{"id":23881,"date":"2026-08-03T13:03:28","date_gmt":"2026-08-03T12:03:28","guid":{"rendered":"https:\/\/rosoft.si\/?p=23881"},"modified":"2026-08-03T13:45:41","modified_gmt":"2026-08-03T12:45:41","slug":"public-wi-fi-while-on-holiday-a-convenient-connection-that-requires-caution","status":"publish","type":"post","link":"https:\/\/rosoft.si\/en\/public-wi-fi-while-on-holiday-a-convenient-connection-that-requires-caution\/","title":{"rendered":"Public Wi-Fi While on Holiday: A Convenient Connection That Requires Caution"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Public Wi-Fi While on Holiday: A Convenient Connection That Requires Caution<\/strong><\/span><\/h2>

Summer is a time for holidays, travel and working outside the usual office environment. Free Wi-Fi networks have become almost standard at airports, hotels, restaurants, campsites, shopping centres and other public places. They allow us to check our email, find directions to our accommodation, make an online reservation or access work-related documents without using mobile data.<\/span><\/p>

However, a public Wi-Fi network is not the same as a trusted home or workplace network. Users generally do not know who manages the network, how well it is protected, who else is connected to it or whether the access point displayed on their device is really what it claims to be.<\/span><\/p>

Public Wi-Fi networks should therefore be used with caution, especially when accessing business systems, email, online banking or other sensitive information.<\/span><\/p>

Are All Public Networks Dangerous?<\/strong><\/span><\/h4>

No. Connecting to a public network does not automatically mean that someone will intercept our data or take control of our user account.<\/span><\/p>

Today, most websites use an encrypted HTTPS connection. This type of connection encrypts the data exchanged between the browser and the website being visited. It can be identified by \u201chttps\u201d and the padlock symbol in the browser\u2019s address bar. The US Federal Trade Commission explains that, due to the widespread use of encryption, connecting through a public network is generally safer today than it was in the past.<\/span><\/p>

However, HTTPS does not eliminate every risk. For example, an encrypted connection cannot protect us if we visit a fraudulent website operated by an attacker. A malicious website can also use HTTPS and display a padlock symbol. The padlock means that the connection to the website is encrypted, but it does not confirm that the website is legitimate or trustworthy.<\/span><\/p>

When using public networks, we must therefore verify both the network we are connecting to and the websites and services we intend to use.<\/span><\/p>

The Most Common Threat Is a Fake Wi-Fi Network<\/strong><\/span><\/h4>

An attacker can set up their own wireless access point and give it a name that closely resembles the name of a legitimate network. For example, such a network could be named:<\/span><\/p>

  • Hotel_Guest_WiFi,<\/span><\/li>
  • Airport_Free_WiFi,<\/span><\/li>
  • Camping_Guest,<\/span><\/li>
  • Cafe_Free,<\/span><\/li>
  • Hotel_WiFi_5G.<\/span><\/li><\/ul>

    When presented with several similar options, a user may select the wrong one and unknowingly connect to a network controlled by an attacker. This type of attack is commonly known as an \u201cevil twin\u201d attack.<\/span><\/p>

    CISA warns that an attacker can imitate a public access point and convince users to connect through the attacker\u2019s equipment. It therefore recommends confirming the correct name and password of a public network before connecting.<\/span><\/p>

    Never guess the correct network name. At a hotel, restaurant or other public venue, verify it with a member of staff or consult an official notice provided by the network operator.<\/span><\/p>

    A Password Does Not Necessarily Mean That the Network Is Secure<\/strong><\/span><\/h4>

    Users often assume that a network is secure if a password is required to connect. A password may prevent uncontrolled access to the network, but it does not guarantee adequate protection on its own.<\/span><\/p>

    If every hotel guest or caf\u00e9 customer receives the same password, the network is still shared by many unknown devices. We also do not know whether the network equipment has been configured correctly, is regularly updated or is adequately protected against misuse.<\/span><\/p>

    A login page that appears after connecting is not proof that the network is legitimate either. An attacker can create a similar page and ask users to enter their email address, password, telephone number or even payment card details.<\/span><\/p>

    If a login page requests more information than would reasonably be necessary to provide network access, it is safer to disconnect.<\/span><\/p>

    What Should We Avoid Doing on a Public Network?<\/strong><\/span><\/h4>

    When using a public network, avoid activities where the misuse of information could cause significant harm.<\/span><\/p>

