Public Wi‑Fi Safety: What’s Actually Risky (and How to Protect Yourself)

You’ve heard both versions:

The truth is in the middle. A lot of traffic is encrypted today, but public networks still create opportunities for attackers — especially when you sign in to the wrong thing.

Here’s what’s actually risky and what to do in real life (airport, café, hotel).

What’s risky on public Wi‑Fi

1) Fake hotspots (evil twins)

Someone creates a Wi‑Fi network named like the real one:

You connect, and they can intercept traffic or push you to fake login pages.

Fix: ask staff for the exact network name, or use your phone hotspot when unsure.

2) Captive portal phishing

Those “accept terms” pages can be copied.

Fix: if a portal asks you to sign in with Google/Microsoft/password, stop. A legitimate portal usually only asks to accept terms or enter a simple code.

3) Old protocols / unencrypted websites

HTTPS is common, not universal. If you visit a site without HTTPS, your data can be read.

Fix: don’t enter passwords on sites that aren’t HTTPS (look for the lock icon and the correct domain).

4) Device-to-device attacks on open networks

On poorly configured networks, other devices can see your device on the local network.

Fix: turn off file sharing / AirDrop discovery, and keep your firewall on.

What’s less risky than people think

“They can see everything I do”

Most modern sites use HTTPS, so they can’t read the content of your bank session just because you’re on Wi‑Fi.

But they can often see:

And phishing risks still apply.

The practical protection checklist

Option A (best): use your phone hotspot

If it’s sensitive (banking, work email, admin dashboards), hotspot is usually the simplest win.

Option B: use a VPN (helpful, not magic)

A VPN encrypts your traffic from your device to the VPN provider. It helps against local snooping and some hotspot tricks.

Always do these:

If you think you connected to a fake hotspot

  1. Turn off Wi‑Fi immediately.
  2. If you entered a password, change it (from a safe network).
  3. Check account security logs for new sessions.
  4. Enable or re-check 2FA.

FAQs

Is hotel Wi‑Fi safer than a café?

Not necessarily. It’s still shared. Treat it like public Wi‑Fi.

Can I do banking on public Wi‑Fi?

If you must, use your hotspot or a VPN, and verify the domain carefully. Ideally avoid it.

What about “Private Wi‑Fi Address” on iPhone?

Keep it on — it reduces tracking across networks.

Related reading

Sources