Cybersecurity Crash Course

Public Wi-Fi Safety: What Actually Protects You

The old advice ("never bank on café Wi-Fi!") is stale — HTTPS changed the game. Here's what genuinely protects you in 2026, ranked by impact.

By HarryPublished September 2026

Café interior with seating
AI-generated illustration

What actually protects you, ranked

1. HTTPS everywhere (automatic, free)

Nearly all sites and apps now encrypt traffic end-to-end. A snooper on café Wi-Fi sees which sites you visit, not passwords or page contents. Check for the padlock; modern browsers warn loudly when it's missing.

2. A reputable VPN (best single upgrade)

A VPN encrypts everything — hiding even destination sites from the hotspot operator and defeating evil-twin attacks. Essential for frequent travelers, hotel Wi-Fi, and countries with aggressive snooping.

  • Pick: audited no-logs providers with WireGuard support; avoid "free unlimited" VPNs (you're the product)
  • Costs: roughly $3–$6/mo on annual plans

3. Forget-network hygiene (free, underrated)

Your phone auto-reconnects to networks named "Starbucks WiFi" — including an attacker's clone. After traveling: forget public networks in Wi-Fi settings and disable auto-join for open networks.

4. Two-factor on everything financial

Even if a credential leaks on hostile Wi-Fi, 2FA stops the login. Use an authenticator app or passkeys, not SMS codes, where offered.

What doesn't matter much anymore

  • "Never bank on public Wi-Fi." Your bank's app uses certificate-pinned HTTPS. With a VPN it's a non-issue; without one it's still low-risk.
  • Evil-twin panic. Real attack, rare in practice — and a VPN neutralizes it entirely.
  • MAC randomization worries. Your phone already does this by default. Leave it on.

The 2-minute travel setup

  1. Install and test your VPN before the trip
  2. Enable auto-connect VPN on untrusted networks if offered
  3. Turn off auto-join for open networks
  4. Confirm 2FA on email, bank, and password manager

Quick answers

Is public Wi-Fi safe to use?

Mostly yes in 2026 — HTTPS encrypts nearly everything. Remaining risks (fake hotspots, operator snooping) fall to a VPN and forget-network hygiene.

Do I need a VPN on public Wi-Fi?

It's the single best upgrade: full-traffic encryption for a few dollars a month. Frequent travelers should have one.

Sources

Keep learning