Public Wi-Fi Safety

Students live on Wi-Fi. Libraries, cafes, trains, airports, hostels and lecture halls all offer free connections, and it would be impractical to avoid them. The risks are real but often overstated. Modern websites encrypt most traffic, phones and laptops warn about suspicious networks and the typical attacks are fake hotspots and tricks that rely on you ignoring warnings. This guide explains what actually goes wrong, what settings help and which habits matter, without turning every café visit into a security drill.

Technology changes, and networks vary by place. Follow your university's current guidance, and treat this guide as general information.

What the real risks are

Eavesdropping on unencrypted traffic

On an open network, others on the same Wi-Fi might see unencrypted traffic. Most major sites and apps now use encryption, shown by https in the address and a padlock icon, which hides the content. But not every site or app does, and metadata such as which sites you visit may still be visible.

Fake hotspots, also called evil twins

An attacker creates a network with a name like a legitimate one, such as a café or campus name. Devices that connect automatically or users who choose the wrong one send their traffic through the attacker. This can lead to fake login pages or attempts to intercept data.

Fake login pages and captive portals

Public networks often show a login page. Attackers can imitate it to steal details. A real portal rarely needs your bank or university password.

Malicious downloads and prompts

A compromised network may display fake update prompts or offers. Install updates only from official stores and settings.

Weak device settings

File sharing, automatic connection to open networks and outdated software increase exposure.

Shoulder surfing and theft

In public spaces, people can see your screen or steal your device. This is often a bigger risk than the network itself.

Make your device safer

• Keep your operating system, browser and apps updated.
• Use a firewall and keep it on.
• Turn off file and printer sharing on public networks.
• Set your network type to public where your system offers it.
• Disable auto-connect to open networks.
• Forget networks you no longer use.
• Use a screen lock and strong passcode.
• Use full-disk encryption if your device supports it.
• Install security software provided by your university if recommended.

Safer habits on any shared network

• Confirm the network name with staff or signage before connecting.
• Prefer networks with a password and modern encryption, though remember a shared password does not stop others on the same network.
• Look for https and the padlock when entering anything sensitive. Do not ignore certificate warnings.
• Avoid entering banking details or sensitive information on public Wi-Fi when a safer alternative like mobile data is available.
• Use official apps for banking and email, which typically encrypt traffic.
• Use two-factor authentication on important accounts, so that stolen passwords are not enough.
• Log out when finished, especially on shared computers.
• Do not download unexpected files or install prompts from network pages.
• Turn off Wi-Fi and Bluetooth when you do not need them.
• Watch your surroundings. Position your screen away from onlookers, and keep your device with you.

Using your phone as a hotspot

Using mobile data through your phone can be safer than an unknown network.

• Set a strong hotspot password and avoid leaving it open.
• Switch it off when not in use.
• Watch your data allowance, especially if streaming or downloading.
• Check roaming charges abroad, which can be high.
• Keep your phone updated.

What about VPNs?

A virtual private network sends your traffic through an encrypted tunnel to a server run by the VPN provider. It can protect against local eavesdropping on untrusted networks, and some universities provide a VPN for accessing library resources. Remember that:

• A VPN does not make you anonymous and does not stop phishing or malware.
• You must trust the provider, since it can see your traffic.
• Free VPNs can be risky, with weak privacy or intrusive advertising.
• Good habits still matter more than a tool.

Campus, café, hotel and travel networks

Campus Wi-Fi

Universities often use authenticated networks with encryption, tied to your account. These are usually safer than open public networks. Follow your university's instructions to connect, and be wary of look-alike networks. Report suspicious networks to IT.

Cafés and public places

Open networks are the riskiest. Use mobile data for sensitive tasks when possible, and confirm the network name.

Hotels, hostels and airports

Shared networks with many guests, sometimes poorly maintained. Treat them like cafés. Avoid sensitive tasks if you can, and keep your device locked.

Trains, buses and planes

On-board Wi-Fi is shared by many passengers. The same caution applies.

Shared housing

Roommates and landlords may control your router. Use WPA-protected networks, change default passwords and keep sensitive devices on separate networks if possible.

Travel and international study

• Check which services are blocked or monitored in your destination.
• Update your devices before traveling.
• Download maps, documents and tickets offline so that you need less public Wi-Fi.
• Use local SIMs or eSIMs for data.
• Beware of fake networks at airports and tourist sites.
• Keep backup access to accounts in case a network blocks a service.

Spotting a fake network or page

• Duplicate network names or slightly different spellings.
• Networks that require unusual information before connecting, such as card details for free access.
• Pages that ask for your university password on a public network.
• Unexpected redirects or certificate warnings.
• Slow or odd behavior after connecting.

If something seems wrong, disconnect, forget the network and use mobile data.

If you think you were compromised

1. Disconnect from the network.
2. Change passwords for any account you used, from a safe network or device.
3. Check accounts for unfamiliar activity, and sign out of all sessions.
4. Run a security scan.
5. Tell your bank if you entered financial details.
6. Report to your university IT if you used university accounts.
7. Turn on two-factor authentication where it was missing.

Quick decisions in the moment

When you sit down in a café or station, take ten seconds to decide how you will use the network. If you only need to read the news or stream music, an open network is fine. If you need to check bank details, log in to a university portal or send documents with personal data, switch to mobile data or wait.

If a page asks for a password you would not give a stranger, close it. If you must use the network for something important, use official apps, confirm the network name with staff and sign out afterward.

Teaching your devices good manners

Many devices connect to remembered networks automatically, even when a different network has the same name. Clean up your list of saved networks every few months and remove those you will not use again. Disable the option to join open networks without asking. Keep Bluetooth and file sharing off unless needed, and turn off Wi-Fi when you leave a place where you used it. These steps reduce the chance that your device joins a fake network without your knowledge.

When traveling, download maps, tickets and readings in advance so that you can rely less on public networks. A little planning removes much of the temptation to use whatever Wi-Fi is nearest.

Common mistakes

• Connecting automatically to any open network.
• Ignoring certificate warnings.
• Logging into sensitive accounts without protection.
• Leaving file sharing on.
• Relying on a VPN alone.
• Not updating devices.
• Leaving devices unattended.

A quick checklist

• Are my devices updated, locked and set to forget open networks?
• Do I check network names and use https?
• Do I use mobile data for sensitive tasks when practical?
• Is two-factor authentication on for important accounts?
• Do I know how to respond if something seems wrong?

Final thoughts

Public Wi-Fi is a normal part of student life, and with a few settings and habits it is manageable. Keep devices updated, confirm network names, prefer encrypted sites and apps, and use two-factor authentication. When you need to do something sensitive, use your phone's data or wait for a trusted network. Good habits protect you far more than any single tool.