Separate the network from the website

Public Wi-Fi is convenient when you are waiting at an airport or working at a café. The important questions are which network you joined and where you are sending information.

Quick answer

Verify the network with the venue, use your normal apps or known websites, respect browser security warnings, and leave local sharing off. For a task you are uncomfortable doing there, use your cellular connection or wait.

The FTC explains in its public Wi-Fi guidance that widespread website encryption has changed the risk compared with the early internet. A public network does not automatically expose everything you do, and a secure connection does not automatically make the destination honest.

Confirm the network and treat its sign-in page carefully

Ask venue staff for the exact network name and how visitors are supposed to connect. If you see two similar names, do not choose one simply because its signal is stronger or it includes the word “free.”

Some guest networks show a sign-in or terms page before internet access works. That can be a normal part of the venue's process. Confirm unexpected requests with staff before entering information.

If a page asks you to install an unfamiliar app, configuration profile or certificate to obtain guest access, pause and verify the requirement. You are being asked to change something on your device, not just agree to a set of access terms.

A posted QR code is another route to check. Our QR code guide explains why you should review what a code opens before proceeding.

Know what HTTPS does and does not prove

HTTPS protects the connection between your browser and the site you reached. It helps keep information private in transit, but a scammer's website can use HTTPS too. The name and purpose of the destination still matter.

Open a service through its app, a saved bookmark or an address you know. If the browser says the connection is unsafe, do not bypass the warning to enter a password or payment details. Google's connection-security guide explains its security indicators and warnings; their appearance can vary by browser version.

Imagine a café sign-in page sends you to a second page claiming your bank must verify a card. Encryption would not make that unexpected request trustworthy. Check with the venue, and verify any banking claim through your bank's own app or known contact route.

Keep local sharing and account protection in mind

On Windows, open Settings → Network & internet, select the connected network and check its profile. Use Public for an unfamiliar guest network. Microsoft's network settings guide explains how public and private profiles affect discovery and sharing. The label “Private” is not a promise that a café's network is trustworthy.

Keep the device firewall enabled. For any laptop, avoid offering files or receiving unsolicited nearby transfers while on a network you do not trust.

Software updates and multi-factor authentication also matter away from home. They are part of the FTC's recommended account and device protections, regardless of how you connect. An unfamiliar network is a good reminder to use those protections consistently.

Choose a connection that fits the task

A practical way to choose your next step
SituationReasonable action
Checking a known website after confirming the guest networkUse the normal site and watch for security warnings.
A sign-in page asks for unusual software or account detailsStop and confirm the requirement with venue staff.
You need to handle sensitive work documentsFollow your employer's approved connection and VPN rules.
You remain unsure about the networkUse your phone's cellular connection or postpone the task.

A VPN does not turn a fake website into a legitimate one. If work requires a VPN, use the approved one; do not pick an unfamiliar “free security” app because a guest-network page recommends it.

Cellular access gives you another route, but it does not remove the need to verify messages and websites. Our scam text guide uses that same independent-check habit.

Finish with a quick disconnect routine

When you are done, disconnect from the guest network and review whether your device will automatically rejoin it. Forget a network you do not plan to use again. Sign out of a shared computer rather than leaving an account open for the next person.

If the problem is simply that the connection is slow, switching off security settings is not a useful fix. Work through our Wi-Fi troubleshooting guide instead. If you are unsure what “Wi-Fi” connects, start with Bluetooth versus Wi-Fi.

Keep the routine small enough to remember: confirm the network, check the destination, keep sharing off, and disconnect when finished.

Keep the basic security checks handy.

The free security checklist brings updates, account protection and backups into one printable starting point for your small business or home office.