Public Wi-Fi Dangers: How Teens Can Stay Safe on Open Networks

Free Wi-Fi is everywhere: in shopping centres, cafés, train stations, libraries and hotels. It saves mobile data and keeps us connected, so it's tempting to join any network with a strong signal. The problem is that public networks are shared with strangers, and you rarely know who set them up or how well they are protected. A few smart habits can make a big difference.

Why open networks are risky

On an open network, which has no password, the connection between your device and the router may not be encrypted. Anyone else on the network with the right tools could, in some cases, snoop on unprotected traffic. Even networks with a shared password posted on a wall aren't automatically safe, since everyone who knows the password is on the same network.

Many websites and apps now use encryption (look for https and the padlock icon), which protects much of what you do. But encryption isn't everywhere, and attackers have other tricks that don't depend on cracking it.

Fake hotspots and "evil twins"

One well-known trick is the evil twin: a hotspot created by an attacker with a believable name, such as "Cafe_Free_WiFi" or "Airport Guest". If your phone connects to it, the attacker's device sits between you and the internet. From there they can try to redirect you to fake login pages or capture information you type in.

Another warning sign is a login page, often called a captive portal, that asks for more than it should. Be suspicious if a Wi-Fi sign-in wants your social media password, your payment details or a lot of personal information just to get online.

Smart habits for using public Wi-Fi

• Confirm the network name. Ask staff for the exact name rather than guessing from a list of similar ones.

• Turn off auto-connect. Stop your phone from joining open networks automatically, and "forget" networks you no longer use.

• Stick to https. If your browser warns you about a site's certificate, don't click through. Leave the page.

• Skip sensitive tasks. Avoid online banking, shopping or changing passwords on public networks. Use mobile data for those instead.

• Use two-factor authentication. Even if someone gets your password, a second step makes it much harder to break into your account.

• Keep your device updated. Software updates fix security holes that attackers try to exploit.

• Turn off sharing. Disable file sharing and AirDrop-style features set to "everyone" when you're out.

Should you use a VPN?

A VPN (virtual private network) encrypts your traffic and sends it through a server, which can add a layer of protection on shared networks. It's a useful tool, but it isn't magic. A VPN doesn't stop you from falling for a phishing page or downloading a harmful app, and a poor-quality or free VPN may collect your data itself. If you use one, pick a reputable provider with a clear privacy policy, and ask a parent, guardian or teacher if you're unsure.

Your phone's hotspot is often safer

If you really need to do something important, your own mobile data is usually the safer choice. Many phones can also share their connection with a laptop or tablet through a personal hotspot. Protect it with a strong, unique password and don't share it widely.

What to do if something feels wrong

If you think you connected to a suspicious network or entered a password on a strange page, act quickly:

1. Disconnect from the network and turn Wi-Fi off.

2. Change the password for any account you logged in to, starting with email, from a trusted connection.

3. Turn on two-factor authentication if you haven't already.

4. Check your accounts for activity you don't recognise, such as unfamiliar logins or messages.

5. Tell a trusted adult, especially if payment details or school accounts were involved.

The bottom line

You don't have to give up free Wi-Fi entirely. Treat it like a public place: fine for watching videos or checking the bus timetable, but not where you'd want to share your most private information. Pause before you connect, keep your accounts locked down with strong passwords and two-factor authentication, and when in doubt, switch to mobile data.