Public Wi-Fi has been called everything from "perfectly fine" to "hacker honeypot." The truth is in the middle. Here's the realistic threat model for connecting to airport, café, hotel, or library Wi-Fi — and the four habits that actually matter.

What's actually risky

• Evil twin networks: attacker sets up a Wi-Fi network named "Starbucks_Free_WiFi" — you connect, all your traffic goes through them.
• Captive portal phishing: the splash page asks for credentials, social logins, or credit card. None of those should ever be required for free Wi-Fi.
• Plain HTTP eavesdropping: any non-HTTPS site on the network can be read by anyone else on it. Mostly mitigated now that 95%+ of the web is HTTPS — but still real.
• Auto-join exposure: your phone may auto-join a network with the same name as one you've used before. Walk past someone broadcasting "attwifi" and you're on their network.

What's overhyped

The classic "hacker stealing your password from across the room" attacks require unencrypted traffic — which is now rare. Banking apps, email, social media all use HTTPS by default. The real danger is your IP and metadata, plus the captive portal phishing angle.

Four things that actually matter

1. Use a VPN. Encrypts everything regardless of HTTPS. Single biggest mitigation.
2. Turn off Wi-Fi auto-join for unknown networks. Settings → Wi-Fi → tap each saved open network → turn off Auto-Join.
3. Disable file/printer sharing on public networks. Windows asks "public or private?" on first connect — pick public.
4. Don't enter sensitive credentials on captive portal pages. Real Wi-Fi access never needs your social login.

Why your IP matters here

On public Wi-Fi without a VPN, your real public IP is the network's gateway IP — shared with every other patron. Anything attributed to that IP could be attributed to you. Streaming services and game servers often blacklist coffee-shop IPs because of abuse. Connect a VPN and your traffic looks normal.

Verify your VPN

After connecting on public Wi-Fi, check your IP. The displayed location should match your VPN's exit, not the café's. If your real IP shows, run our VPN check to find the leak.

Try it now

Curious what your IP is showing the world right now? Check your IP address & location instantly with our free tool — no signup, nothing stored. Or trace any other IP to see its geolocation, ISP, and network details.