Using public Wi-Fi safely on your iPhone
Most websites and apps now encrypt their traffic, so public Wi-Fi is less dangerous than it used to be. The risks that remain are specific: fake networks with a familiar name, sign-in pages that ask for too much, and your phone joining networks on its own. Four habits cover nearly all of it.
What can go wrong
- Look-alike networks. Anyone can create a hotspot called "Airport_Free_WiFi" or the name of the café you're in. Your traffic then passes through their device.
- Fake sign-in pages. A "captive portal" that asks for your email password, card number or a social login to get online is a red flag.
- Automatic joining. Your iPhone remembers networks and reconnects to anything with the same name, including an impostor.
- Tracking. Network operators can see which device is connected and, without encryption, roughly which sites you visit.
Habit 1: Confirm the network name
Ask staff for the exact network name or check the sign at the counter. If two similar names appear, don't guess.
Habit 2: Keep Private Wi-Fi Address on
Your iPhone uses a different hardware address on each network, which makes it harder to follow you between locations. It's on by default; check that nothing turned it off.
Habit 3: Stop auto-joining networks you don't trust
or tap Forget This Network when you leave
Also check Settings › Wi-Fi › Ask to Join Networks is set to Notify, so new networks don't connect silently.
Habit 4: Use mobile data for anything sensitive
Banking, changing passwords and entering card details can wait until you're on mobile data or your home network. If you need public Wi-Fi often, a reputable VPN encrypts everything between your phone and the VPN provider. Choose one with a clear privacy policy, and remember the VPN company can then see the traffic the café network could.
Warning signs on a sign-in page
Requests for a password to another account, a card number for "free" Wi-Fi, or a prompt to install a profile or app. Close the page and use mobile data instead.