Hotel & Public Wi-Fi Without Getting Hacked

What Public Wi-Fi Is and Why It Carries Risk

Public Wi-Fi is any internet connection shared by strangers: airports, hotels, cafes, and libraries. It is handy, but because it is shared and open, it needs a bit of caution.

Think of public Wi-Fi like a crowded room where you have to talk out loud. Most people are not listening, but you would still not read your bank password aloud. The same sense applies here.

• Many people you do not know share the same network
• Some networks do not scramble, or encrypt, the information passing through
• Bad actors can set up fake networks that look real

How Trouble Happens, in Plain Words

You do not need to understand the technical details. But a simple picture of how mischief works helps you avoid it naturally.

Notice that each trick relies on fooling you into connecting to the wrong thing or typing something you should not. That means your best defense is simply slowing down and checking before you tap or type.

• A fake network with a friendly name lures you to connect through the wrong door
• An open network lets a snoop try to peek at information that is not scrambled
• A fake sign-in page tries to trick you into typing a password

Confirming the Real Network Name

The single best habit is to join only the official network. And the only sure way to know its exact name is to ask a staff member or read a posted sign.

Networks with slightly different spellings, like Free Airport WiFi versus Free_Airport_WiFi, can be a trap. When two look almost the same, do not guess. Ask which is the real one. Staff are used to the question.

• Ask the hotel front desk or cafe staff for the network name
• Or read it from an official printed sign or your room card
• Open Wi-Fi settings and pick that exact name
• Be wary of near-identical names with tiny spelling changes

Spotting Fake Hotspots

A fake hotspot is a network a stranger sets up to look official, hoping you will connect to it by mistake. They are sometimes called evil twins because they copy a real name.

Real hotel and airport Wi-Fi rarely asks for personal information beyond maybe a room number or a name. If a network demands your email password, a credit card for free Wi-Fi, or your account logins, back out immediately.

• Two networks with almost the same name
• A network named to sound too generous, like Free Fast WiFi No Password
• A sign-in page that asks for a lot of personal details or a payment
• A network that appears in an odd place with no official sign

The Sign-In Page, and What Is Safe

Many public networks show a sign-in page when you connect, sometimes called a captive portal. It may ask you to agree to terms or enter a room number. Most are harmless, but know what to expect.

• Clicking Agree or Accept to the terms
• Entering your hotel room number and last name
• Entering an email just to get connected

What to Save for a Safer Connection

The simplest rule of all: some things just should not be done on public Wi-Fi. Save them for when you are on cellular data, a VPN, or your home internet.

If you must do something private and only have public Wi-Fi, the safest quick fix is to switch off Wi-Fi and use your phone's cellular data instead, which we cover on the next page.

Use Your Cellular Data When It Matters

Your phone's own cellular data, the internet that comes through your phone plan, is much harder for a stranger to snoop on than public Wi-Fi. For anything private, prefer it.

Cellular data is a private line just for your phone, so it is a far safer choice for sensitive tasks. The trade-off is that it uses your data plan, which matters most when you are abroad. For a quick bank check, that small amount of data is well worth it.

• Turn Wi-Fi off in your settings, or tap Forget on the public network
• Your phone then uses cellular data automatically
• Do your banking or private task
• Turn Wi-Fi back on afterward if you like

What a VPN Is, and When to Use One

A VPN is a tool that wraps your internet connection in a private, scrambled tunnel. Even on public Wi-Fi, a snoop sees only scrambled nonsense. It is like sealing your mail in an envelope instead of sending a postcard.

A VPN is not required for everyone, but it is a nice extra shield if you travel often or use public Wi-Fi a great deal. Think of it as travel insurance for your internet: a small cost for real peace of mind.

• When you must use public Wi-Fi for something private
• When traveling and relying on hotel or airport networks a lot
• When you want an extra layer of protection everywhere

Setting Up a VPN Simply

Setting up a VPN is easier than it sounds. Most reputable ones are a download, a sign-up, and a single On button. Do this at home before you travel.

Once connected, you use your phone exactly as normal. The VPN quietly protects you in the background. When you are home on your own trusted internet, you can leave it off if you prefer.

• Choose a well-reviewed, paid VPN app
• Download it from your phone's app store
• Open it and create an account
• Tap the big Connect or On button
• Look for a small VPN badge at the top of your screen when it is on

Locking Down Your Phone Before You Travel

A well-prepared phone protects itself even if you slip up on a network. Spend a few minutes on these settings before your trip and travel with confidence.

The most important of these is a screen lock. If your phone is lost or stolen, a passcode is the wall that keeps a stranger out of your email, photos, and accounts. Never travel without one.

• Set a screen lock: a passcode, fingerprint, or face unlock
• Turn on the setting to find or erase your phone if it is lost
• Make sure your phone locks itself quickly when idle
• Update your phone and apps to the latest versions
• Turn off auto-join for open networks

Stop Your Phone Joining Networks on Its Own

By default, a phone may hop onto any open Wi-Fi it recognizes. On the road, you want to decide which networks to trust, not let your phone choose for you.

Forgetting a network when you are done is a tidy habit. It means your phone will not silently reconnect to that cafe or airport, or to a fake network borrowing the same name, on a future day.

• On iPhone: Settings, Wi-Fi, tap Auto-Join Hotspot and set it to Ask; tap a network's info to turn off Auto-Join
• On Android: Settings, Network, Wi-Fi preferences, turn off Connect to open networks
• After using a public network, tap Forget so your phone will not rejoin it later

Keeping Your Software Updated

Updates are not just about new features. Many of them quietly fix security holes. An up-to-date phone has fewer weak spots for anyone to exploit.

Do your updates at home on Wi-Fi before you travel, so you leave with everything current. Updating uses data and time, so it is much nicer to have it done before you are on the road.

• Your phone's main software, its operating system
• Your apps, especially banking and email
• Your web browser

Two-Step Sign-In: Your Extra Lock

Two-step sign-in, also called two-factor, adds a second key to your important accounts. Even if someone learns your password, they still cannot get in without the second step.

Turn this on for your email and your bank before you travel. It means a stolen password alone is not enough for a thief. Your phone becomes a second lock only you hold.

• You enter your password as usual
• The account sends a short code to your phone
• You type that code to finish signing in

Watching for the Padlock

When you visit a website to sign in, look at the very top of the screen near the web address. A small padlock symbol tells you the connection to that site is scrambled and private.

If you are about to type a password or card number and there is no padlock, stop. And even with a padlock, double-check the website name is spelled right, since fakes use look-alike addresses.

• A tiny padlock icon appears near the web address
• The address begins with https, where the s means secure
• The website name is spelled correctly, with no odd extra words

Public Computers and Charging Stations

Beyond Wi-Fi, two more travel spots deserve a little caution: shared computers in hotel lobbies, and public charging stations.

• Avoid signing into your bank or email on a hotel lobby computer
• If you must sign in, always log out completely when done
• Never let a shared computer save your password

Hotel Room Smart TVs and Devices

Many hotel rooms now have smart TVs and voice speakers. They are handy, but a little care means you do not leave your accounts behind when you check out.

The next guest, or hotel staff, could end up with access to any account you left signed in on that TV. Signing out at checkout, or simply using your own devices, keeps your accounts yours.

• If you sign into a streaming app on the room TV, sign out before you leave
• Better yet, watch on your own phone or tablet instead
• Do not enter passwords into a device you do not control

If You Think Something Went Wrong

If you fear you typed a password on a fake page or something feels off, do not panic. Acting quickly and calmly fixes almost everything. Here is the order to do things.

Most of the time, changing a password quickly is enough to shut the door before any harm is done. The sooner you act, the smaller any problem stays. Fear is the only thing that makes it worse.

• Switch to cellular data or a trusted connection right away
• Change the password for any account you may have exposed
• Turn on two-step sign-in if it is not already on
• Call your bank if any money account may be involved
• Watch your accounts for anything you did not do

Your Simple Safe-Travel Routine

Put it all together and it becomes a short, easy routine. Do these things and you can enjoy free Wi-Fi anywhere without a worry.

• Set a screen lock and turn on Find My phone
• Update your phone and apps on home Wi-Fi
• Turn on two-step sign-in for email and bank
• Set up a reputable VPN if you travel often

What's in the 27-page PDF

• Why public Wi-Fi carries some risk, in plain words
• How to confirm you are joining the real network
• How to spot fake hotspots that mimic real ones
• What is safe to do, and what to save for later
• Using cellular or a VPN when it really matters
• How to lock down your phone before you travel

Why I wrote this

I write these as printable handouts because a guide you can keep in a drawer beats a web page you have to find again. No jargon, no judgment, no rushing. If you'd rather have someone sit beside you and go through it together, that's a flat $99 first visit with the 30-day follow-up included — serving Portage County from Atwater, Ohio. — Bill