Public Wi-Fi: What Is Actually Risky and What Is Not

You have probably heard that using public Wi-Fi is dangerous. The truth is more nuanced. Years ago, much web traffic was unencrypted and easy to snoop on. Today, most sites use HTTPS, which protects what you send between your device and the website even on an open network.

What has improved

The padlock in your browser means the connection is encrypted. Someone on the same network can see that you visited a site, but generally not the content of your messages or passwords.

What is still risky

• Fake hotspots with names that look official, set up to capture traffic.
• Pages that trick you into entering a password on a look-alike site.
• Old or poorly configured apps that do not encrypt their data.
• Devices with file sharing turned on and outdated software.

Simple precautions

• Confirm the exact network name with the staff before connecting.
• Pay attention to browser warnings about certificates. Do not click through them.
• Keep your operating system and apps updated.
• Turn off automatic connection to open networks and file sharing.
• Use two-factor authentication so a stolen password alone is not enough.

Should you use a VPN?

A VPN encrypts all traffic between your device and the VPN provider, which can help on untrusted networks. It also moves your trust to the provider, so choose a reputable one. For most people, HTTPS, updates and two-factor authentication matter more.

The easy alternative

For sensitive tasks such as banking, use your phone's mobile data or a personal hotspot instead of a public network. It is cheap insurance when something really matters.