Guide
Is public Wi‑Fi safe?
Mostly, for everyday browsing, because nearly all websites now encrypt your pages with HTTPS. But public Wi‑Fi isn't private: the network can usually see which sites you visit, and fake hotspots are easy to set up. Confirm the network name, check for HTTPS, and use a VPN on networks you don't control.
What the Wi‑Fi network can see
When you join a network, every bit of your traffic passes through equipment you don't control. What the owner of that equipment, or someone else on the network, can learn depends on whether your traffic is encrypted.
| Information | Visible on public Wi‑Fi? |
|---|---|
| Which websites you visit (domain names) | Usually yes, even on HTTPS sites |
| Pages, passwords and messages on HTTPS sites | No, they're encrypted |
| Anything on a site or app without encryption | Yes |
| Your device's name and type | Often |
| When and how much you browse | Yes |
The good news: most websites now use HTTPS, so the contents of your pages and your passwords are encrypted even on open networks. Google's Transparency Report shows that the large majority of pages loaded in Chrome use HTTPS. The remaining exposure is the list of sites you visit, older apps that skip encryption, and fake networks.
The real risks
Fake hotspots
Anyone can create a network called “Airport Free WiFi” or copy the name of a café's network. If you join it, the person running it sits between you and the internet. They can show you fake login pages or try to push you to unencrypted sites.
Your browsing history in plain view
Even with HTTPS, the network usually sees the names of the sites you open: your bank, your health portal, a dating app. That's revealing on its own, and it's exactly what a hotel or café network can log.
Apps and devices that don't encrypt
Most major apps encrypt their traffic, but not every app, smart gadget or older service does. On an open network, that traffic can be read by anyone nearby with the right tools.
Captive portals and shared devices
The “accept the terms” page you see when you join hotel Wi‑Fi often asks for your email, room number or social login. Treat it like any other form from a stranger and share as little as possible.
Five habits that keep you safe
- Check the network name with staff. Ask for the exact name before joining, and don't connect to look-alikes.
- Look for HTTPS before you type anything. Your browser shows a lock or “secure” indicator. If a login page isn't secure, stop.
- Turn off auto-join for public networks. Your phone shouldn't reconnect to “Free WiFi” just because it saw that name once.
- Keep your phone and apps updated. Updates fix the security holes that open networks make easier to exploit.
- Use a VPN on networks you don't control. It encrypts everything between your device and the VPN server, so the local network sees only an encrypted stream, not the sites you visit.
What a VPN does on public Wi‑Fi, and what it doesn't
A VPN creates an encrypted tunnel from your device to the VPN server. The café, hotel or anyone else on the network can see that you're connected to a VPN, but not which sites you open or what you send. Websites see the VPN server's IP address instead of yours.
It won't protect you from a phishing page you choose to trust, from malware already on your device, or from the website itself: the site still sees what you do there, and accounts you're signed into still know it's you.
With Privalune, you open the app and tap connect before you start browsing. The free plan includes free protected time every day, which covers a coffee-shop session or a layover.
The bottom line
Public Wi‑Fi is safer than it was ten years ago, mainly thanks to HTTPS. It isn't private: the network can still see where you go, and fake hotspots are easy to set up. Confirm the network name, keep an eye on HTTPS, and switch on a VPN when you're on a network you don't control.