Modern websites and apps usually encrypt their connections, so public Wi-Fi is not automatically unsafe. It can still expose which services you contact, place you on an untrusted local network and make it easier to join a convincing fake hotspot.
Prefer mobile data for sensitive work
For banking, health information, confidential work or account recovery, use your phone’s mobile data or personal hotspot when practical. This avoids relying on an unknown local network.
Confirm the network name
Ask staff for the exact network name and sign-in process. A network called “Hotel Guest WiFi” may be legitimate—or may have been created by someone nearby.
Treat unexpected certificate warnings as a reason to stop. Do not install a certificate or device-management profile merely to get free internet access unless an authorised administrator has told you to do so.
Keep sharing disabled
Choose the device’s Public network setting when offered. Turn off nearby file sharing, printer sharing and automatic connection to open networks.
After leaving, tell the device to forget the network so it does not reconnect later without your knowledge.
Check for HTTPS
Browsers should show an HTTPS address for sensitive sites. Do not bypass a full-page certificate warning. A padlock means the connection to that site is encrypted; it does not mean the organisation behind the site is trustworthy.
Consider a VPN for a defined reason
A reputable VPN can hide traffic destinations from the local network and protect applications that otherwise expose network traffic. It moves trust to the VPN provider, however, and does not make you anonymous or protect you from phishing and malware.
Use a work VPN when your employer requires it. For a personal VPN, understand what you expect it to protect before subscribing.
Keep the basics in place
- Install operating-system and application updates.
- Use a firewall where the operating system provides one.
- Use unique account passwords and strong authentication.
- Avoid leaving an unlocked device unattended.
