Café WiFi

Is café WiFi safe?

Coffee-shop WiFi is the classic public hotspot: open, busy and easy to imitate. A short routine makes it safe enough for most work.

Short answer

For browsing and most apps, yes — if you join the café’s real network name (ask the staff) and stick to HTTPS. Café networks are usually open, so anyone nearby shares them. For banking or client work, check the network first or use mobile data or a VPN.

How café WiFi usually works

Most coffee shops run an open network with a sign-in page (a “captive portal”) where you accept terms or watch a short message. The IETF even uses coffee shops as the textbook example of short-term internet access behind a captive portal (RFC 8910). Some cafés print a WPA2 password on the receipt instead; that adds WiFi encryption between you and the router, but everyone with the receipt shares it.

What can go wrong

Lookalike hotspots. “Free Coffee WiFi” next to the real “CafeName_Guest” is easy to set up. CISA’s advice is simple: confirm the name before you connect.
Unencrypted pages. On an open network, anything not sent over HTTPS could be seen by people nearby (FTC).
Fake sign-in pages. A café portal never needs your email password or a card number for free WiFi.

A 60-second café routine

Ask staff for the exact network name (and password, if there is one).
Sign in on the portal; check the address and that nothing sensitive is requested.
Run a quick check before work logins: DNS, certificates and signs of a hidden proxy.
Keep to HTTPS and apps; use your VPN for work if your employer requires it.
Forget the network when you leave if you won’t be back.

Wi-Fi Alliance’s “Enhanced Open” standard encrypts open networks without a password, but you can’t easily tell from your phone whether a café uses it — so keep HTTPS as your baseline.

Frequently asked questions

Is coffee shop WiFi safe for work?

For email and most work apps, which encrypt their traffic, generally yes on the café’s real network. Many employers require a VPN on public WiFi; follow that policy.

Is it safer if the café WiFi has a password?

A WPA2/WPA3 password encrypts the radio link, which helps. But everyone with the password shares it, so HTTPS still matters.

How do I know I’m on the café’s real network?

Ask the staff for the exact name, and be suspicious of near-duplicates or a “free” network with a very strong signal.

Sources

Last checked: 2026-10-12. SentryFi is not affiliated with the venues, brands or providers named on this page.