How to Use Public WiFi Safely (and When Not to)

Public WiFi has a mixed reputation that's mostly fair. A decade ago, public WiFi was genuinely dangerous — anyone sitting in the same cafe could easily read the web pages you were browsing and capture your passwords. Today, thanks to the widespread adoption of HTTPS (the lock icon in your browser's address bar), most traffic is encrypted between your device and the website you're visiting, even on public networks.

That said, public WiFi is still not as safe as your home network, and certain risks remain. An attacker on the same network can still see which websites you're visiting (the domain name), even if they can't see the page contents. Some older websites and apps don't use HTTPS properly. Fake WiFi networks that look legitimate ("FreeAirportWiFi") can be set up by attackers to trick users into connecting. And on Windows or macOS, if you have file sharing turned on for a home network and accidentally connect with that profile on a public network, your files can be exposed.

The practical rules are reasonable: avoid logging into your bank, filing taxes, or entering credit card information on public WiFi unless you have a trusted VPN (virtual private network). Browsing news, reading email, watching videos, and general web browsing on public WiFi is fine for most people. If you need to do sensitive work on the go, using your phone's mobile hotspot (also called tethering) is usually safer than any public WiFi. Your phone creates its own cellular-backed network that others on the cafe WiFi can't see.

A trusted VPN — NordVPN, Mullvad, Proton VPN are commonly recommended — encrypts all your traffic before it leaves your device. Avoid free VPNs; they often sell your browsing data to make money.