Is public Wi-Fi safe? And do you need a VPN on it?

Most websites and apps now encrypt what you send, so public Wi-Fi is usually fine. Here are the real risks, when a VPN is worth having, and what to check before choosing one.

Written by: Digital Life Check editorial team
Reviewed by: Not yet independently reviewed
Last checked: 25 September 2026

Digital Life Check may earn a commission if you buy through some links. This does not affect the price you pay. Learn more

On this page

Is public Wi-Fi safe to use?
What are the real risks on public Wi-Fi?
How do I stay safe on public Wi-Fi?
Is my phone's hotspot safer than public Wi-Fi?
Do I need a VPN on public Wi-Fi?
What should I look for in a VPN for public Wi-Fi?
How do the VPNs we link to compare?
Common questions

Quick answer: public Wi-Fi in cafés, trains, libraries and shops is fine for most everyday things, because most websites and apps encrypt your connection themselves (the padlock in your browser). The real risks are fake networks with convincing names, sign-in pages that ask for too much, and devices that join networks on their own. Check the network name with staff, keep your devices updated and use your phone's mobile data for anything sensitive. A VPN is a reasonable extra if you use public Wi-Fi often. It won't protect you from a scam page.

Airports and hotels have their own guides: Is airport Wi-Fi safe? and Is hotel Wi-Fi safe?. This page covers everywhere else, and how to choose a VPN if you decide you want one.

Is public Wi-Fi safe to use?

For most things, yes. The National Cyber Security Centre (NCSC) says connections to individual web services can be protected with HTTPS, which you see as a padlock in your browser, and that sensitive data you send to online services should be encrypted so it is protected as it travels across the internet. Which? says websites that use HTTPS provide improved security compared with those that don't.

The NCSC also notes that a private Wi-Fi network protected by WPA2 will be more secure than a public service such as the one in a coffee shop or hotel. So public Wi-Fi is less private than your home network, but the encryption built into websites and apps covers most of what matters.

A padlock tells you the connection is encrypted. It doesn't tell you the website is genuine. If you're unsure about a site, see is this website safe?

What are the real risks on public Wi-Fi?

Fake networks with convincing names

Anyone can set up a Wi-Fi network and name it after the café they're sitting in. Which? gives the example of a network labelled "Coffee_wifi_official", and warns that a seemingly safe hotspot could in theory be used by a hacker to track what you're doing on your phone or laptop. Which? advises confirming the network with staff before you join.

Many public networks show a sign-in page before you get online. Which? says secured networks will often ask you to register and accept terms, and suggests using a separate email address for public Wi-Fi sign-ups. Be wary of any Wi-Fi page that asks for an email or social media password, card details for "free" Wi-Fi, or asks you to install something.

Devices that join networks on their own

Which? advises turning off automatic connection so your devices don't join an unsafe network without you knowing, and deleting saved networks you no longer use. Our hotel Wi-Fi guide has the steps for iPhone and Android.

How do I stay safe on public Wi-Fi?

Confirm the network name with staff or official signs.
Update your phone and laptop before you rely on public Wi-Fi. Which? advises installing the latest security updates first.
Look for the padlock before typing anything sensitive.
Turn on two-step verification for email and other important accounts, so a stolen password alone isn't enough. See what two-factor authentication is.
Turn off auto-join and forget networks you've finished with.
Use mobile data for banking or anything else sensitive if you're unsure about the network.

Is my phone's hotspot safer than public Wi-Fi?

Usually, yes, because it's your own connection rather than one shared with strangers. Which? suggests it as an alternative to public Wi-Fi, says to choose a security setting that includes a password so only you can connect, and warns that a hotspot can use a lot of data and leave you with a high bill.

Do I need a VPN on public Wi-Fi?

Not always. A VPN encrypts everything between your device and the VPN company, so the network you're on can't see which sites you visit. Which? says this makes it harder for hackers to intercept and read your data, and that while a VPN isn't a route to anonymity, it does reduce your online footprint.

