Is hotel Wi-Fi safe?

Why it's mostly fine

Most websites and apps encrypt the connection between your device and their servers. In a browser this shows as a padlock or "https" in the address bar. Which? advises checking for it before entering sensitive information. That encryption works whatever network you're on, so another guest on the same Wi-Fi shouldn't be able to read your banking or email.

A padlock tells you the connection is encrypted. It doesn't tell you the website is genuine, so the scam advice still applies.

Hotel Wi-Fi has a lot in common with airport Wi-Fi, and our guide Is airport Wi-Fi safe? covers the basics. This page is about what's different in a hotel.

What's different about a hotel

You share the network with every other guest

On most hotel networks, every guest is connected to the same Wi-Fi, often with the same password printed on a card at reception. That means you know little about who else is on it, and you stay connected for days rather than an hour at a gate. Encryption by websites and apps covers most of what you send, but it's a good reason to keep your devices updated and to leave file sharing and similar features switched off while you're away.

The sign-in page

Many hotels use a sign-in page (Apple calls these "captive" networks) that appears before you get online. Apple says these pages may ask for a username and password, an email address, or for you to accept terms and conditions. A hotel page asking for your room number and surname is common and normal: it's how the hotel checks you're a guest.

Be wary if a Wi-Fi page asks for:

• your email or social media password
• card details for Wi-Fi that's meant to be included in your stay
• an app, profile or "security certificate" to install

If that happens, close it and ask reception. Which? suggests using a separate email address just for Wi-Fi sign-ups so the marketing emails go there.

If the sign-in page doesn't appear on an iPhone, Apple's advice is to tap the More Info button next to the network name and choose Join Network.

Look-alike network names

Anyone can set up a Wi-Fi network and give it a convincing name, such as the hotel's name with "Free" or "Guest" added. Which? warns that a hotspot like this could be used to track what you do online, and its advice for hotels is to check with a member of staff, or permanent signage, to confirm the network details. The card in your room or at the front desk counts. A handwritten sign in the lift doesn't.

The cable in your room

Some rooms still have an ethernet port. A wired connection stops you joining a fake Wi-Fi network by mistake, but it's still the hotel's network, shared with other guests. Treat it the same way you treat the Wi-Fi.

Use your phone's hotspot instead

If you have enough mobile data, your phone's own hotspot is often the simplest choice for laptops and tablets. It's your connection, not one shared with the whole building. Which? recommends giving it a password and changing the default name so it doesn't include personal details.

Abroad, check your roaming allowance first. Which? warns that a hotspot can eat through data and leave you with a large bill.

iPhone

1. Go to Settings > Personal Hotspot (or Settings > Mobile Data > Personal Hotspot).
2. Tap Wi-Fi Password and set one of at least eight characters.
3. Turn on Allow Others to Join.

Android (names vary by make)

1. Swipe down from the top of the screen.
2. Touch and hold Hotspot.
3. Turn on Wi-Fi hotspot, and check the password under the hotspot settings.

Stop your devices auto-joining

Which? advises turning off automatic connection on all your devices, so they don't join an unsafe network without you knowing. Do this before you check out too, so your phone doesn't rejoin a network with the same name somewhere else.

iPhone

1. Go to Settings > Wi-Fi and tap Edit to see the networks your phone knows.
2. Tap the More Info button next to the hotel network.
3. Turn off Auto-Join, or tap Forget This Network.

Android (names vary by make)

1. Go to Settings > Network & internet > Internet.
2. Touch and hold the saved network.
3. Tap Forget.

A short checklist for your stay

1. Update your phone and laptop before you travel. Which? advises installing the latest security updates before you use public Wi-Fi.
2. Confirm the network name with reception or the card in your room.
3. Enter only what a hotel needs on the sign-in page: room number, surname, perhaps an email address.
4. Use mobile data or your hotspot for banking if you're unsure about the network.
5. Turn on two-step verification for email and important accounts, so a stolen password alone isn't enough. See what two-factor authentication is.
6. Forget the network when you check out.

Do you need a VPN in a hotel?

A VPN encrypts everything between your device and the VPN company, so the hotel network can't see which sites you visit. Which? says VPNs make it harder for hackers to intercept and read your data. It's a reasonable extra if you stay in hotels often or work from them. It won't stop you typing your details into a scam page, and most people can manage without one using the steps above. Our guides Do I need a VPN? and How to choose a VPN for travelling go further.

Before your trip

Run through our Travel Check before you go.

Sources

• How to keep your data safe when using public wi-fi – 8 quick tips — Which? (opens in a new tab)
• Use captive Wi-Fi networks on your iPhone or iPad — Apple Support (opens in a new tab)
• Forget a Wi-Fi network or prevent your device from automatically joining it — Apple Support (opens in a new tab)
• Connect to the Personal Hotspot of an iPhone or iPad — Apple Support (opens in a new tab)
• Share a mobile connection by hotspot or tethering on Android — Android Help (opens in a new tab)
• Connect to Wi-Fi networks on your Android device — Android Help (opens in a new tab)

Last checked: 22 September 2026