Is public wifi safe? What to do on any device

Is public wifi safe? Usually, yes for ordinary browsing when you verify the network, use HTTPS, and keep sharing and firewall settings tight. It is still an untrusted network, so use mobile data or a trusted connection for banking, sensitive work, or any login page that looks unexpected.

Is public wifi safe in practice?

Two questions matter: can another person on the hotspot read traffic, and can the network lead you to a dishonest service? HTTPS encrypts the connection between your browser or app and the website. It does not prove the site is legitimate, hide all metadata, or protect a file you download and run.

A Wi-Fi password is not a complete safety test: it does not tell you who operates the network, whether clients are isolated, or whether the portal is genuine. The FTC explains why current HTTPS makes public Wi-Fi usually usable while still recommending updates, strong account protection, and scam awareness.

The public Wi-Fi risks that still matter

Fake hotspots and captive portals

A hotspot name is not proof of ownership. Someone can imitate an airport, hotel, or café network. The Australian Cyber Security Centre recommends checking the SSID with staff or signage, turning off auto-connect, and forgetting the network afterwards.

Treat a captive portal like an email link. Check its spelling, domain, and certificate before entering details. If the browser says the certificate is invalid, stop. HTTPS on a phishing page encrypts your connection to the scammer; it does not make the scammer trustworthy.

Device exposure and privacy

Even with HTTPS, an untrusted network can probe services your device exposes. File sharing, printer sharing, remote administration, and development servers are unnecessary on a café connection. A stranger nearby can also read an unlocked screen or watch you type a password.

A safe public Wi-Fi routine

1. Verify the exact network name. Ask a staff member or use permanent signage. Do not choose the strongest signal or a name that merely looks familiar.
2. Join as a public network. On a laptop, use the public/untrusted profile so discovery and sharing are restricted.
3. Update before you travel. Install operating-system, browser, and security updates before relying on an unfamiliar connection. Turn on multifactor authentication for important accounts.
4. Use HTTPS and follow warnings. Check the address and domain, not just the padlock. Never continue past a certificate warning because the page looks familiar.
5. Keep sensitive work elsewhere when possible. Cellular data, a personal hotspot, or a trusted office connection is simpler for payments, account recovery, and confidential documents.
6. Turn off sharing and keep the firewall on. You do not need to expose folders, printers, or listening services to get online.
7. Forget the network when finished. Disconnect, remove its saved profile, and turn Wi-Fi off if you are not using it. This prevents a later automatic join to a network with the same name.

Use a screen lock and keep the device with you: a firewall cannot stop shoulder surfing, a fake login page, or a malicious download you approve.

Lock down the device you are carrying

Windows 11

Open Start > Settings > Network & internet > Wi-Fi > the connected network. Under Network profile type, select Public network. Then open Windows Security, choose Firewall & network protection, select the public profile, and confirm Defender Firewall is on. Microsoft says the public profile hides the PC and disables file and printer sharing.

macOS

Open Apple menu > System Settings > Wi-Fi > Advanced. Next to the public network, turn off Auto-Join or choose Remove From List. For the firewall, use Apple menu > System Settings > Network > Firewall. Apple’s current guidance covers forgetting a network and disabling Auto-Join.

Linux and Ubuntu

Linux menus vary by desktop. In GNOME, open Activities, search for Wi-Fi, find the saved network, click its settings button, and choose Forget Connection. This is the current GNOME Help path. Ubuntu, KDE, and other distributions use different firewall and sharing controls.

Android

On stock Android or a Pixel, open Settings > Network & internet > Internet. Touch and hold the saved public network, then tap Forget. Saved networks can reconnect automatically. Samsung and other manufacturers may use Settings > Connections > Wi-Fi.

iPhone and iPad

Open Settings > Wi-Fi, tap the info button beside the network, and choose Forget This Network. To keep the password but prevent a repeat join, turn off Auto-Join on that same page. For unknown networks, set Ask to Join Networks to Ask or Notify. Apple documents these current controls in Manage Wi-Fi settings on iPhone.

When a VPN helps—and when mobile data is simpler

A VPN can encrypt traffic between your device and the VPN service, reducing what the local hotspot can read. It can be useful for frequent travel, work systems, or a network you cannot avoid. It does not validate the SSID, stop phishing, protect you from malware, or make the VPN provider disappear as a party you trust. Research the provider’s privacy policy and use an employer-provided VPN for work when available.

For one sensitive task, a personal hotspot is often the clearer choice: the cellular connection is yours to authenticate, and there are fewer public-network devices nearby. A VPN can still be useful on cellular or home Wi-Fi, but it is not a substitute for keeping the device and accounts secure. If you are comparing IP privacy options, see how to hide your IP address and remember that public and private IP addresses are different scopes.

Use Loqmi to check the connection, not to prove trust

Loqmi shows the public IP, ISP, and location that a website sees. That can reveal a route change, but it cannot prove a hotspot is genuine or a device is malware-free.

1. Before joining, open Loqmi’s IP tool and note the public IP, ISP, and approximate location.
2. Join the verified hotspot, set the device to public/untrusted, and reload Loqmi. A different public IP is expected when the hotspot or VPN uses a different egress.
3. Run Loqmi’s speed test if you need to judge whether the connection is usable. Speed is a performance check, not a security verdict.
4. Disconnect, forget the network, and check later that the device does not reconnect automatically.

For the limits of IP information, read what someone can learn from your IP. Verify the network, protect the device, and move sensitive work to a connection you trust.