Are Public Wi-Fi Networks Safe? What the FTC Says

Encryption has changed the risk, but fake websites and weak account security still matter.

By Siddharth ShankarUpdated October 23, 2026

For years the advice was never to use public Wi-Fi. The FTC now describes a more nuanced picture. This guide follows its consumer page “Are Public Wi-Fi Networks Safe? What You Need To Know”.

What has changed

The FTC says connecting through a public Wi-Fi network is usually safe, because most websites now use encryption. It explains that older public Wi-Fi was risky because most websites did not encrypt data, which left it open to hackers on the same network. Encryption scrambles the information between your device and the website so others on the network cannot read it.

How to check a connection

The FTC says to look for a lock symbol or https in the address bar. The same check works in mobile browsers. For apps, it is harder to tell whether the app uses encryption, though the FTC says the majority do.

The caution: fake websites

The FTC warns that scammers create fake sites and encrypt them so they look safe. Encryption on a scammer’s site does not protect your data from the scammers running it. In other words, the lock symbol tells you the connection is private, not that the site is trustworthy. Check the address carefully before you enter a password or card number. Read our guide on QR code scams for another way that fake sites reach you.

What else the FTC advises

• Protect your accounts. Use strong passwords and two-factor authentication where it is available.
• Keep software current. Update your security software, operating system and browser, and turn on automatic updates.
• Report scams at ReportFraud.ftc.gov.

What the FTC page does not cover

The page does not discuss VPNs, so we do not give a view on them here. It also does not say what a network owner can see, such as which sites you visit. Whoever runs a Wi-Fi network may be able to see some details about your connection even when the content is encrypted, so avoid using public networks for anything you would not want the operator to know.

Habits for public networks

1. Check for https before you sign in or pay.
2. Type addresses yourself instead of following links in messages.
3. Avoid sensitive tasks if you can wait and use your mobile data connection instead.
4. Turn off automatic connection to open networks on your phone or laptop.
5. Sign out of accounts when you finish. See how to log out of all devices.
6. Watch for warning signs of a hijacked account. See account takeover warning signs.
7. Check names carefully. Fake networks often copy the name of a real cafe or hotel, so confirm the exact name with staff.

What your connection can reveal

Even on a safe network, your device shares details such as an IP address and a browser profile. Learn more in what someone can do with your IP address and browser fingerprinting explained. Your own router can also reveal your location; read how your router reveals your location.

Linking it to your footprint

Every network you use leaves some trace. The more you stay signed in and the more you sync, the bigger the trail. For ideas to shrink it, read tracking cookies.