullvad, ProtonVPN, and NordVPN, which all offer easy-to-use apps for iPhone and Android.⚠️ Watch Out for Free VPNs
Many free VPN apps are unsafe — some actually sell your browsing data to advertisers, which defeats the entire purpose. Stick to well-known paid options if you decide to use one. The ones named above all have good reputations among security experts.
The Bottom Line
Public Wi-Fi is fine for browsing, watching videos, and casual internet use. The main rule to remember: never check your bank, pay bills, or enter sensitive personal information while connected to a public network. When in doubt, use your phone's cellular data instead — it's private, encrypted, and under your control.