Is Public Wi-Fi Safe? What Actually Protects You

Encryption became the norm.

In the early days of public hotspots, most websites did not encrypt traffic, so anyone watching the network could read login details. The FTC now says that because most websites and the majority of mobile apps use encryption, connecting through a public Wi-Fi network is usually safe.

That is how you know a connection is encrypted.

Look for a lock symbol or https at the start of the address bar, on a phone as well as a computer. It is harder to tell whether a mobile app encrypts its traffic, although the FTC notes that most do.

The bigger risk is who runs the site.

Scammers build fake websites and encrypt them too. The FTC warns that on a scammer site your data may be encrypted on its way there, but it is not safe from the people operating the site. Type important addresses yourself or use saved bookmarks rather than following links, and be wary of anyone who contacts you pretending to be a company or government agency.

A VPN shifts trust to the VPN company.

VPN apps can shield what you send over public networks, but the FTC advises researching the app before installing it, reviewing the permissions it requests, making sure it actually encrypts your information, and checking whether it shares your information with third parties.

These steps help on every network, public or home.

The FTC recommends strong passwords with two-factor authentication where available, and keeping security software, the operating system, and the browser up to date, with automatic updates turned on for both computers and phones. At home, the router is the equivalent line of defense; see the guide to router placement for coverage and the router security settings for the rest.