How to Protect Your Data on Public Wi-Fi

Public Wi-Fi is everywhere — coffee shops, airports, hotels, libraries. It’s convenient, and it’s usually free. But it comes with real risks that most people ignore until something goes wrong.

What we tested

We used public Wi-Fi networks in hotels, cafés, and airports over three months, testing with and without VPNs, and monitoring for connection stability, encryption, and data exposure.

The real risks of public Wi-Fi

When you connect to an open network, your traffic can be intercepted by anyone on the same network. This isn’t hypothetical — it’s a well-documented attack method called a “man-in-the-middle” attack.

There are three specific threats to understand:

1. Unencrypted networks — Many public networks don’t encrypt traffic, meaning anything you send can be read by others on the network.
2. Fake hotspots — Attackers set up networks with names like “Free Airport WiFi” to trick you into connecting.
3. Session hijacking — If you’re logged into an account, an attacker can steal your session cookie and access your account without needing your password.

What you can do about it

Here are the practical steps, ranked from easiest to most effective:

1. Stick to HTTPS

Look for the padlock icon in your browser’s address bar. If a site doesn’t use HTTPS, don’t enter any personal information on it. This is the bare minimum.

2. Turn off auto-connect

Your phone and laptop will happily connect to any network they’ve seen before. Turn this off in your Wi-Fi settings so you’re not silently connecting to a network that’s been compromised since your last visit.

3. Avoid sensitive tasks on public Wi-Fi

Don’t do your banking, don’t enter credit card details, and don’t access your company’s internal systems on public Wi-Fi without protection. Save those tasks for your home network or your phone’s hotspot.

4. Use a VPN

This is the most effective single step you can take. A VPN creates an encrypted tunnel between your device and the internet. Even if someone intercepts your traffic on the public network, all they see is encrypted noise.

The FCC explicitly recommends using a VPN on public Wi-Fi for exactly this reason.

Why a VPN is the simplest solution

All the other steps require you to remember something or change your habits. A VPN runs in the background and protects everything automatically. Once it’s set up, you don’t have to think about it.

The catch is that not all VPNs are equal. Free VPNs often sell your data, which defeats the purpose. You want a paid VPN with a clear privacy policy, independent audits, and servers in the countries you care about.

Our top picks

For most people, we recommend one of these two:

• NordVPN — The fastest option we’ve tested, with strong security and a proven track record. Check NordVPN’s latest deal.
• Surfshark — Unlimited devices on one account, which makes it the better value for families. Check Surfshark’s latest deal.

Both offer money-back guarantees, so you can test them risk-free.

Frequently Asked Questions

Is public Wi-Fi safe if I don’t enter any passwords? Not entirely. Even browsing activity can be monitored on unencrypted networks. And session hijacking can give attackers access to accounts you’re already logged into.

Is mobile data safer than public Wi-Fi? Yes, mobile data is encrypted by your carrier. If you have a good data plan, using your phone’s hotspot is safer than public Wi-Fi without a VPN.

Does a VPN slow down public Wi-Fi? Slightly, but the encryption overhead is minimal on modern VPNs. The bigger slowdown is often the public network itself.

Are free VPNs safe? Most are not. Many free VPNs sell user data or inject ads. If you need a VPN, pay for one with a clear privacy policy.

The bottom line

Public Wi-Fi isn’t something to avoid entirely — it’s something to use carefully. Stick to HTTPS, turn off auto-connect, avoid sensitive tasks when unprotected, and use a VPN for everything else.

That’s it. Four habits, and you’re safer than 99% of people on the same network.