Is public Wi-Fi safe?

Mostly, yes — and the reason why is worth understanding, because the familiar warning is a decade out of date.

What changed

The warning everyone has heard — that anyone on the network can read what you are doing — described the web of around 2010, when a great deal of traffic travelled unencrypted. It was true then. It is largely not true now.

Almost every site uses HTTPS, which encrypts the connection between your browser and the site itself. Someone else in the cafe can see that your device connected to your bank. They cannot read your banking. Browsers now warn loudly about pages that lack it, which is why you rarely see one.

This matters because the obsolete warning is still the main sales pitch for VPNs, and it crowds out the risks that are real.

What actually goes wrong

  • Networks pretending to be something else. Anyone can broadcast a network named after the venue you are sitting in. Asking staff which one is theirs removes the single largest risk here.
  • Your device being reachable. File and printer sharing assumes you know everyone on the network. On a public one, you do not.
  • Phishing. Far and away the most common way people actually lose accounts, and entirely unaffected by which network you are on.
  • Out-of-date software. Most real attacks use flaws patched months ago.

Does a VPN help?

Yes, genuinely — it encrypts everything between your device and the VPN server, which removes the local network from the picture entirely. If you are on a network you have any doubt about, that is worth having.

It is also narrower than the marketing implies. A VPN does not stop phishing. It does not block malicious downloads and it is not antivirus. It does not protect an account whose password has been reused. It does nothing at all if you type your card details into a convincing fake page — those reach the fraudster encrypted the whole way. And it does not make you anonymous: every site you sign in to still knows exactly who you are.

Someone who believes the VPN has covered all of that is in more danger than someone who knows it has not. The full list is on what a VPN can actually hide.

What to do instead, in order

  1. Confirm the network name with the venue.
  2. Turn off file and printer sharing — answer “public” when your device asks.
  3. Turn on two-factor authentication for anything that matters. This helps everywhere, not just here.
  4. Keep your device updated.
  5. Leave card and identity details until you are on a network you trust.
  6. Then, if you have one, use a VPN.

The public Wi-Fi check works through this for the network you are actually on.