Is hotel Wi-Fi safe? What to know before you connect

You check in, connect to “Hotel_Guest”, click through a login page, and you’re online. It feels routine. But hotel networks combine every property that makes a network risky: they’re open to hundreds of strangers, run on ageing equipment, and are often managed by a third party the hotel barely thinks about.

None of that means you should avoid them. It means you should use them deliberately. Here’s the honest picture.

What can actually go wrong

The realistic threats on a hotel network are less dramatic than the movies suggest, but they’re real. Anyone else on the network can try to watch unencrypted traffic passing over the air. Someone can set up a laptop broadcasting a network named to look like the hotel’s — an “evil twin” — and quietly capture whatever devices join it.

The captive portal you log in through is its own weak point. These systems are frequently outdated, and a compromised one can push you to fake pages or inject content into the sites you visit. And because so many people cycle through, hotel networks are a favourite hunting ground for opportunists.

What protects you (and what doesn’t)

Modern websites use HTTPS, which encrypts the contents of what you send. That’s a genuine layer of protection and it’s why hotel Wi-Fi isn’t a disaster waiting to happen. But HTTPS doesn’t hide which sites you visit, it doesn’t protect the apps on your phone that still make sloppy insecure requests, and it doesn’t help if you’re tricked onto a lookalike page.

A VPN closes those gaps. It wraps everything leaving your device — every app, not just your browser — in one encrypted tunnel. On a hostile network, an attacker sees a single stream of scrambled data going to one server, and nothing about what’s inside. You can confirm what a network can currently see about you with our free Privacy Check.

A five-point routine for any hotel

Turn your VPN on before you open anything else, and set it to auto-connect on unknown networks so you can’t forget. Confirm the exact network name with reception rather than guessing — the evil twin usually has a name that’s close but not identical. Turn off file and printer sharing while you’re travelling. Avoid anything highly sensitive, like moving money, unless the tunnel is up. And when you leave, tell your device to forget the network so it doesn’t silently rejoin a lookalike next time.

Do that and hotel Wi-Fi becomes what it should be: a convenience, not a gamble. The same routine works for airports, cafés and conference halls — anywhere the network is open to strangers.