Public Wi-Fi Safety Without The Scare Stories
What is actually risky on hotel and airport Wi-Fi in 2026, and what stopped being risky years ago.
In short: public WiFi safety is now less about eavesdropping and more about fake networks and portals that ask for things. For public WiFi safety, use your phone hotspot for anything sensitive and never enter a work password into a captive portal.
Most public Wi-Fi advice is a decade out of date. Nearly everything is encrypted now, so the classic story about someone reading your email from the next table is largely history.
What is left is still worth knowing, and it is short.
What Is Genuinely Risky
Fake networks. Anyone can name a hotspot after the hotel. If you connect to the wrong one, everything you do goes through somebody else first, and while the contents are still encrypted, the pattern is not.
Captive portals that ask for more than they should. A network login page asking for your work email password is not a network login page.
Shoulder surfing, which is unglamorous and still the most common way information leaves a laptop in an airport.
The Four Rules Worth Keeping
Ask the venue for the network name rather than guessing. Thirty seconds, and it removes the fake network problem entirely.
Never enter a work password into anything a network shows you. Portals ask for a room number or an email address, never a password.
Use the company VPN if you have one, particularly for anything internal. It is less about eavesdropping now and more about reaching internal systems safely.
Turn off automatic connection to open networks. Your laptop rejoining a hotel network you used last year, in a different city, is exactly the gap the fake ones rely on.
Tethering Is Usually Better
If the work matters, use your phone as a hotspot instead. A mobile connection has none of the fake network problem and modern data allowances make it practical.
It is also usually faster than conference Wi-Fi, which is a low bar but a real benefit.
If tethering is not an option and the work is sensitive, do the work later. Very little is so urgent it must happen in a departure lounge.
The Risks That Sit Beside The Network
A careful traveler can choose the right network, ignore every odd portal, and still leak a client file before boarding. It happens at the hotel business center printer, on a speakerphone call at the gate, or at a free charging kiosk.
Public WiFi safety covers more than the connection itself. The shared computer, the stranger in the next seat and the charging port can expose as much as a fake network.
Travel Habits That Undo Public WiFi Safety
Signing in to work accounts on a hotel business center computer. Shared machines can keep passwords, downloads and open sessions after you walk away, and you cannot see what is installed on them.
Leaving AirDrop or Nearby Share open to everyone. In a crowded terminal, strangers can push files to your phone and one tap opens them, so set sharing to contacts only before you travel.
Plugging into a public USB charging port. Strong public WiFi safety habits do not help if your phone opens a data connection to a port you cannot inspect, so carry your own plug and use a wall socket.
Taking client calls on speaker or with the screen facing the aisle. People nearby can hear names and figures without any technical skill at all, so use headphones and save sensitive detail for somewhere private.
When Something On A Trip Needs A Call
A browser warning that the connection is not private, on a site you use daily, is your cue to disconnect at once and call 678-374-4352. It can be a sign of a network sitting in the middle.
Use the security line, option 1, answered 24/7, if a sign-in alert shows your account active in a city you have already left. Do the same if your laptop sat unattended long enough to worry you.
Tell the help desk your travel dates before a trip abroad as part of your public WiFi safety preparation. It is open Monday to Friday, 8 AM to 5 PM Eastern.
Why The Old Advice Is Only Half Right
Public WiFi safety advice used to be about eavesdropping, the idea that anyone on the same network could read your traffic. That is much less true than it was, because almost every site and app now encrypts its connection.
What has replaced it is more targeted and harder to notice. Fake networks that look legitimate. Captive portals that ask for credentials they have no business asking for. Prompts to install a certificate or an update in order to get online.
So the practical rule has shifted. It is less about avoiding public WiFi entirely and more about being careful what you type into it and what you agree to.
For most business travelers, good public WiFi safety comes down to using your own hotspot when it matters and being suspicious of anything that asks for something.
Your Phone Hotspot Is The Simple Answer
If you are doing anything that involves client information, money, or signing into something important, use your phone as a hotspot rather than the venue network.
