What makes shared networks different
At home, you control the router and know who is connected. On a network in a cafe, library, airport or hotel, you share the connection with strangers and rely on an operator you know little about. Two things follow. Other users on the same network may, in some setups, be able to observe or interfere with traffic that is not protected. And you cannot be sure the network is what it claims to be.
The risk is real but is often overstated. Much of the web now uses encrypted connections, which has reduced what an eavesdropper on a shared network can see. The sensible response is care, not avoidance.
The main risks
Eavesdropping on unprotected traffic. If a site or app does not encrypt its traffic, someone on the same network may be able to read what passes between you and it. Browsers usually show a padlock or similar sign for encrypted connections, and warn you when a page is not secure. Apps are harder to judge, since you cannot see what they use.
Fake or “evil twin” hotspots. An attacker can set up a network with a name like the cafe’s, hoping people connect to it. Everything you do then passes through their equipment. Encrypted connections still protect most content, but you may be shown fake login pages or prompts.
Fake sign-in pages. Many public networks ask you to accept terms or sign in through a web page. A malicious one can ask for an email address and password, or for card details, which no genuine hotspot needs.
Other devices on the network. If your device shares files or has sharing features turned on, other people on the network may see it or try to connect.
Outdated software. Weaknesses in unpatched devices are easier to exploit on a network full of strangers, which is one more reason software updates matter before you travel.
Sensible habits
Confirm the network name. Ask staff for the exact name and any password. Be careful with networks that have similar names, and turn off auto-connect for open networks so your phone does not join one without asking.
Prefer your phone’s data connection for sensitive tasks. For banking, payments or anything involving important accounts, mobile data is generally safer than a stranger’s network. If you can, use it, or share your phone’s connection with your laptop using a hotspot feature protected by a strong password.
Look for HTTPS. Check that the padlock is present on sites where you enter anything private. If your browser warns about a certificate or a site that is not secure, stop and do not click through.
Do not ignore warnings. Certificate errors on a familiar site while you are on a shared network are a reason to disconnect, not to try again.
Turn off sharing. In your device’s network settings, mark the network as public, if asked, and disable file and printer sharing. Most devices do this by default for new networks.
Keep software updated. Install updates for your system, browser and apps, and use a screen lock.
Use two-factor authentication. If someone does capture a password, a second step makes it much harder to use. The options are described in the article on the second step at sign-in.
Log out and forget the network. When you are done, sign out of sensitive accounts and remove the network from your saved list so you do not rejoin automatically.
Be careful with downloads and pop-ups. Do not install anything a hotspot page asks you to, such as a special app or browser extension, in order to get online.
Where a VPN fits
A virtual private network encrypts the connection between your device and the VPN provider’s server, so the local network sees less of your traffic. It can be a reasonable extra layer on untrusted networks. It is not magic: it moves your trust from the local network operator to the VPN company, it does not stop you from entering a password on a fake page, and quality varies widely among providers. The article on vpn basics explains these points in more detail. Because most web traffic is already encrypted, a VPN is often a modest improvement rather than a necessity.
What is generally fine
Reading news, watching video or browsing public information on a shared network carries little risk, particularly on sites that use encrypted connections. The caution belongs around sign-ins, payments, personal documents and anything you would not want a stranger to see. Even then, using a carefully chosen network and the habits above lowers the risk considerably.
Work and family devices
If you use a work laptop on public networks, follow your employer’s rules, which may require a company VPN. Tips for keeping job-related devices safe are in the article on work device security. For children, public networks often have no filtering at all, so parental controls on the device itself are more useful than any network setting.
Your home network matters too
The same logic applies in reverse: the router at home should have a strong password, current firmware and an unguessable administrator login. Guest access for visitors keeps their devices separate from yours, and home network security covers this in more detail.
A quick checklist
- Confirm the name of the network with staff.
- Use mobile data for banking and sensitive tasks.
- Check for the padlock and heed browser warnings.
- Turn off sharing and auto-connect.
- Update devices before you travel.
- Log out and forget the network afterward.
No set of habits makes any network risk-free. These steps reduce the odds of trouble, and for anything truly important, waiting until you are on a trusted connection is always an option. For the wider picture, see the family guide to online safety.