Public Wi-Fi Safety: A Checklist for Airports, Cafés, and Hotels

You land after a long flight, and the first thing you do is hunt for a network name. The airport offers one, the café down the street offers another, and the hotel hands you a slip of paper at check-in with a password on it. Tapping Join takes a second. What you are actually agreeing to is less obvious: an unknown network, run by unknown hardware, shared with unknown people. That does not make public Wi-Fi unusable. It makes it worth ten seconds of thought.

What is genuinely at risk on an open network

Most public networks still do not encrypt traffic between your device and the access point. On a wired or properly configured home network, that matters less. In a departure lounge where anyone can sit down, it means a nearby laptop can capture what passes through the air.

The realistic threats are boring and specific: a fake hotspot with a name almost identical to the real one, a captive portal page that harvests the password you reuse everywhere, someone on the same network scanning for shared folders, or a modified DNS response that sends you to a lookalike login page. Add the low-tech risks — a stranger reading your screen, a laptop left at a table while you queue for coffee — and the picture is complete. HTTPS protects the contents of your traffic from casual snooping in most cases, but it does not hide which sites you visit, and it does nothing at all if you hand your credentials to a page that only looks like the real one.

What to avoid on shared networks

• Financial and government logins. Online banking, tax portals and payment pages belong on cellular data or a network you control.
• Accounts without a second factor. If a login only needs a password, a stolen password is enough.
• Certificate warnings. A browser warning about an invalid certificate on a network you do not own is a stop sign, not a technicality.
• Generic network names. Ask staff for the exact SSID. "Free Airport WiFi" and "Airport_WiFi_Free" are not the same thing.
• Auto-join. Turn it off for open networks so your phone is not quietly connecting to remembered SSIDs wherever you walk.
• Open file sharing, AirDrop for everyone, and discoverable Bluetooth. These are how a stranger ends up browsing your folders.
• Unknown USB charging ports. Use your own charger in a wall socket, or a cable with data pins removed.
• Installing a "connectivity helper" app or browser extension just to get online through a portal.

When a VPN actually helps

A VPN builds an encrypted tunnel from your device to a server you trust, so the local network sees gibberish instead of your traffic. On a hotel or café network, that is a real benefit: it hides what you are doing from the network operator and from anyone passively listening.

Be clear about what it does not do. A VPN will not save you from clicking a phishing link, downloading malware, or typing your password into a fake page. It does not make you anonymous to the sites you log into — they still know exactly who you are. And it does not protect a device that is already compromised.

Free VPNs deserve scepticism. Running servers costs money, and if you are not paying, the business model is often your browsing data, injected ads, or worse. If your employer provides a VPN, use it for work. Otherwise, pick a reputable paid service, or simply use your phone's hotspot with cellular data for anything sensitive and skip the VPN entirely.

Set up before you leave home

1. Install operating system and browser updates. Old browser versions are the ones that get exploited on hostile networks.
2. Turn on full-disk encryption and a strong screen lock. Biometrics are convenient, but a real PIN or passphrase is the backstop.
3. Enable two-factor authentication with an authenticator app where the service supports it.
4. Install a password manager so you are not reusing credentials under pressure.
5. Turn off auto-join for open networks and forget networks you no longer use.
6. Check that file sharing and printer sharing are off, and that your firewall is on.
7. Know your hotspot and data plan limits before you travel, so cellular is a real fallback rather than a surprise bill.
8. Pack your own charger and cable. A privacy screen filter is cheap insurance against shoulder surfing on a plane.

Airport, café, hotel: three different situations

Airports

You will find lookalike SSIDs, crowded networks, and long waits that tempt you into doing real work. Confirm the network name with an information desk rather than a sign, keep your bag and devices with you, and treat anything involving money as a hotspot task.

Cafés

Small businesses often run consumer routers with default settings. The network may be shared with printers, tablets and point-of-sale terminals. Ask for the exact name, decline offers to log in with a social account, and log out of sessions when you finish rather than simply closing the laptop lid.

Hotels

Room Wi-Fi frequently puts every guest on one flat network. A portal asking for your room number and surname is normal; one asking for card details is not. Avoid the business centre computer for anything private, and remember that smart TVs and streaming devices on the same network are other people's hardware, not yours.

A two-minute routine for the next network

Before you connect, get the SSID from a person, not a poster. Check the padlock in your browser on the first page you open. Turn off auto-join and file sharing. Use your hotspot for banking, work email and anything with a password you would hate to lose. Keep a VPN running for the ordinary browsing in between, and forget the network when you leave so your devices stop remembering it.

If something feels wrong afterwards — a login that behaved oddly, a prompt you did not trigger — change the password from a trusted connection and contact the service directly using a number or address you look up yourself, not one from an email or pop-up. Convenience on public Wi-Fi is fine. Blind trust in it is not.

Photo: Roman Castillo / Pexels