Public Wi-Fi feels like a necessity in the modern world but few people realize how much of a security risk it poses. If you’re using open networks, you’re a hacker’s dream. Whether you’re casually browsing the web or trying to get a bit of work done, there are some things you should never do while using a public Wi-Fi connection.

Is Public Wi-Fi Safe to Use?

Connecting to any Wi-Fi network brings a certain amount of risk and cybersecurity is all about minimizing dangers. Some networks are safer than others and it’s always worth analyzing free Wi-Fi networks before using one.

Firstly, check that any free Wi-Fi network looks legitimate. Let’s say you’re at an airport and you connect to a network called “Free Airport Wi-Fi”. How do you know this isn’t a hotspot set up by a scammer runningman-in-the-middle (MITM) attacks?

a warning in macOS that connected network uses a weak security type

Airports, cafés, and other places that commonly offer free Wi-Fi normally display network names and passwords on signs. Always check that you’re connecting to a legitimate network. You can always take a picture of the network details with your phone if you want to connect another device.

You should also understand the difference between secured and unsecured networks. An unsecured network can simply refer to one that allows anyone to connect without using a password. These networks generally lack standard security measures for protecting your information as you use the web.

the google account creation form

A secure network should require a password to connect and some may ask you to agree to terms and services or create an account. This doesn’t guarantee the connection you’re using is secure, though. After connecting, you should also inspect the network to look for possible security issues.

For example, a quick look at your connection on Mac or iOS will show if its using outdated security types.

adding a payment method to google account

Even if you’re confident that the network you’re using is as secure as possible, there are plenty of things you should never do using public Wi-Fi. Open networks make life easy for hackers and it’s difficult to spotthe biggest dangers of using public Wi-Fiuntil it’s too late.

What Not to Do When Using Public Wi-Fi

The best way to stay safe while using public Wi-Fi is to avoid doing anything that could give hackers what they’re looking for.

1. Don’t Log Into Anything That Requires a Password

The golden rule with using public Wi-Fi connections is to never submit personal details: usernames, email addresses, passwords, etc. Hackers can intercept this data and gain access to your accounts or use your personal info in other attacks, such as identity theft.

Forget about logging into email accounts, social media sites, or anything else that asks for a username and password. Using social media apps is generally safe—as long as you don’t need to sign in—but always remember that hackers could be snooping.

screenshot of sharing settings in macOS

2. Don’t Create a New Account

Logging in to existing accounts is one thing, but creating a new account while using public Wi-Fi could give hackers access from day one. This is particularly dangerous if you’re filling out a new account with detailed information: names, addresses, occupations, payment details, etc.

You should only useprivate, secure networksto create new accounts or do anything that handles sensitive information.

3. Don’t Verify Your Identity

Every now and then, authorities, online services, and other groups may ask you to verify your identity. Let’s say you’re traveling in a foreign country and you open up your favorite social media app, only for it to ask for verification. This is a common security feature to verify that it is, in fact, you who is trying to access your account, not some stranger in a foreign land.

As tempting as it might be, don’t verify your identity using public Wi-Fi—including networks at your hotel or Airbnb. You do not want to hand over any of the information used to verify identities to hackers (passports, government IDs, biometric data, etc.).

4. Don’t Submit Your Payment Details

Online shopping is the last thing you want to do while using public Wi-Fi. Any payment details you enter during the checkout process are vulnerable to a variety of attack strategies: phishing, keylogging, man-in-the-middle, and more.

If you really need to buy something in a pinch, use mobile data and create a hotspot with your phone if you want to connect another device. Even if you’re traveling in another country, it’s better to pay for a local SIM card or check what the roaming fees are for the minute or less it takes to submit your payment details securely.

5. Don’t Use Online Banking

If there’s anything more dangerous than giving hackers your payment details, it’s giving them open access to your bank account. This is the kind of territory where cybercriminals could potentially clear you out by transferring all of your funds into one of their accounts–not something you ever want to take chances with.

Above all, never log in to online banking through a web browser using public Wi-Fi. Native mobile banking apps are significantly safer than websites and web apps but they’re by no means 100 percent secure.

Most importantly, verify you’re using the official app because clone apps are one of the most common strategies for hacking accounts. Always download banking apps and set up/log into your account for the first time on a secure network. Take advantage of your bank’s mobile security features, including two-factor authentication and whatever else they offer to protect you.

Even with the latest security features enabled, the only safe way to do online banking is by using a secure network. You don’t want hackers getting ahold of your account number, sort code, bank balance, or any digits of your passwords.

6. Don’t Work Remotely

Remote working went mainstream during the peak of the COVID-19 pandemic. Unfortunately, inexperienced remote workers (and many experienced ones) may not understand the security risks that come with working online using networks outside the workplace.

Hopefully, working from home isn’t too much of an issue if your network is private and secure. However, as soon as you hit the café or a co-working space, you’re relying on a public, unsecured internet connection. These are also the kind of networks cybercrimnals love to target, especially now that remote working is more common.

7. Don’t Share Files

There are two types of file sharing you should avoid while using public Wi-Fi. Firstly, you’ll want to disable any file-sharing settings on connected devices because hackers can exploit these to access files and folders.

For example, if you’re using a macOS device, you can click the Apple menu icon and selectSystem Settings > General > Sharingto see all the sharing settings currently enabled.

Disable every sharing option you’re able to to prevent other people using the same network from accessing files and other data from your device.

The other type of file sharing you want to avoid is manually sharing files online with other users. For example, if you’re using an app like Google Drive, wait until you can access a secure network before sharing any files—either by using the file-sharing features in Drive or other means (eg: email attachments).

8. Don’t Access Sensitive Info or Systems

This is one of the most difficult things to avoid when using public Wi-Fi because we’re so used to accessing and using sensitive information online. This includes data you physically input (usernames, passwords, payment details, etc.) but it can also include anything that shows on your screen like email addresses, ID numbers, and test results, even though you don’t type or enter any data.

Simply accessing a system that stores sensitive information—like an app you use for work—is all it takes for hackers to start making tracks. This includes checking your email inbox. Depending on the type of attack hackers are running, they can view email addresses, contact information, and the contents of messages. With the right kind of attack, hackers may only need one purchase confirmation email to gain enough personal info for identity theft.

9. Don’t Leave Your Device Unattended

Never leave any device unattended in a public setting, especially if it’s connected to an open network. Laptops, phones, and storage devices are goldmines for hackers. Even if they don’t steal your device while you’re away, you have no idea what a hacker may have done with it by the time you return.

Stay Safe When Using Public Wi-Fi

Every public Wi-Fi network is hackable so the safest way to use them is by assuming they’re all hacked.

Visit secure websites, read articles, and browse the web as anonymously as possible. However, doing anything that handles your personal data or sensitive information is a risk when you’re connected to a public network. Do yourself a favor and save the important stuff until you’ve got access to a safe, private network that you may trust.