SentryFi- SentryFi
- WiFi guides
- Is free WiFi safe?
Guide
Is free WiFi safe?
Free WiFi in cafés, airports, hotels and shops is usually fine for everyday use. A few specific things can go wrong, and you can check for most of them.
Mostly, yes, for everyday browsing. The FTC says that because encryption is now widespread, using public WiFi is usually safe. The risks that remain are lookalike networks, fake sign-in pages and apps or pages that aren’t encrypted. Join the venue’s exact network, use HTTPS, and check the network before banking or work.
Why free WiFi is safer than it used to be
- Most traffic is encrypted. Websites and apps use HTTPS/TLS, so other people on the same hotspot can’t read what you send (FTC).
- Phones hide their device address. iPhone and Android use a private (randomized) WiFi address on new networks, which limits tracking.
- Android uses encrypted DNS where it can. Google notes Private DNS secures DNS lookups only, not everything else.
What can still go wrong on free WiFi
| Lookalike (evil-twin) network | A copy of a trusted name, sometimes with a stronger signal (CISA). You join the wrong network without noticing. |
|---|---|
| Fake sign-in page | The page before you get internet access asks for more than it should: a card number, an email password, a bank login. |
| No WiFi password | The FTC notes you can only be sure a network encrypts the WiFi link if it asks for a WPA/WPA2 password. Most free WiFi doesn’t. |
| DNS or proxy tampering | A network can answer address lookups itself or pass traffic through a proxy. Often harmless, sometimes not. |
What is fine and what to keep for later
| Usually fine | Maps, news, messaging apps, streaming, browsing HTTPS sites |
|---|---|
| Check the network first | Banking, shopping, work email, anything with a password |
| Avoid on unknown WiFi | Typing card details into a WiFi sign-in page, ignoring certificate warnings, installing “required” profiles or apps to get online |
A 5-step check before you rely on it
- Confirm the exact network name with staff, a sign or the venue’s website. Similar names are not the same network.
- Complete any sign-in page only if its address belongs to the venue or its WiFi provider. Never type a card number for “free” WiFi.
- Check the network: sign-in finished, DNS answers match trusted DNS, certificates valid, no unexpected proxy.
- Use apps and HTTPS sites. Stop if a site you know shows a certificate warning.
- Turn off Auto-Join for networks you won’t use again.
SentryFi runs the network part of this check in about 45 seconds: it looks for a sign-in page, compares DNS answers with trusted DNS, checks certificates and looks for a proxy, then gives a 0–100 risk score. It is a set of warning signs, not a guarantee that a network is safe.
Frequently asked questions
Is it safe to use free WiFi without a password?
For browsing HTTPS sites and apps, usually yes. Without a password the WiFi link itself isn’t encrypted, so you rely on each app or site’s encryption. Keep sensitive logins for a network you’ve checked, or use mobile data.
Can free WiFi steal my passwords?
Not from encrypted apps and HTTPS sites by simply being on the network. Passwords are usually lost by typing them into a fake page, such as a fake WiFi sign-in page or a phishing site.
Is free WiFi safe with a VPN?
A VPN encrypts your traffic across the network, which covers most remaining risks. It doesn’t help if you type details into a fake sign-in page before the VPN connects.
Related guides
Sources
- FTC — Are Public Wi-Fi Networks Safe? What You Need To Know
- FTC — Tips for using public Wi-Fi networks (PDF)
- CISA — Securing Wireless Networks (ST05-003)
- CISA — Eviction Strategies: Evil Twin (T1557.004)
- Android Help — Manage advanced network settings on your Android phone (Private DNS, randomized MAC)
- Apple Support — Use private Wi-Fi addresses on Apple devices
