Using hotel and café Wi-Fi safely

Public Wi-Fi safety comes down to three habits: join the real network, stick to encrypted websites and apps, and keep file sharing off. Do that, and hotel or café Wi-Fi is fine for everyday browsing. For banking or work on an untrusted network, use a trusted VPN or your phone's mobile data instead.

What are the real risks of public Wi-Fi?

Fake hotspots. Anyone can set up a network called "Hotel Guest" or "Free Airport WiFi". If you join a fake one, the person running it can see where your traffic goes and may show fake login pages.

Open networks. A network with no password usually has no Wi-Fi encryption. Others nearby can capture what your device sends over the air, although encrypted websites and apps still protect the content.

Shared networks. On a hotel network, your phone sits alongside hundreds of other devices. Some networks keep guests apart, but many do not. Any shared folders or services left open on your laptop could be visible.

Captive portals. The login pages that ask for your room number or email are normal, but they are also an easy place for a fake hotspot to ask for more than it should.

The good news is that most websites and apps now use encryption by default, which protects the content of what you do even on an open network. Public Wi-Fi safety is mostly about the network you join and what your device leaves open.

Public Wi-Fi safety: steps before you join

Ask staff for the exact network name. Check the spelling, including capitals and punctuation. Fake networks often use a near match.
Prefer networks with a password. A network where you need a password from reception, or a printed card, is better than an open one.
Be wary of duplicates. If you see two networks with almost the same name, ask which is real.
Check QR codes. A Wi-Fi QR code should only offer to join a network. If a code in a public place opens a website asking for payment or personal details, close it. See how to share your Wi-Fi with a QR code for how real Wi-Fi codes behave.
Turn off auto-join for public networks. On most phones, saved networks have an auto-connect option. Switch it off for public ones, so your phone does not join a fake network with the same name later.

While you are connected

Check for the padlock. Use websites that start with https and show a padlock. Do not type passwords on pages without it.
Keep apps updated. Updated apps use current encryption.
Use a trusted VPN for sensitive tasks. A VPN encrypts everything between your device and the VPN service. It moves trust from the café to the VPN company, so choose a reputable one.
Or use mobile data. For banking or work logins, your own mobile data, or a hotspot from your phone, avoids the shared network altogether.
Turn off sharing. On laptops, mark the network as public, which usually turns off file and printer sharing. On phones, turn off nearby sharing features when you do not need them.
Do not accept unexpected certificate warnings. If your browser warns that a connection is not private, do not click through it on public Wi-Fi.
Log out when you finish. Especially on shared or borrowed devices.

After you leave

Forget the network. On most phones, open your saved Wi-Fi networks, tap the public one and choose "Forget". This stops the phone from joining a look-alike network later.
Do not store public passwords long term. They change often and are shared widely. Keep your own passwords somewhere safe instead. See where to keep your Wi-Fi passwords safely.
Review any accounts you logged in to if you suspect a fake network.

What your IP address shows on public Wi-Fi

On public Wi-Fi, websites see the public IP of the hotel or café, not your home address. The network operator can see which devices connected and when. Our guide on what your IP address can reveal explains more.

Rentals and holiday homes

Holiday rentals often have their own Wi-Fi run by the host. The same steps apply. If you are worried about devices on the rental network, our guide on checking a rental for hidden cameras on the Wi-Fi explains what a scan can and cannot tell you.

Quick checklist

Confirm the network name with staff.
Prefer a password-protected network.
Use https sites and up-to-date apps.
Use a trusted VPN or mobile data for banking.
Turn off sharing and auto-join.
Forget the network when you leave.

How CellRadar helps

CellRadar can scan a Wi-Fi QR code to join a network, and its Wi-Fi Analyzer shows the nearby networks, which helps you spot look-alike names. The Privacy Sweep lists the devices on the Wi-Fi you joined and the Bluetooth devices nearby in one tap. Its password vault keeps your own Wi-Fi passwords in encrypted storage on your phone.

Frequently asked questions

Is hotel Wi-Fi safe for online banking?

It is safer to use mobile data or a trusted VPN for banking on any shared network. Banking apps do use encryption, but avoiding the shared network removes the main risk.

Can someone see what I do on public Wi-Fi?

They may see which sites you connect to, especially on an open network. Encrypted websites and apps keep the content of pages, messages and passwords hidden.

Is a password-protected café network secure?

It is better than an open one, but everyone who has the password shares the network. Treat it as public and follow the same steps.

Should I use my phone's hotspot instead?

For sensitive tasks, yes. Your own hotspot keeps your laptop off the shared network and uses your mobile connection instead.