Is public Wi-Fi still risky in 2026?

Why public Wi-Fi had a bad reputation

Around 2010, many websites sent information without encryption. On an open cafe network, anyone nearby with free software could watch other people's browsing and sometimes take over their accounts. Consumer agencies such as the US Federal Trade Commission warned people to be very careful with public hotspots.

What has changed

• HTTPS almost everywhere: the vast majority of websites and apps now encrypt connections. Someone else on the same Wi-Fi can see that you visited a site, but not what you typed or read there. See HTTP vs HTTPS.
• Apps encrypt too: banking, email and messaging apps protect their own traffic.
• Better Wi-Fi security: WPA3 adds protection even on some open networks.
• Browsers warn you loudly about insecure pages.

So the old advice "never use public Wi-Fi" is now too strong for most everyday tasks.

The risks that remain

• Fake hotspots: a criminal sets up a network called "Airport Free WiFi" and watches or redirects what connects.
• Login and sign-up pages: some hotspots ask for your email, phone or social media login. Fake ones may try to collect passwords.
• Lookalike websites: a malicious network can push you towards a fake site. HTTPS does not help if the site itself is fake.
• File sharing and open services: laptops with sharing switched on can expose files to others on the same network.
• Auto-connect: devices that join any network with a familiar name can be tricked.

Sensible habits

1. Ask staff for the exact network name and avoid similar-looking ones.
2. Use your phone's mobile data or hotspot for banking and other sensitive tasks if you are unsure.
3. Never enter passwords on a Wi-Fi login page; a genuine hotspot does not need your email password.
4. Check for the padlock and the right website name before signing in anywhere.
5. Set public networks as "Public" on Windows, which switches off file sharing, and turn off auto-join for networks you no longer use.
6. Consider a reputable VPN if you use public Wi-Fi often. It hides your activity from the local network, though it does not stop scams. See How a VPN works.

Tip: Keep 2-step verification on for important accounts. Even if a password is captured somewhere, it is not enough on its own.

The balanced view

Public Wi-Fi is now reasonably safe for browsing, streaming and most apps, provided you watch for fakes. The remaining risks are mostly about being tricked rather than being silently "hacked". Our note on Wi-Fi basics explains the technology behind it.

Hotel and airline Wi-Fi

Paid or room-based Wi-Fi in hotels and on planes is still public Wi-Fi: many strangers share it. The same habits apply. Be particularly careful with pop-ups that appear after you connect, asking you to install an "update" or a "connection app". Close them and check through your device's own settings instead.