Quick answer
Public WiFi in a cafe or hotel can be unsafe because traffic is often unencrypted, making it easier to eavesdrop. Use HTTPS, disable auto-connect, avoid banking apps, and enable 2FA. For sensitive actions, prefer mobile data or a VPN.
How to recognize the problem
- You connect to a WiFi network that has no password or is shared with everyone
- The browser shows a warning that the connection is not secure
- After connecting, you are asked to log in through a portal that looks suspicious
- You notice unknown devices on the network or slow internet
- You get fake login pages for accounts
Most common causes
Unencrypted traffic
Open public networks and portals often do not encrypt traffic or use a shared password, so data is exposed to others on the same network.
Fake access points
An attacker can set up a network with a name similar to a legitimate one to intercept your data.
Auto-connect
The device remembers networks and connects automatically, even to insecure ones, without your confirmation.
Access by other devices
On a shared network, other users can try to access your device if sharing is enabled.
Step-by-step fix
- 1
Check if you really need WiFi
If you have mobile data, use it for sensitive actions like banking or logging into business systems. Use public WiFi only for basic browsing and reading news.
- 2
Disable auto-connect
On your phone or laptop, remove public networks from the saved list. In Windows, go to
Settings > Network & internet > Wi-Fi > Manage known networksand remove unknown networks. On Android and iOS, forget the network via the WiFi option. - 3
Use HTTPS and check the address
Always check that the address starts with
https://and that the browser does not show a warning that the connection is not secure. Avoid sites that ask for login without HTTPS and do not proceed if you see a warning. - 4
Do not access sensitive accounts
Avoid logging into online banking, email, and social media over public WiFi. If you must, use a VPN and an account with 2FA already enabled.
- 5
Enable VPN if you have one
A VPN encrypts traffic between your device and the server. Use a trusted VPN that you set up in advance, not one offered by the cafe itself.
- 6
Turn off file and printer sharing
In Windows, open
Settings > Network & internet > Advanced network settings > Advanced sharing settings(on older versions in Control Panel) and turn off file and printer sharing. On macOS, inSystem Settings > General > Sharing, turn off sharing. - 7
Watch out for fake login portals
If a login page asks for personal information, card number, or password, close it. Legitimate hotels usually ask for a room number or consent to terms, but not for a password or card details.
- 8
Log out and forget the network
When you finish, log out of accounts and remove the network from the saved list. On your phone, turn off WiFi or switch to mobile data.
If you notice suspicious activity
If you suspect someone intercepted your connection, immediately change passwords on accounts you accessed, but do so over mobile data or a home network. Check login history on accounts and enable 2FA if not already. Notify the network administrator if it is a hotel or cafe network. For business devices, inform the IT department to check for unauthorized access.
How to prevent it
- Use mobile data for banking and business accounts
- Enable 2FA on all important accounts
- Disable auto-connect to public WiFi networks
- Use a VPN for sensitive actions on public WiFi
When to call a professional
If you suspect your device is infected or data is compromised, consult an IT expert for a detailed check. Also, if you manage a business network, consult an expert for security settings.
IT infrastructure maintenance · Servers, networks, backup, security and helpdeskFAQ
Is public WiFi in a hotel safer than in a cafe?
Not necessarily. Hotel networks often have a password, but that does not mean traffic is protected to the destination. Still use HTTPS and avoid sensitive logins.
How do I know if a network is fake?
Check the exact network name with staff. Fake networks often have a similar name with an addition or typo. If unsure, do not connect.
Is a VPN enough for protection on public WiFi?
A VPN protects traffic but does not protect against phishing pages. Still check addresses and do not enter data on suspicious sites.