Is airport and hotel Wi-Fi safe while travelling?
Public Wi-Fi can be useful for installing an eSIM or downloading maps, but a familiar-looking network name does not prove you are on the venue's real network. Confirm the network and use ordinary account protections, especially for sensitive sign-ins.
Before joining public Wi-Fi
Confirm the name
Ask staff or check an official sign rather than guessing from similar network names.
Check the site
Use HTTPS and stop if the browser reports a certificate warning.
Protect accounts
Use strong authentication and avoid entering passwords into unexpected portals.
Forget when done
Turn off auto-join for networks you do not need again.
Verify the network before connecting
At an airport or hotel, find the official network name on the venue's sign, room material or website, or ask staff. Attackers can use a similar name to attract travellers. A network that asks for an unexpected software install, payment-card number or email password just to connect deserves caution. If you only need a quick map or bank check and your travel eSIM works, using mobile data may be simpler than investigating a questionable hotspot.
The FTC notes that public Wi-Fi is often safer than it used to be because many sites use encryption, but it still advises checking for HTTPS and protecting accounts. Do not ignore a browser certificate warning. The padlock tells you the connection to a site is encrypted, not that the site itself is legitimate; read the domain name before signing in.
Use public Wi-Fi deliberately
Keep the phone and apps updated, use a strong device lock and enable multifactor authentication on important accounts. A VPN can protect traffic in some situations, but it cannot make a fake bank site trustworthy or stop you from entering a code into a phishing page. Use the official app or a saved bookmark for a bank or email service, and avoid following a login link sent in an unexpected message.
A captive portal may ask you to accept terms or enter a room number. Confirm it belongs to the venue, especially if it requests more information than expected. When you are finished, disconnect and disable auto-join for that public network. If you used a shared computer rather than your own phone, sign out of accounts and avoid saving credentials.
| Situation | Risk to check | Practical choice |
|---|---|---|
| Two similar airport network names | Impersonation. | Confirm official SSID with venue. |
| Browser certificate warning | Connection or site identity problem. | Do not enter credentials. |
| Bank sign-in needed | Phishing portal or link. | Use official app on trusted connection. |
| Large map download | Data allowance. | Use verified Wi-Fi, then save offline. |
Keep a connection fallback
Use trusted Wi-Fi for large downloads such as offline maps, operating-system updates or an eSIM installation, where the connection is stable and verified. Then test the travel eSIM with Wi-Fi off before leaving the airport or hotel. If mobile data fails later, you will know whether the problem is a phone setting or merely the venue's Wi-Fi.
Save your first destination address and ticket details offline. A public network may require a text code you cannot receive, or a portal that does not load. The prepare-phone guide covers offline backups; the landing checklist helps verify the cellular fallback.
Sources and further reading
- FTC: Are public Wi-Fi networks safe?
- Apple: Use eSIM while travelling internationally
- Google: Connect to mobile networks on Pixel