How to make public Wi‑Fi less risky for your personal data

Free Wi‑Fi at cafes, airports and hotels is convenient, but it can quietly expose your accounts, messages and personal details if you are not careful. You do not need to stop using it, but you should treat it as a shared and potentially untrusted space.

With a few simple habits and tool choices, you can greatly reduce what others on the same network, or the network owner, can see about you. The goal is not perfection, but removing the easiest opportunities for misuse.

What actually happens on public Wi‑Fi

On a public network, your phone or laptop connects to a router that you do not control, often with weak configuration and many strangers attached. Anyone on the same network, or the operator, may be able to observe unencrypted traffic or try to redirect it.

Today, most major websites use HTTPS, which encrypts what you send and receive so it is hard to read in transit. The weak points are how you join the network, which sites or apps still use older protocols and how much extra data your device leaks in the background.

Recognise the higher risk situations

Some public networks are more sensitive than others. Open networks with no password, or ones that only use a simple captive portal, tend to be poorly segmented and easier for local attackers to scan and probe.

Networks with names like “Free Airport WiFi” or “Cafe Guest” can also be spoofed. A nearby attacker can create a hotspot with a similar name and trick devices into joining. This is especially likely if your device is set to connect automatically to known networks.

Reduce what your device shares automatically

Before connecting, turn off features that broadcast or trust nearby devices by default. On laptops, disable file and printer sharing if you do not need it outside your home or office network. On phones, consider turning off automatic Wi‑Fi connection and use manual joins instead.

It also helps to disable Bluetooth and AirDrop or similar sharing options when you are in crowded public places. These radios can expose your device name and sometimes let others attempt unsolicited sharing or pairing requests.

Prefer your own connection for sensitive tasks

For banking, password changes, accessing work systems or handling medical or legal information, use your mobile data connection when possible. A personal 4G or 5G connection reduces the number of parties who can interfere with or observe your traffic.

If you must use public Wi‑Fi for sensitive actions, try to keep them brief, log out when finished and avoid reusing the same network for long account management sessions. Separating casual browsing from critical tasks is a simple but effective defensive habit.

Use a VPN correctly, not as magic protection

A virtual private network (VPN) can help by encrypting most of your traffic between your device and the VPN provider, so people on the local Wi‑Fi see less of what you are doing. It also limits some tracking by the hotspot owner.

However, you are shifting trust to the VPN provider, which can see your traffic instead. Choose a reputable paid service, avoid unknown free VPN apps and enable the VPNbeforeyou join or as soon as you connect to a public network, not halfway through your session.

Check the basics in your browser and apps

Always confirm you see “https://” and the padlock icon in your browser address bar on sites where you sign in or enter payment details. If your browser warns about certificate problems, expired certificates or mismatched domain names, do not ignore it just to reach the page faster.

In apps, keep automatic updates on so security fixes arrive promptly. Outdated apps may use weaker encryption or be more vulnerable to hijacking attempts when used on untrusted networks.

Harden your accounts in case something leaks

Public Wi‑Fi risk is not only about interception. Malicious hotspots may try to trick you into fake login pages or capture passwords that are reused elsewhere. Strong account defences limit the damage if this happens.

Use unique passwords for important accounts and turn on multi‑factor authentication (MFA), preferably using an authenticator app or hardware key instead of SMS. This way, a stolen password alone is less likely to grant full access.

A quick safety routine for public Wi‑Fi

• Turn off auto‑connect to Wi‑Fi networks and join manually.
• Confirm the official network name and any required password with staff if possible.
• Disable sharing features and close apps you do not need while connected.
• Use a trusted VPN for general use, and mobile data for the most sensitive tasks.
• Log out of important accounts when finished and forget the network if you rarely visit.

If you suspect your device has been compromised after using a public hotspot, disconnect, run a reputable security scan, change key passwords on a known good connection and, for serious concerns, seek help from a qualified IT or cybersecurity professional.