⚙ Build in progress — some links may break, some copy may shift. We'd appreciate the heads-up: [email protected]
version 26.5.1 · Western Australia · Est. 2011·Microsoft Partner & Reseller · HP, Yealink, Ubiquiti, Kyocera
— Stay safe · Public WiFi

The five things you should never do on public WiFi.

Coffee shop WiFi is fine for most browsing. These five things, never — no exceptions.

Public WiFi is fine for the things public WiFi is fine for — checking news, reading articles, looking up directions. It is not fine for some specific activities, and that line is much sharper than people realise. Five things below, never on public WiFi, regardless of how reputable the network looks.

69%
Of Australians regularly use public WiFi for sensitive activities
$2.1M
Lost annually to public-WiFi-based account takeover, 2025
5
Specific activities that should never touch public WiFi
// NEVER #1

Online banking — even with the app.

The bank's app is encrypted end-to-end, so technically you're safe. But the human factor isn't — your login session can be hijacked from across the cafe via a fake captive-portal page, your screen can be shoulder-surfed, and any banking activity you do creates a paper trail at the venue's router that someone might log. Bank on cellular data, not WiFi.

// NEVER #2

Log into anything important.

M365, Xero, payroll, the company VPN — anything where the credential gives access to money or sensitive data. The risk isn't always interception (most logins are HTTPS-protected). The risk is browser hijacking via the captive portal page, which can inject a fake login overlay before you even reach the real site.

// NEVER #3

Send anything sensitive over email or messaging.

Even if email is encrypted, the network can see who you're talking to and how often — useful for someone profiling you for a future scam. Save sensitive comms for a trusted network. Same applies to Slack, Teams, WhatsApp — encryption doesn't hide metadata.

// NEVER #4

Download or install anything.

Public WiFi can be silently rerouted at the router level — meaning what you think is downloading from Microsoft might actually be a swapped binary from someone on the same network. Save software downloads for home. The principle is: any time you're trusting where bytes are coming from, do it on a trusted network.

// NEVER #5

Stay connected longer than you need.

Forget the network when you leave. On Windows, Settings > Network > WiFi > Manage Known Networks > Forget. On a phone, hold the network name and tap Forget. The risk: next time you walk past, your device auto-connects without prompting, and you don't know it's happening. Long-running passive connections are how account-hijacks happen days after the original visit.

// THE SAFE ALTERNATIVE

Just tether from your phone.

Mobile data is now cheap, fast, and infinitely safer than a coffee-shop network. Your phone's hotspot is encrypted with a password only you know. The data charges are negligible for normal use. If the activity matters at all, just tether — see the tethering tip for setup.

Related safety reading.

Public WiFi safety is one part of mobile safety. Read the rest.

Set up safe remote-work practices for the team.

Hybrid teams work from cafes, airports, client offices. whedo.it sets up always-on VPN for managed clients (via Conditional Access, no user effort) so any WiFi network is automatically tunnelled. Worth ten minutes of explanation if your team travels.

+61 421 346 887
5.0
★★★★★ on Google · loading…
Read all on Google →