Is public Wi-Fi safe? An honest guide to café and airport networks
For years we were all warned that public Wi-Fi was a den of hackers waiting to steal our banking details. That advice is now mostly out of date, and a lot of it was really selling you a VPN. Here’s the honest picture: public Wi-Fi is far safer than it used to be, but it isn’t risk-free, and there are a couple of sensible habits worth keeping.
Why public Wi-Fi is safer than it used to be
The big change is that almost the entire web now uses HTTPS — the little padlock in your browser. When you see it, the connection between your device and that website is encrypted. The café, the airport, or anyone snooping on the network can see that you visited a site, but not what you typed, your passwords, or your card number. That single shift killed off most of the old “someone on the same wifi is reading your banking” risk.
What can still go wrong
- Fake hotspots. A scammer sets up a network called “Free Airport WiFi” and waits for you to join. Once you do, they can try to push you to dodgy pages. Stick to the official network name — ask staff if unsure.
- Old or broken sites. A site without the padlock is genuinely unsafe on shared wifi. If you don’t see HTTPS, don’t type anything sensitive.
- Shoulder surfing. Low-tech but real — someone simply reading your screen.
- Auto-connect. Phones that rejoin any open network without asking can connect to something you’d never have chosen.
When a VPN genuinely helps
A VPN encrypts everything between you and its server, which adds a layer of privacy from the network owner and shields you on networks you don’t trust. It also blocks man-in-the-middle attacks — where someone on the same network secretly slips between you and the websites you’re using to eavesdrop or meddle, the classic public-wifi trick. It’s a reasonable thing to switch on at an airport or hotel. Just know what it is first — see what a VPN is and isn’t and free VPN vs paid — and don’t buy one purely out of fear of coffee-shop wifi.
The safest "public wifi" is often your own phone. Tethering to your mobile data, or using it directly, avoids untrusted networks entirely — handy for a quick bank check on the move.
Sensible habits on any public network
- Look for the padlock before typing anything personal.
- Turn off “auto-join” for open networks in your phone settings.
- “Forget” a public network when you leave so your phone doesn’t silently rejoin.
- Keep your phone and laptop updated — that quietly fixes most real risks.
Still weighing it up? See do you actually need a VPN at home, and start with our simple privacy guide. More in our VPNs and privacy section.