Public Wi-Fi Safety
Free Wi-Fi at hotels, truck stops, airports, coffee shops and jobsite trailers is convenient, but you don’t know who runs the network or who else is on it. Most websites now encrypt your connection, which helps a lot, but fake hotspots and careless habits can still expose your accounts.
- Everyone
- Traveling workers
- Truck drivers
The risks
- Fake hotspots: a criminal sets up a network named something like “Hotel_Guest_Free” to capture your traffic or show fake login pages.
- Snooping: on open networks, others may see unencrypted traffic.
- Fake captive portals: a login page that asks for your email password or card number to “get online.”
- Shared devices on the same network that may be infected.
Safer habits
- Ask staff for the exact network name, and don’t join look-alikes.
- Check for https:// and the lock icon before logging in anywhere. Use official apps for banking.
- Avoid banking, payroll and other sensitive accounts on public Wi-Fi when you can. Use your phone’s cellular data instead.
- Use your phone as a personal hotspot for your laptop; it’s usually safer than public Wi-Fi.
- Turn off automatic connection to open networks, and “forget” networks after you use them.
- Keep your device updated and its firewall on. See Software Updates.
- Turn off file sharing and AirDrop/Nearby Share from strangers when in public.
- Don’t enter your email password or card number on a Wi-Fi sign-in page.
- Don’t ignore browser warnings about certificates or unsafe sites.
- Don’t install software or “updates” a Wi-Fi page asks you to install.
What about VPNs?
A reputable VPN encrypts your traffic between your device and the VPN provider, which adds protection on networks you don’t trust. It doesn’t stop phishing, malware or scams, and a shady free VPN can be worse than none. Many employers provide a VPN for work devices; use it.
Work devices
Jobsite trailers and shared tablets often connect to whatever network is available. Follow your company’s rules, keep work devices locked with a PIN, and report lost devices right away. See Cybersecurity for Small Contractors.
Standards & references
Last updated: