What makes shared networks different
Your home network is one you set up, protect with a password and share with people you know. A public network in a cafe, hotel, library, airport or train station is shared with strangers and run by someone you cannot easily assess. That difference creates a few risks, though they are often smaller today than they once were and are easy to overstate.
Most websites and apps now encrypt their traffic, which means someone on the same network generally cannot read what you send to them. Even so, it is sensible to treat shared networks as less trustworthy than your own, and to adopt habits that reduce what could go wrong.
The main risks
Unencrypted connections. Where a site or app does not encrypt traffic, others on the network may be able to see or alter what passes through. This is less common now, but not extinct.
Fake hotspots. Someone can create a network with a believable name, such as the name of a nearby business, to attract connections. Devices that join it may expose activity to whoever runs it. Staff can tell you the correct network name.
Fake login or “terms” pages. Many public networks show a page when you connect. A malicious one might ask for more than a name or email address, such as card details or passwords. Be wary of any request that seems out of proportion.
Other devices on the network. On a poorly configured network, other users may be able to probe your device, especially if file sharing is turned on.
Shoulder surfing and theft. Physical risks matter too: people watching your screen, or a laptop left unattended.
Misleading prompts. Pop-ups telling you to update software or install something to get online can be malicious.
Sensible habits
None of these guarantees safety, but together they lower the odds.
- Confirm the network name. Ask staff or check posted signs before connecting, and be cautious with open networks that have generic names.
- Prefer your phone’s data connection for sensitive tasks. Mobile data or a personal hotspot, where your plan allows it, avoids the shared network altogether. It is often a reasonable choice for banking or important logins.
- Look for encrypted connections. Check that sites use the secure version of the web address in your browser, and pay attention to browser warnings about certificates instead of clicking past them.
- Delay sensitive tasks. Banking, tax matters and account changes can often wait until you are on a trusted connection.
- Turn off automatic connection and sharing. Stop your device joining open networks without asking, and disable file and printer sharing when away from home. Many devices let you label a network as public, which applies stricter settings.
- Keep software updated. Updates fix known security problems that attackers may try to exploit. This is one more reason software updates matter.
- Use two-factor authentication. If a password is captured, a second step can make it harder to use. It does not make every attack impossible.
- Log out and forget. Sign out of accounts when you are done, and remove the network from your saved list afterwards.
- Be skeptical of prompts. Do not install software or enter unusual information because a network page asks you to.
- Lock your device and keep it with you.
What about a VPN?
A virtual private network encrypts traffic between your device and the VPN provider, which can reduce what the local network operator and others on it can observe. It is a tool, not a cure. It shifts trust to the VPN provider, may slow your connection, and does nothing about phishing or malware. If you consider using one, check how clearly the provider explains its practices, and be skeptical of any claim of complete anonymity or total security. Many people manage well with the other habits above.
Work and public networks
If you work remotely from cafes or shared spaces, check your employer’s rules about public networks and company devices. Care with confidential files matters, as does being mindful of who can see your screen during video meetings. Choosing a cafe over a home office can change how much risk you take on, and a settled routine for remote work makes those choices easier.
If you suspect a problem
- Disconnect from the network and turn off Wi-Fi.
- Change passwords for any accounts you used, from a trusted connection.
- Review recent account activity for anything unfamiliar.
- Contact your bank or card provider if you entered payment details somewhere questionable.
- Run a security scan and update your device.
- Report the suspicious network to the venue.
Keeping the risk in proportion
Public Wi-Fi is not something to fear, and avoiding it entirely is unrealistic. The goal is simply to keep the most sensitive tasks off networks you do not control, to rely on encrypted connections, and to notice when something seems wrong. Staying aware does more than any single setting, and no habit removes the risk completely.