SentryFi- SentryFi
- WiFi guides
- Is public WiFi safe?
Guide
Is public WiFi safe?
Short version: much safer than it used to be, because most of the web is encrypted. The remaining risks are specific — and checkable.
Usually, yes, for everyday browsing: the FTC notes that because of widespread encryption, using public WiFi is usually safe. The risks that remain are lookalike (evil-twin) networks, fake sign-in pages and unencrypted pages or apps. Join the venue’s exact network, use HTTPS, and check the network before banking.
What protects you today
- HTTPS everywhere. Most websites and apps encrypt their traffic, so people on the same WiFi can’t read it (FTC).
- WiFi passwords (WPA2/WPA3). The FTC notes you can only be sure a network uses effective encryption if it asks for a WPA or WPA2 password.
- Encrypted DNS on your phone. Android uses Private DNS by default where the network allows it — though Google points out it only secures DNS lookups, nothing else.
- Private WiFi addresses. iPhone and Android randomize your device address on new networks, which limits tracking across networks.
What can still go wrong
- Evil twins. CISA describes copycat access points that use a trusted network name and a stronger signal than the real one.
- Fake encrypted sites. Attackers can create fake websites with a padlock too (FTC), so a lock icon alone isn’t proof.
- Sign-in pages. The captive portal is where people type details; a fake one can ask for more than it should.
- DNS tampering and hidden proxies. A network can answer lookups differently or route traffic through a proxy — signals worth checking.
When to use a VPN or mobile data
The UK NCSC calls VPNs one way to protect data in transit across an untrusted network. Use your work VPN for work, and consider mobile data for banking on a network you haven’t checked. A VPN doesn’t fix a fake sign-in page, though — you still need to join the right network.
The 5-step public WiFi check
- Confirm the exact network name with staff or the venue’s website (CISA’s first tip).
- Complete the sign-in page only if its address belongs to the venue or its provider.
- Check the network: sign-in done, DNS answers match trusted DNS, certificates valid, no signs of a hidden proxy.
- Use HTTPS; stop on any certificate warning for a site you know.
- Turn off Auto-Join for networks you won’t use again.
By place
Frequently asked questions
Can someone hack my phone on public WiFi?
Simply joining a network doesn’t give someone control of your phone. The realistic risks are lookalike networks, fake sign-in pages and unencrypted traffic, which the steps above address.
Is public WiFi safe with a VPN?
A VPN encrypts your traffic across the network, which covers most remaining risks. You still need to avoid typing details into a fake sign-in page.
Is mobile data safer than public WiFi?
Mobile data isn’t shared with strangers on the same hotspot and doesn’t use captive portals, which removes two common risks. Travel eSIMs add a different question: which country your data exits from.
Related guides
Sources
- FTC — Are Public Wi-Fi Networks Safe? What You Need To Know
- FTC — Tips for using public Wi-Fi networks (PDF)
- CISA — Securing Wireless Networks (ST05-003)
- CISA — Eviction Strategies: Evil Twin (T1557.004)
- NCSC (UK) — Device security guidance: Virtual Private Networks
- Android Help — Manage advanced network settings on your Android phone (Private DNS, randomized MAC)
- Apple Support — Use private Wi-Fi addresses on Apple devices
