Most travel advice treats public Wi-Fi as a small inconvenience to work around. Official guidance from CISA, the US government’s cybersecurity agency, is more direct. Where possible, avoid conducting personal business on public Wi-Fi at all, because open networks in airports, cafes, hotels and similar places give attackers a real chance to intercept sensitive information. This guide covers the simplest fix, what to do when you cannot avoid a public network, and why travel raises the stakes.
Switch connections instead of fiddling with settings
If you need to check a bank balance, sign in to an account or buy something online while travelling, CISA’s recommendation is to turn off your device’s Wi-Fi and use cellular data instead. It is a toggle, not a technical configuration. It sidesteps the risk of an open network completely for anything sensitive, rather than trying to make that network safer.
That has a practical consequence for trip planning. If you expect to rely on mobile data abroad, sort it out before you leave. Our guides to roaming, eSIMs and Wi-Fi and to what to check before you rely on an eSIM cover the options.
If you have to use public Wi-Fi
Sometimes cellular data is unavailable or impractical. Official guidance names several concrete habits for those moments:
- Confirm the network name and login steps with staff. Ask the airport, hotel or cafe directly before you connect. A name that merely sounds right, such as a generic free airport network, is exactly what a malicious lookalike network is designed to imitate.
- Turn off file sharing. File sharing should only be on when you are on a recognised home network and actively need it. Leaving it on in public exposes your device to other users on the same network.
- Never leave devices unattended. This includes USB drives and other external storage. Physical access to a device defeats any network precaution.
- Keep software up to date. Updated browsers, apps and operating systems are named as the best general defence against malware, whichever network you use.
Why travel raises the risk
The underlying danger exists anywhere open Wi-Fi is offered, but travel concentrates it. You connect to more unfamiliar networks in a shorter time. You handle more sensitive tasks on the move, such as banking, boarding passes and hotel bookings. And you know less about who actually runs a given network than you do about the one at home or work.
Resorts and hotels are a good example. A resort may offer several networks across the lobby, pool and rooms, and the names are not always obvious. Asking at reception which network is the official one takes seconds and removes the guesswork. Our guide to resort Wi-Fi and staying connected while you travel covers what resorts typically offer.
Sorting tasks into safe and unsafe piles
It helps to decide before you travel which tasks you will only do on cellular data and which can wait for a trusted connection. The official advice points to anything involving money or personal accounts as the first group. A simple split looks like this:
- Cellular data only: banking, card payments, signing in to email or social accounts, and anything that asks for a password or identity details.
- Fine on a confirmed network, with care: reading the news, checking a map or looking up opening hours, where nothing personal is entered.
- Do before you leave: downloading boarding passes, hotel confirmations and offline maps, so you are not forced to log in somewhere unfamiliar at the airport.
Doing the last item at home removes many of the moments when travellers feel pressed to join the first free network they see.
A short routine for any trip
- Update your phone, laptop and apps before you leave.
- Plan how you will get mobile data abroad, and keep it available for banking and other sensitive tasks.
- Switch Wi-Fi off and use data for anything involving money or passwords.
- When you do use public Wi-Fi, confirm the network name with staff and switch off file sharing.
- Keep your devices and storage with you at all times.
What this guide does not cover
We are not recommending a specific VPN product or claiming that a VPN alone makes public Wi-Fi fully safe. That is a more nuanced technical claim than the official guidance makes, so this guide sticks to what CISA specifically recommends. We are also not covering employer device policies, which are a matter between a traveller and their employer’s IT team.
Where to go next
Money handling is the other half of safe travel. See our guide to cards, cash and currency abroad, and our guide to common travel scams and the habits that close them off. For how we check our sources, see how we verify.
Source: CISA guidance on staying safe on public Wi-Fi.