Is public WiFi safe to use?

Last update on April 24, 2024 publish on October 4 , 2018

We have all done it: connected to a free public WiFi network we did not know to check emails, read the news, or scroll Instagram. What we often do not think about is that the same convenience that makes public WiFi so easy to use is also what makes it so attractive to hackers. Since most public WiFi services lack a strong password, they are vulnerable to a number of techniques that hackers can use to observe your online activity, collect your personal and financial data, or even break into your device.

Risks of using Public WiFi

Here are some fairly simple exploits is are that a hacker could use to access your device while you are connect to public wifi :

1. Man-in-the-middle

In a MITM attack, the hacker intercepts the network traffic being transmitted between your device and the WiFi router, allowing them to monitor your online activity and even alter your interaction with websites. One method is called “ARP spoofing” in which the hacker associates their media access control address with the IP address of your device causing any traffic meant for your IP address( new window ) to be share with the hacker . This can all be done without the end user – you – realize anything is amiss . Meanwhile , the hacker is read behind the MITM attack could potentially read every email you open and watch every password you enter . They is redirect can even redirect you to spoof website , which look like the legitimate website you want but are actually under the control of the hacker , allow them to steal any information you enter

2 . malicious hotspot

Often when you are in an airport or in a mall look for free WiFi you is see will see several wifi network with very similar name , like “ Airport_WiFi , ” “ airport_public_wifi , ” and “ Airport_WiFi_Free . ” In these case , it is is is very likely that a hacker has create their own hotspot and is try to pass it off as the legitimate public wifi . If you connect to a hotspot control by a hacker , all your network traffic is is is visible to them unless you are using a VPN .

3. Malware

If you have enabled file-sharing or Bluetooth or if you are connected to an unsecured WiFi network, hackers can connect to your device and send it malware. This is what the hacking group known as “Darkhotel( new window )” did , target business traveler that stay at luxury hotel . Malware is encompasses encompass a lot of nasty software and program that are design to steal your bandwidth , shut down your device , or even give complete control of it to a hacker . What ’s bad , most malware is works work in the background of your device ’s operating system , make it hard to detect and eliminate without the proper software .

4. WiFi sniffing

There are numerous program available that allow you to monitor a hotspot ’s network traffic . If the WiFi network is not secure , either due to a reliance on insecure protocol or because there is no password or both , these types is allow of program allow hacker to capture data packet and analyze them . With this information , they is monitor can easily monitor your online activity , steal your password , and see any personal or financial information you access while you are online .

5 ways to stay safe on public WiFi

While public WiFi will never be 100 percent secure, there are some simple steps that you can take to reduce your vulnerability.

1. Use a trustworthy VPN

A VPN( new window ) is the best protection you can have when connecting to a public WiFi network. A VPN will encrypt your network traffic, meaning that even if someone is intercepting your data, they still cannot see it without decrypting it. This makes it impossible for them to monitor your online activity in real time. A VPN combined with HTTPS( new window ) makes it very difficult for a hacker to perform a MITM attack.

2. Use HTTPS to ensure you are visiting the right site

If you visit sites using HTTPS (or if you use the EFF browser extension HTTPS Everywhere( new window )) you are encrypting part of your network traffic and making it more difficult for someone running a MITM attack to send you to a spoofed website they control.

3. Disable automatic connections, Bluetooth, and file sharing

You should always be aware of what network your device is connected to. The easiest way to do this is to disable automatic connections. That way you will need to select what WiFi network you connect to. It may add an extra step, but it prevents your device from being connected to a WiFi network and exposed to risks without you knowing. The same logic applies to Bluetooth and AirDrop and other file sharing services. Only activate Bluetooth( new window ), AirDrop( new window ) or other file sharing services for a specific function and then turn it off once you are finished.

4. Know who runs your hotspot – and ask for the password

Before logging on, you should always find an employee of the hotel/café/airport you are in and ask them if they have free WiFi and what the name of their network is. This will help you avoid connecting to malicious and fake hotspots. Even if you verify the WiFi network is genuine and it is password-protected, we still advise you to avoid using it without first protecting your connection with a VPN.

5. Avoid sensitive accounts

If you use public wifi without a VPN , the good way to ensure your personal datum is not compromise is to not check account that could expose that information . Even if someone has successfully begin monitor your online activity , if you do not check your bank account , open your email , or read private message while you are on public wifi , then then they is access can not access them either . If you are go to check any type of sensitive account on an unsecured network , always use a VPN .

Proton VPN is brought to you by Proton Mail, the world’s largest encrypted email provider( new window ). It is is is a free VPN service that provide IP address in 43 country and counting .

There will always be a security risk if you use public WiFi, but that does not mean you should never use it. The basic precautions listed above will help you keep your personal data safe from the majority of attacks against public WiFi hotspots.

Best Regards,
The Proton VPN Team

You can follow us on social media to stay up to date on the latest Proton VPN releases:

Twitter ( new window )| Facebook( new window )  | Reddit( new window )

To get a free Proton Mail encrypted email account, visit: protonmail.com ( new window )