    This applies particularly to:<\/span><\/p>

    • accessing online or mobile banking,<\/span><\/li>
    • entering payment card details,<\/span><\/li>
    • accessing company information systems without appropriate protection,<\/span><\/li>
    • opening confidential business documents,<\/span><\/li>
    • managing servers, firewalls or other critical systems,<\/span><\/li>
    • changing passwords,<\/span><\/li>
    • sending sensitive personal or business information,<\/span><\/li>
    • using electronic identities and digital certificates,<\/span><\/li>
    • remotely connecting to devices in the workplace.<\/span><\/li><\/ul>

      If we need to perform a sensitive or urgent work-related task, using a mobile data connection or a personal hotspot on a mobile phone is generally a safer option.<\/span><\/p>

      How Can We Use Public Wi-Fi More Safely?<\/strong><\/span><\/h4>
      1. Verify the Exact Name of the Network<\/strong><\/span><\/h5><\/li><\/ol>

        Before connecting, ask a member of staff which Wi-Fi network is the official one. Be particularly careful if several networks with almost identical names appear in the list.<\/span><\/p>

        A stronger signal does not necessarily mean that the access point is legitimate.<\/span><\/p>

        1. Use Mobile Data Whenever Possible<\/strong><\/span><\/h5><\/li><\/ol>

          If a suitable mobile connection is available, it is generally a better choice than an unknown public network when accessing sensitive information.<\/span><\/p>

          If necessary, a mobile phone can be used as a personal hotspot. Protect the hotspot with a strong, unique password and switch it off when it is no longer required. Security recommendations for mobile hotspots also include the use of WPA2 or WPA3 encryption.<\/span><\/p>

          1. Use Your Company VPN<\/strong><\/span><\/h5><\/li><\/ol>

            If your company provides a corporate VPN connection, enable it before accessing work email, documents or internal systems.<\/span><\/p>

            A VPN creates an encrypted connection between the device and the VPN server. This reduces the possibility of someone on the local network monitoring or modifying network traffic. The UK\u2019s National Cyber Security Centre warns that connecting mobile devices to public or unsecured networks may allow attackers on the same network to intercept or alter data.<\/span><\/p>

            However, a VPN does not provide complete protection. It will not protect us from a fraudulent website, a malicious attachment, the disclosure of login credentials or the approval of a fraudulent multi-factor authentication request.<\/span><\/p>

            1. Check the Address of the Website You Are Visiting<\/strong><\/span><\/h5><\/li><\/ol>

              Before entering a username, password or any other information, check:<\/span><\/p>

              • whether the web address begins with \u201chttps\u201d,<\/span><\/li>
              • whether the domain name is spelled correctly,<\/span><\/li>
              • whether the address contains any unusual additions or spelling mistakes,<\/span><\/li>
              • whether the page was opened using a trusted bookmark or an official application.<\/span><\/li><\/ul>

                If the browser displays a warning about an invalid or untrusted certificate, do not ignore the warning and do not proceed to the website.<\/span><\/p>

                1. Use Multi-Factor Authentication<\/strong><\/span><\/h5><\/li><\/ol>

                  Multi-factor authentication means that, in addition to a password, an additional form of identity verification is required to sign in. This may, for example, involve approving a request in a mobile application.<\/span><\/p>

                  This reduces the risk of an account being misused if the password is compromised. Two-factor authentication should be enabled wherever it is available.<\/span><\/p>

                  Do not automatically approve every sign-in request. If you did not initiate the request yourself, reject it and report the incident to your system administrator or IT support team.<\/span><\/p>

                  1. Update Your Device and Applications<\/strong><\/span><\/h5><\/li><\/ol>

                    Before travelling, install all available security updates for:<\/span><\/p>

                    • the operating system,<\/span><\/li>
                    • the web browser,<\/span><\/li>
                    • antivirus or other security software,<\/span><\/li>
                    • the VPN client,<\/span><\/li>
                    • office and communication applications.<\/span><\/li><\/ul>

                      Updates address known security vulnerabilities. It is advisable to keep security software, the operating system, the web browser and the mobile operating system up to date, and to enable automatic updates.<\/span><\/p>

                      1. Disable Automatic Connections<\/strong><\/span><\/h5><\/li><\/ol>

                        A phone or laptop may automatically connect to a network that has the same name as one used in the past.<\/span><\/p>

                        Automatic connections to public networks should therefore be disabled on the device. After using a public network, select the \u201cForget Network\u201d option to prevent the device from connecting to it automatically in the future.<\/span><\/p>

                        1. Disable Sharing<\/strong><\/span><\/h5><\/li><\/ol>

                          The following features should be disabled when using a public network:<\/span><\/p>