The Real Risks of Public Wi-Fi in 2023 (And How to Stay Safe)
Public Wi-Fi security advice has been around for years, but the threat landscape has evolved. Some older risks have been mitigated by widespread HTTPS adoption; new risks have emerged. Here's an updated, realistic look at what's actually dangerous on public Wi-Fi in 2023 — and what you can do about it.
What HTTPS Changed (And What It Didn't)
A few years ago, the biggest risk on public Wi-Fi was someone intercepting your unencrypted traffic and reading your passwords and data. The widespread adoption of HTTPS has largely addressed this for most websites — your traffic to HTTPS sites is encrypted even on an open network. But HTTPS doesn't protect everything: it doesn't hide which websites you're visiting, it doesn't protect apps that don't use HTTPS, and it doesn't protect you from rogue networks.
Evil Twin Attacks Are Still Very Real
An evil twin attack involves setting up a rogue Wi-Fi hotspot with the same name as a legitimate one. Your device connects automatically (especially if you've connected before), and the attacker can intercept your traffic, redirect you to fake login pages, or inject malicious content into web pages. These attacks require minimal technical skill and are still widely used.
The VPN Solution
A VPN remains the most comprehensive protection against public Wi-Fi risks. By encrypting all your traffic before it leaves your device, a VPN protects you even on a rogue network — the attacker sees only encrypted data going to a VPN server. I use NordVPN and connect to it automatically whenever I join any public network. It's become a reflex.
Other Practical Precautions
Beyond a VPN: disable automatic Wi-Fi connection on your phone and laptop so you're always choosing to connect deliberately. Forget public networks after using them. Avoid accessing banking or financial accounts on public Wi-Fi without a VPN. And be especially cautious in high-traffic locations like airports and hotels, which are prime targets for evil twin attacks.
My Personal Recommendation
I connect to NordVPN automatically on any public network — it's the simplest and most comprehensive protection available.
Bottom Line
Public Wi-Fi is safer than it was five years ago thanks to HTTPS, but it's not safe enough to use without precautions. A VPN and a few simple habits will protect you from the risks that remain.