It is not that hotel WiFi is inevitably malicious. It is that a hotspot removes an entire category of question from your day. You know whose network it is, nobody else is on it, and no portal is going to ask you to accept anything.
Data use for email, documents and voice calls is modest. A day of ordinary work on a hotspot is unlikely to trouble a normal plan, and it is far cheaper than an incident.
Keep the hotspot password on rather than open, and turn it off when you are finished so it is not sitting there advertising itself in an airport lounge.
If your plan does not include tethering, tell us and we will look at what it would cost, because it is one of the better value security controls available.
Captive Portals And What They Should Never Ask
A captive portal is the page that appears when you join a venue network and have to accept terms or enter a room number. Most are harmless. The dangerous ones are indistinguishable at a glance.
A legitimate portal may ask for a room number, a surname, an email address for marketing, or a code from the counter. None of that is sensitive on its own.
A portal should never ask for your work email password, your bank details, a credit card for free WiFi, or permission to install a certificate or a profile on your device. Any of those means stop, disconnect, and use your hotspot instead.
If a portal will not load at all and keeps redirecting, that is also a reason to leave rather than to keep trying. Public WiFi safety is mostly the discipline of walking away from something mildly inconvenient.
Settings Worth Changing Once, On Every Device
A few one-time changes remove most of the risk without you having to think about it again.
Turn off automatic connection to open networks. Otherwise your laptop will silently rejoin anything with a familiar name, including a fake one, as you walk past it.
Forget networks you no longer use. A device that remembers three years of hotel networks is a device that will join a fake version of any of them without asking.
Turn off file sharing and network discovery on public networks. Windows asks whether a network is public or private, and answering public is what disables these.
Keep the device updated. Most attacks on public networks target something already patched, so a current machine is a far less interesting target than an old one.
These are standard on the devices we manage. If you use your own laptop for work, ask us and we will check them with you.
Related Guides And What To Have Ready
Related reading: using your work phone away from the office, what to do about a stolen work laptop, and reporting a security incident. More in Security and phishing.
If you think you joined a bad network, tell us: the venue, the network name, roughly how long you were connected, and whether you entered any password while on it.
Call 678-374-4352. This is one of the cases where being wrong costs nothing and being right and silent costs a lot.
The federal guidance on public networks is short and worth reading once: CISA Secure Our World.
A Public WiFi Safety Checklist For Travel
Read this before the next trip rather than in the airport lounge.
- Prefer your phone hotspot over open networks for anything sensitive.
- Ask staff for the exact network name rather than guessing from the list.
- Public WiFi safety rule one: never enter a work password into a captive portal.
- Never accept a certificate or profile installation to get online.
- Turn off automatic joining of open networks on every device.
- Forget venue networks you no longer use.
- Set the network to Public so file sharing and discovery are off.
- Deny any MFA request that pops up when you were not signing in yourself.
- Keep the device updated before you travel, not during.
- If anything felt wrong, tell us the venue and the network name.
Most public WiFi safety failures are not clever attacks. They are somebody agreeing to something slightly odd because they were in a hurry.
Public WiFi Safety On The Road In Your Industry
The exposure depends on what you carry with you.
Law firms. Court, client offices and hotels are all networks you do not control. For a firm, public WiFi safety is really about the privileged material on the device, which is why the hotspot habit is worth the data cost.
Distribution and logistics. Sales and account teams live on hotel and customer networks. The risk is less about interception and more about credential capture, because a stolen mailbox password gives an attacker your customer list and your invoice format.
Manufacturing. Supplier and trade show visits mean joining networks run by people you have no relationship with. Anything touching drawings or specifications should go over a hotspot rather than a shared network.
If you think you joined something you should not have, call 678-374-4352. Being wrong costs nothing.
Questions About Public Wi-Fi Safety
Mostly, because sites are encrypted. The remaining risk is connecting to the wrong network.
If your company provides one, use it. It matters more for reaching internal systems than for eavesdropping.
Usually yes, and often faster.
Do not enter it, disconnect, and call us at 678-374-4352.