How to stay safer on public Wi‑Fi without turning into a full‑time IT expert

Free Wi‑Fi in cafes, airports or hotels feels like a small daily win. It saves mobile data, keeps you connected between meetings or flights, and makes remote work far more flexible.

At the same time, open networks are a favorite hunting ground for digital thieves. You do not need to be paranoid or a technical expert to reduce your exposure, but you do need a clear plan for how you connect and what you do online.

Why public Wi‑Fi can be risky

When you join an open hotspot, your device is sharing radio waves with strangers nearby. In some cases, attackers can watch unencrypted traffic, impersonate networks or nudge you into fake login pages. The goal is often to steal passwords, intercept sensitive data or install malicious software.

Modern apps and websites now use HTTPS by default, which encrypts a lot of what you send and receive. That has made casual snooping harder, but it has not removed the danger. Many attacks now focus on tricking you to connect to the wrong hotspot or to approve something you do not understand.

Recognise the most common hotspot tricks

A useful starting point is to know what bad behavior looks like. The most frequent issue on public Wi‑Fi is not someone reading every packet, but someone building a convincing fake network and waiting for people to connect.

Look out for these patterns when you are on the move:

• Look‑alike network names:An attacker sets up “Coffee_Wifi_Free” next to the real “Coffee_WiFi”. People choose the stronger signal without checking.
• Networks that ask for too much:A captive portal that demands your email, phone number and permission to install a “security app” is a red flag.
• Pop‑ups asking for repeated logins:Unexpected prompts for your email password or cloud storage password after connecting to Wi‑Fi should be treated as suspicious.

When in doubt, ask staff for the exact hotspot name and whether there is a password. A 10‑second check at a hotel front desk or cafe counter closes off one of the easiest paths for attackers.

What to avoid doing on shared networks

The simplest way to lower your exposure is to limit what you do on unsecured connections. Some activities are far riskier than others, especially if you are using an open hotspot with no password or an unknown operator.

Try to avoid the following when you are on public Wi‑Fi, unless you have an extra protection layer in place:

• Online banking, trading or accessing sensitive financial dashboards
• Changing passwords for important services
• Sending confidential business documents or contracts
• Accessing internal company tools that are not protected with strong encryption

If something cannot wait, use your mobile data connection instead. A short switch to a mobile hotspot for a money transfer or urgent document upload is often the safer choice.

Use a VPN wisely, not blindly

Virtual private networks create an encrypted tunnel between your device and a remote server. This makes it significantly harder for someone on the same hotspot to inspect your traffic or tamper with it. For many travelers and remote workers, this is the main extra safeguard on public Wi‑Fi.

However, a VPN only shifts where you are placing your trust. The provider can, in theory, see a lot of what you do. If you decide to use one, choose a well‑known service with transparent policies, updates and a clear track record, or use the VPN offered and managed by your employer.

Turn the VPN on before you log in to any sensitive site, and leave it running while you are working. If the connection drops, pause sensitive activity until the tunnel is restored or you switch to mobile data.

Strengthen device settings before you travel

Most of the protection against bad hotspots is in the small configuration choices you make on your laptop, phone or tablet. Spending a few minutes on this at home pays off every time you connect outside.

Start with how your device joins networks. Turn off automatic joining of open hotspots, and delete networks you no longer use. This reduces the chance that your device will silently connect to a fake network with a familiar name.

Next, adjust sharing and discovery features. On phones and laptops, disable file sharing, printer sharing and “device discovery” modes when you are on public connections. These options are useful at home, but they can offer attackers an easy way to probe your device in a cafe or airport.

Rely on modern encryption wherever possible

Not all Wi‑Fi networks are equal. If you have a choice, pick options that are protected by a password and modern standards like WPA2 or WPA3, which provide better encryption between your device and the router. This is common in hotels and some coworking spaces.

A shared password printed on a receipt is not perfect, but it is a step up from completely open networks. If a location offers both an open “Guest” network and a password‑protected “Secure” network, always choose the latter and confirm the password with staff.

Watch what your browser is telling you

Your web browser is a valuable early‑warning system. When you are on untrusted Wi‑Fi, pay close attention to the address bar and security indicators. A secure connection should show HTTPS and a padlock icon next to the site address.

If the padlock is missing, if you see warnings about invalid certificates, or if the address bar shows something slightly different from the site you intended to visit, stop and look more closely. Do not ignore browser warnings just to load a page a bit faster.

Create a routine for work on the road

For people who work regularly from cafes, trains or hotels, the goal is not perfection but a consistent routine. A simple checklist helps you avoid rushed decisions when you are tired or distracted.

A basic travel routine might look like this:

• Ask for the official hotspot name and password before connecting
• Disable automatic joining of unknown networks on all devices
• Turn on your VPN before opening business tools or communication apps
• Use mobile data for banking or highly sensitive actions
• Log out of important services and disconnect when you leave

By treating public Wi‑Fi as a convenience rather than a neutral space, you can enjoy the benefits while shrinking the openings available to attackers. Small, consistent steps are often enough to stay off the easiest target list.