Is public Wi-Fi safe? An honest guide to café and airport networks
For years we were all warned that public Wi-Fi — in cafés, airports and hotels — was a den of hackers waiting to steal our banking details. That advice is now mostly out of date, and a lot of it was really selling you a VPN. Here’s the honest picture: public Wi-Fi is far safer than it used to be, but it isn’t risk-free, and there are a couple of sensible habits worth keeping. (Just want the verdict on airport Wi-Fi? Jump to that section below.)
Why public Wi-Fi is safer than it used to be
The big change is that almost the entire web now uses HTTPS — the little padlock in your browser. When you see it, the connection between your device and that website is encrypted. The café, the airport, or anyone snooping on the network can see that you visited a site, but not what you typed, your passwords, or your card number. That single shift killed off most of the old “someone on the same wifi is reading your banking” risk.
What can still go wrong
- Fake hotspots. A scammer sets up a network called “Free Airport WiFi” and waits for you to join. Once you do, they can try to push you to dodgy pages. Stick to the official network name — ask staff if unsure.
- Old or broken sites. A site without the padlock is genuinely unsafe on shared wifi. If you don’t see HTTPS, don’t type anything sensitive.
- Shoulder surfing. Low-tech but real — someone simply reading your screen.
- Auto-connect. Phones that rejoin any open network without asking can connect to something you’d never have chosen.
Is airport Wi-Fi safe specifically?
Airport Wi-Fi gets singled out because we use it when we’re tired, rushed and often abroad — and because busy terminals are a favourite spot for fake hotspots. The honest answer is the same as anywhere else: thanks to HTTPS, browsing, checking email and even logging into your bank are generally fine — as long as you’re on the genuine network and you see the padlock. The airport-specific risks are practical ones:
- Pick the official network. Names like “Free Airport WiFi” or “_FreeWiFi” can be a stranger’s laptop fishing for connections. If in doubt, check the airport’s signage or ask staff for the exact name.
- Don’t auto-connect to open networks while travelling — your phone can silently join a fake one without telling you.
- For anything sensitive, your mobile data or a VPN is the safer bet. Roaming data or a cheap travel eSIM often costs less than you’d expect, and it sidesteps the shared network entirely.
The same logic covers hotel and café Wi-Fi — the rules don’t change, only the setting does.
When a VPN genuinely helps
A VPN encrypts everything between you and its server, which adds a layer of privacy from the network owner and shields you on networks you don’t trust. It also blocks man-in-the-middle attacks — where someone on the same network secretly slips between you and the websites you’re using to eavesdrop or meddle, the classic public-wifi trick. It’s a reasonable thing to switch on at an airport or hotel. Just know what it is first — see what a VPN is and isn’t and free VPN vs paid — and don’t buy one purely out of fear of coffee-shop wifi.
The safest "public wifi" is often your own phone. Tethering to your mobile data, or using it directly, avoids untrusted networks entirely — handy for a quick bank check on the move.
Sensible habits on any public network
- Look for the padlock before typing anything personal.
- Turn off “auto-join” for open networks in your phone settings.
- “Forget” a public network when you leave so your phone doesn’t silently rejoin.
- Keep your phone and laptop updated — that quietly fixes most real risks.
Still weighing it up? See do you actually need a VPN at home, and start with our simple privacy guide. More in our VPNs and privacy section.