Is Public Wi-Fi Safe? What a VPN Does and When to Use One

Years ago, using coffee shop Wi-Fi meant a real chance that someone at the next table could read what you sent. Today most websites and apps encrypt their connections, so the content of your banking session or email is generally protected even on an open network. That is a big improvement.

Public Wi-Fi still carries some risks, though, and VPN advertising often makes those risks sound bigger or smaller than they are. Here is a balanced picture.

What has changed

Most websites now use HTTPS, the encrypted version of the web, which you can recognize by the address starting with https and by the absence of a "Not secure" warning in your browser. Most phone apps encrypt their connections too. On an untrusted network, encryption keeps outsiders from reading what you type or the pages you load.

What can still go wrong

• Fake hotspots. Anyone can create a network named "Airport Free WiFi" or something close to a real café's name. Connecting to it gives the creator a view of which sites you visit and a chance to show you fake pages.
• Login page tricks. Many public networks show a sign-in page before letting you online. A fake one might ask for an email password or payment details it has no reason to need.
• Your device is visible to others. On the same network, other devices may be able to see yours. If file sharing or network discovery is on, you may expose more than you intend.
• Some information is still visible. Even with HTTPS, a network operator can often see which websites you connect to, though not what you do on them.
• Older devices and apps that do not encrypt properly are more exposed.
• People nearby can simply look at your screen.

Simple habits for public networks

1. Confirm the network name with staff before connecting, and avoid networks with generic or slightly misspelled names.
2. Tell your computer the network is public. On Windows, choose the Public network profile. This turns off discovery and sharing features.
3. Turn off file sharing and limit wireless sharing features such as AirDrop to contacts only.
4. Do not enter passwords or payment details on a Wi-Fi sign-in page beyond what is clearly needed, such as a room number or a terms checkbox.
5. Watch for browser warnings. If your browser warns that a connection is not private, do not continue.
6. Forget the network afterward so your device does not join it automatically next time.
7. For sensitive work, use your phone's personal hotspot instead. It is a network you control.

What a VPN does

A virtual private network (VPN) creates an encrypted tunnel from your device to a server run by the VPN provider. Your traffic travels through that tunnel before reaching the internet.

That means:

• The local network, such as the café's Wi-Fi, cannot see which sites you visit.
• Your internet provider cannot see which sites you visit either.
• Websites see the VPN server's location rather than yours.

Many employers require a work VPN to reach internal systems from outside the office. If yours does, use it as directed.

What a VPN does not do

• It does not make you anonymous. The VPN provider can see a great deal about your traffic. You are moving trust from the local network to that company.
• It does not stop phishing or malware. A fake login page is just as dangerous through a VPN. Our guide to spotting a phishing email still applies.
• It does not fix weak passwords or an account without two-factor authentication.

Choosing a VPN

If you decide a personal VPN makes sense for frequent travel or public work:

• Use your employer's VPN for work, not a personal one, unless your workplace approves.
• Choose a provider with a clear privacy policy that explains what it logs, ideally with independent audits it can point to.
• Be cautious with free VPNs. Running a VPN costs money, and some free services pay for it by collecting and selling data.
• Install only from official app stores or the provider's website.

The home office connection

Most remote work happens at home, where your own router is the network that matters. Our guides to securing a Wi-Fi router and working from home securely cover that side.

Frequently asked questions

Do I need a VPN at home?

For most people on a secured home network, a VPN is optional. Use one if your employer requires it for work systems or if you want to keep your browsing hidden from your internet provider.

Is using my phone's hotspot safer than public Wi-Fi?

Usually, yes. Your hotspot is a private network you control, protected by a password you set, and the connection to the mobile network is encrypted.

Is it safe to use my banking app on hotel Wi-Fi?

Banking apps encrypt their connections, so the risk is low on a legitimate network. For extra peace of mind, use your phone's mobile data or hotspot for financial tasks while traveling.