Public Wi-Fi at airports, hotels, cafes, and train stations can be convenient but introduces real security and privacy risks. Attackers can capture unencrypted traffic, set up malicious hotspots that impersonate legitimate networks, or exploit device vulnerabilities to steal credentials and deploy malware. Guidance from Eva Galperin, Electronic Frontier Foundation underscores the prevalence of hostile networks and the importance of technical precautions, while the Cybersecurity and Infrastructure Security Agency recommends minimizing sensitive activity on public networks.
Before you connect
Confirm the correct network name with staff and avoid networks labeled generically as free Wi-Fi in busy hubs. Disable auto-join and forget networks when you leave to prevent automatic reconnection. When possible use your mobile device as a personal hotspot instead of untrusted networks; this is often the simplest way to reduce exposure in places with lax network controls. Keep operating system and app updates applied before travel so known vulnerabilities are patched.
While connected
Use a reputable virtual private network to encrypt traffic between your device and a trusted endpoint, making eavesdropping and many man-in-the-middle attacks far less effective. Prefer websites and services that enforce HTTPS and, where available, use official apps rather than browser-based logins. Avoid financial transactions, accessing health records, or entering long-term credentials on public Wi-Fi. Enable two-factor authentication to reduce the impact if a password is intercepted.
Consequences of neglecting these steps range from account takeovers and financial fraud to prolonged surveillance, which can be especially consequential for journalists, activists, or travelers moving through regions with intense political monitoring. Cultural and territorial differences matter: some countries mandate deep packet inspection on public networks or offer pervasive state-run hotspots, increasing privacy risks and making VPNs or secure messaging tools more important. Environmental constraints such as limited cellular coverage in remote areas can force reliance on shared networks, which increases individual risk and highlights the value of portable secure hardware if available.
Follow institutional advice from trusted sources and adopt layered protection: verify networks, limit sensitive actions, encrypt connections, and keep devices current. These practical steps reduce the most common threats and help maintain privacy and safety while traveling internationally.