Is Public Wi-Fi Safe When You Travel?
Hotel, airport and cafe Wi-Fi is much safer than it used to be, but a few risks remain, especially fake hotspots. Here's what the real risks are, simple habits that keep you safe, whether you need a VPN, and what to know about public USB charging ports.
By Pond.com editors Updated 3 min read
Quick answer
- Most websites and apps now encrypt your data, so public Wi-Fi is far safer than it once was.
- The biggest risk is a fake hotspot with a name that looks like the real one; ask staff for the exact network name.
- Use your mobile data for banking and payments if you can.
- A reputable VPN adds protection on untrusted networks but isn't essential for everyone.
- Charge from your own charger and a wall outlet rather than unknown USB ports.
Free Wi-Fi at the airport, hotel or cafe is a big help when you travel, especially without a data plan. It's also one of the most common worries travelers have about security. The good news is that a few simple habits remove most of the risk.
This article is general information, not professional security advice.
What the real risks are
Most websites and apps now use encryption (the padlock or "https" in your browser), so other people on the same network can't easily read what you send. The main risks today are:
- Fake hotspots: a network set up by a scammer with a name like "Airport_Free_WiFi," to capture logins or send you to fake sites.
- Fake login pages: some fake networks ask you to "sign in" with your email password or card details.
- Old or unpatched devices, which may have security holes that newer software has fixed.
Simple habits that keep you safe
- Ask for the exact network name at the hotel desk, cafe or airport information point.
- Never enter passwords or card details on a Wi-Fi sign-in page, beyond what the venue asks for, like a room number.
- Use apps for banking and email rather than logging in through a browser on public Wi-Fi.
- Watch for browser warnings about certificates or insecure sites, and don't continue if you see one.
- Turn on two-step verification for email and banking before you go, so a stolen password isn't enough.
- Update your phone and laptop before you leave.
- Turn off auto-join for public networks and file sharing on your laptop.
Mobile data or a VPN for sensitive tasks
For banking, payments or anything sensitive, mobile data is safer than public Wi-Fi, even with a travel eSIM. See how to set up a travel eSIM.
A VPN encrypts everything between your device and the VPN company. It's worth having if you often use networks you don't trust. Choose a well-known paid service, since free ones may collect and sell your data.
Public USB charging ports
US authorities have warned that public USB ports at airports and hotels could, in theory, be tampered with to install malware or steal data, sometimes called "juice jacking." Real cases are rare, but the fix is easy:
- Use your own charger in a wall outlet.
- Carry a power bank for long days. See are power banks allowed on planes?
- Tap "Don't trust" if your phone asks whether to trust a device when you plug in to charge.
Common questions
It's usually fine with your bank's own app, which encrypts the connection. If you'd rather be cautious, switch to mobile data or use a VPN for banking and payments, and never ignore a browser warning about a security certificate.
Not necessarily. A VPN encrypts everything between your device and the VPN company, which helps on networks you don't trust. Choose a well-known paid service; free VPNs may sell your data. Some countries restrict VPNs, so check before you go.
Yes. Your phone may automatically join networks with the same name later, which is how some fake hotspots work. Remove hotel and airport networks you no longer need and turn off auto-join for public networks.