Public Wi-Fi: verify the network and keep software current
A familiar-looking network name does not establish who operates it. When using public Wi-Fi, start by confirming the correct network with the venue and following your device's normal security guidance.
Avoid unnecessary trust
Do not install a certificate, profile or unfamiliar app simply because a captive portal requests it without a credible explanation. Use the genuine service address for important accounts and pay attention to browser security warnings.
Choose a suitable connection
For sensitive work, use an approved connection method or your organisation's policy. Mobile data may be a practical alternative in some situations. A VPN can be one tool, but it does not make a fraudulent website trustworthy or replace account protection.
Tidy up afterwards
Disable automatic joining for networks you no longer need where your device supports it. Keep the operating system and browser updated and use strong account protection. CISA's resources offer broader security practices, while your device maker explains the exact controls. The aim is to avoid treating a convenient connection as permission to ignore unusual prompts or warnings.
Sources & further reading
Source material and official guidance. Original practical suggestions are editorial content, not statements from the organisations below. Checked September 14, 2026.
Have a correction or a question about this article? Contact the editorial team. Read our editorial policy and disclaimer.
