How to Use Public Wi-Fi Safely While Travelling

The Wi-Fi at an airport gate may have a convincing name. The hotel network may require a room number and surname. A café may display its password beside the counter. None of these details, by themselves, tell you how secure the connection is.

That does not mean every public network is dangerous. Most reputable websites and apps now encrypt information while it travels between your device and their servers. Public Wi-Fi is therefore less alarming than it was years ago. Still, a shared network is not the right place to become careless—especially if your laptop contains work files, saved passwords or access to financial accounts.

The most useful approach is not to avoid public Wi-Fi completely. It is to decide which tasks are reasonable on it, which tasks should wait and when switching to mobile data is worth the inconvenience.

Start With the Task, Not the Network

Checking a museum’s opening hours is not the same as approving a bank transfer. Reading a public webpage is not the same as opening confidential client records.

Before connecting, ask what would happen if the activity went wrong. If the task involves money, identity documents, private customer information or access to an employer’s internal systems, a personal hotspot or trusted mobile connection is usually the better option.

For lower-risk activities such as reading the news, checking maps or browsing restaurant menus, a verified public network may be adequate. This simple distinction is more practical than treating every online action as equally sensitive.

Confirm the Network Name

A network called “Airport Free WiFi” may belong to the airport, but it could also have been created by somebody nearby. Similar names, added spaces and words such as “Guest” or “Free” can make an unofficial network look convincing.

Ask a member of staff for the exact network name rather than choosing the strongest signal on your screen. At a hotel, use the details given at reception or printed on official room information. If two nearly identical networks appear and nobody can confirm which one is genuine, do not guess.

A password does not automatically make a shared network trustworthy. It may only control who can join. The operator, network configuration and other connected devices still matter.

Use Mobile Data for the Sensitive Work

A personal hotspot is often the simplest backup for online banking, payroll, tax portals and confidential work. It gives you more control over the connection and avoids the uncertainty of an unfamiliar network.

This is not always possible. Roaming may be expensive, local coverage may be poor and some laptops consume data quickly. Before travelling, check whether your phone plan permits tethering and whether your destination has a practical local SIM or eSIM option.

When data is limited, reserve it for the tasks that matter most. Large downloads and video calls can use hotel or coworking Wi-Fi, while account changes and financial transactions can wait for the hotspot.

Check the Website Before Entering Information

Modern browsers show https in the address and usually display a lock or security indicator. This means information travelling between your browser and that website is encrypted.

HTTPS is important, but it does not prove that the website itself is honest. A convincing phishing page can also use encryption. Check the complete domain name before entering a password, payment-card number or verification code.

Be especially cautious when a login page appears immediately after joining Wi-Fi. Hotels, airports and cafés often use legitimate sign-in portals, but an unexpected page asking for an email password, payment details or software installation deserves suspicion.

If a familiar service suddenly looks different, close the page and open the official app or type the address yourself. Do not follow a login link supplied by an unsolicited email, text message or pop-up.

Know What a VPN Can and Cannot Do

A reputable virtual private network creates an encrypted connection between your device and the VPN provider. This can add useful protection on an unfamiliar network, and some employers require their own VPN before staff can access company systems.

A VPN is not a complete safety system. It does not make a fraudulent website legitimate, stop you from downloading a malicious attachment or protect an unlocked laptop left on a café table. It also shifts some trust from the Wi-Fi operator to the VPN provider.

If you plan to use one, install and test it before leaving home. A free VPN chosen hurriedly at an airport is not necessarily better than the network you are trying to avoid. For company work, use the service and settings approved by your employer rather than substituting a personal product.

Prepare the Device Before the Trip

Public Wi-Fi safety begins before connecting. A fully updated laptop with strong account protection is less exposed than a neglected device, regardless of which network it uses.

• Install operating-system, browser and app updates.
• Use a screen lock and a strong device password.
• Enable multi-factor authentication for important accounts.
• Turn on device encryption where it is available.
• Disable file sharing and network discovery on public networks.
• Back up essential files before departure.
• Make sure remote-location or remote-wipe features are configured.

Multi-factor authentication is particularly useful if a password is exposed, but the method matters. An authenticator app or security key can remain usable when a foreign SIM, weak mobile coverage or delayed text messages make SMS codes unreliable.

Watch What Happens Around the Screen

Not every security problem travels through the network. In a crowded lounge or café, another person may be able to read a document, see a password being entered or photograph the screen. A device can also disappear during a short trip to the counter.

Choose a seat that does not expose the screen to constant foot traffic. Lower the viewing angle, avoid displaying confidential material unnecessarily and lock the device whenever you step away. For sensitive work in busy places, a privacy screen may be more useful than another piece of security software.

Phone conversations deserve the same care. A secure connection cannot protect information that is spoken loudly in a public room.

Turn Off Automatic Connections

Phones and laptops often remember networks they have used before. This is convenient at home, but less helpful while travelling. A device may reconnect automatically to a network with a familiar name without asking you to examine it.

Disable automatic connection to open networks. When you finish using a hotel, airport or café network, disconnect and select Forget This Network if you do not expect to use it again. Turn off Wi-Fi and Bluetooth when they are not needed.

These small actions also make it easier to notice which connection your device is actually using. That matters when moving between an airport lounge, aircraft Wi-Fi, a hotel lobby and a personal hotspot in the same day.

Follow Your Employer’s Rules

If the device or information belongs to an employer, personal judgment may not be enough. Some organisations prohibit public Wi-Fi, require a company VPN or restrict access to certain files outside approved locations.

Check the remote-work and security policies before travelling. Ask what to do if the company VPN fails, whether mobile tethering is permitted and how a lost device should be reported. Discovering those rules after a laptop has gone missing is too late.

This is also a reason to keep work and personal activity separate. Company files should not be copied into a personal email account simply because it is easier to open abroad.

If Something Feels Wrong

Disconnect if the network repeatedly redirects you, displays unusual certificate warnings, asks you to install unfamiliar software or causes trusted websites to behave differently. Switch off Wi-Fi and use mobile data or wait for another connection.

If you entered a password on a suspicious page, change it from a trusted connection. Start with the affected account and any other account using the same or a similar password. Review recent sign-ins, end unfamiliar sessions and contact the relevant bank or employer if financial or business information may have been exposed.

Do not dismiss an incident because nothing happened immediately. Stolen account details may be used later.

A Routine That Is Easy to Remember

For ordinary browsing, confirm the network name, use updated devices and check that the website address is correct. For banking, identity documents and confidential work, switch to mobile data or another trusted connection. Use the employer’s approved VPN when required, and lock the screen whenever the device leaves your hands.

Public Wi-Fi does not need to be treated as a trap waiting in every café. It should simply be treated as a connection you do not control. Once the sensitive tasks are separated from the ordinary ones, working while travelling becomes both safer and less complicated.

Guidance checked against the U.S. Federal Trade Commission’s public Wi-Fi advice, the CISA public Wi-Fi guidance and Australian Cyber Security Centre guidance. Security requirements may differ by employer and device.