Public Wi-Fi makes staying connected easy. It also makes it easier for the wrong person to intercept your data if you are not careful. The good news is that protecting yourself requires only a few habits.
Understand the Risk
The risk with public Wi-Fi is not that someone can read everything you do. Most websites use HTTPS, which encrypts data in transit. The real risks are:
- **Man-in-the-middle attacks**: Someone intercepts traffic between you and the router
- **Rogue hotspots**: A fake "Coffee Shop Wi-Fi" set up by an attacker to capture your data
- **Session hijacking**: Someone captures your login session cookie and impersonates you on certain sites
These attacks require skill and proximity. They happen, but they are not common. Taking basic precautions reduces your risk significantly.
Use a VPN
A VPN encrypts all your internet traffic before it leaves your device. Even if someone intercepts it, they see only encrypted gibberish. This is the single most effective step you can take.
Proton VPN free tier is the most trustworthy free option. Mullvad is the best paid option if privacy is a priority.
Turn on your VPN before connecting to a public network. Keep it on until you are on a trusted network again.
Stick to HTTPS Sites
Look for the padlock icon in your browser's address bar. HTTPS means the connection between you and that specific website is encrypted. Most major websites use HTTPS by default.
If a site shows "Not Secure" or asks you to click through a certificate warning, leave immediately.
Turn Off Auto-Connect
Your phone can automatically connect to saved Wi-Fi networks. On public Wi-Fi, this is a risk — your phone might connect to a rogue hotspot with the same name as a network you have used before.
Go to Settings > Wi-Fi, tap the saved networks you use publicly (coffee shops, airports, hotels), and toggle off "Auto-connect" for each one.
Avoid Sensitive Accounts on Public Wi-Fi
If you can avoid it, do not log in to your banking app, email, or any account with sensitive data on public Wi-Fi. Use your mobile data for those. The small data cost is worth the reduction in risk.
Use Your Phone as a Hotspot Instead
If you have a reasonable mobile data allowance, your own hotspot is always safer than public Wi-Fi. It is encrypted, password-protected, and entirely under your control.
Enable it from Settings > Hotspot or the quick settings panel. Set a strong password. Turn it off when you are done.
After Using Public Wi-Fi
Forget the network after you leave. Go to Settings > Wi-Fi, find the network, tap it, and select "Forget." This prevents auto-reconnect and clears any saved credentials.
The goal is not to avoid public Wi-Fi entirely — it is to use it with the same care you would give to any shared resource.