A VPN is worth considering if you:

use public Wi-Fi most days, for example commuting or working from cafés
work on the move and can't always choose the network
want more privacy from the network you're connected to

It won't help if you type your details into a fake website, and it doesn't replace updates, strong passwords and two-step verification. Our guide Do I need a VPN? goes through who benefits and who probably doesn't.

A VPN can't protect the sign-in page itself. The NCSC explains that on networks with a sign-in page (a "captive portal"), your device has to connect directly to that page before the VPN connection can start. Sign in, then switch the VPN on, and keep what you enter on that page to the minimum.

What should I look for in a VPN for public Wi-Fi?

Auto-connect on Wi-Fi. Some VPN apps can switch on automatically whenever you join Wi-Fi, and let you mark networks you trust (such as home) so they stay off there. That way you don't have to remember.
A kill switch, which blocks your internet connection if the VPN drops, so nothing is sent unprotected.
An independently audited no-logs policy. The VPN company can see your traffic instead of the café's network, so you want published evidence from an outside firm that it doesn't keep records of what you do.
Enough devices for your phone, laptop and tablet on one subscription.
Clear refund terms, and the renewal price, before you pay.

Our travel VPN checklist covers server locations, speed and the law abroad.

How do the VPNs we link to compare?

These are facts each company publishes about itself, in alphabetical order. We haven't tested them, and the table isn't a ranking. Plans and terms change, so check the provider's own page before you buy.

VPN	Free option	Devices at once (paid)	Kill switch	Independent no-logs audit	Money-back period
AdGuard VPN	Yes: 3 GB a month, 2 devices	10	Yes, in its Windows, Mac and Android apps	Not stated on the pages we checked	30 days on 1-year or longer plans; monthly plans non-refundable
hide.me	Yes: 1 connection, 8 locations	10	Yes; on by default in its desktop apps	Yes, by Securitum (year not given on the page)	30 days
NordVPN	No free plan; a 7-day trial in the UK for new users, card or PayPal needed	10	Yes	Yes: PwC (2018, 2020), then Deloitte, most recently 2025	30 days for new subscriptions
Proton VPN	Yes: 1 device	10	Yes, on free and paid plans	Yes: Securitum, fifth annual audit	30 days
PureVPN	No free plan on its order page	10	Yes	Yes: an assessment in February 2023 (auditor not named on the page)	31 days

Checked 25 September 2026, from each provider's own website. NordVPN says refunds for subscriptions bought through an app store are handled by that store, so check how you're buying before you rely on a money-back period.

The steps above are free and cover most people. If you decide a VPN would help, these are two of the providers we link to. We may earn a commission if you buy, at no extra cost to you.

Not sure where you'd get the most benefit? Our Travel Check takes a couple of minutes.

Common questions

Is it safe to do online banking on public Wi-Fi?

Banking apps and websites encrypt your connection, so another person on the same network shouldn't be able to read it. The bigger risks are joining a fake network or typing your details into a fake page. If you're unsure about the network, switch to mobile data for banking, and make sure two-step verification is on for your bank and email.

Can someone see what I do on public Wi-Fi?

On a site or app that uses HTTPS, others on the network can't read what you type or send, although the network can see which sites you connect to. A VPN hides that from the network, but the VPN company can then see it instead, which is why a published, independent no-logs audit matters.

Is train Wi-Fi safe?

Train Wi-Fi is public Wi-Fi like any other, shared with everyone else on board. Join the network named on the train's official signs, give the sign-in page only what it needs, and use mobile data for anything sensitive if the connection or the page looks wrong.

Does a VPN protect me from scams on public Wi-Fi?

No. A VPN protects the connection, not your judgement about what's on the other end. If a text or email sends you to a fake login page, a VPN won't stop you entering your details. Our Scam Check can help you spot the warning signs.

Are free VPNs safe to use on public Wi-Fi?

Some providers offer a free plan with limits, such as a data cap or a single device, and these can be fine for light use. Check who runs the service, whether its no-logs claims have been independently audited, and download the app only from the provider's own website or official app store listing.

Sources

Last checked: 25 September 2026

Optional · commercial links

Tools that can help

The steps above are free. If you would rather have a tool take care of it, these are the ones we link to.