Public Wi-Fi vs Mobile Data Abroad: Staying Safe Online

Free Wi-Fi follows travellers everywhere: the departure gate, the hotel lobby, the train, the café on the corner. It is convenient, often quick, and for plenty of tasks perfectly fine. But every public network is run by someone you do not know and shared with people you will never see. Staying safe is less about avoiding Wi-Fi altogether and more about knowing which jobs belong on which connection.

What can actually go wrong on public Wi-Fi

The risks are real but often explained in a confusing way. In plain words:

• Open networks. A network with no password does not encrypt the traffic between your device and the router. Most websites and apps now encrypt their own connections, which protects the content, but the network can still see which services you connect to, and older or poorly built apps may send more in the clear.
• Lookalike networks. Someone nearby sets up a network with a convincing name, such as a copy of the airport's or the café's. If your phone joins it, that person sits between you and the internet and can try to show you fake login pages.
• Sign-in pages that ask too much. Many public networks show a registration page before letting you online, and some ask for far more personal information than they need.
• One password for everyone. Hotel Wi-Fi with a single password for all guests behaves much like a public network, because everyone on it shares the same local network.
• Your own sharing settings. File sharing, AirDrop or nearby sharing set to "Everyone" can let strangers on the same network send you files or see your device's name.

None of this makes public Wi-Fi a disaster. Modern encryption makes casual snooping much harder than it used to be. The main dangers today are fake networks and fake login pages, and both are easy to sidestep with a few habits.

Why mobile data is the safer choice for sensitive tasks

When you use mobile data, your phone talks to the mobile network over an encrypted radio link, and you are not sharing a local network with the strangers around you. There is no lookalike network to join by mistake and no sign-in page to fill in. It is not a magic shield, since a phishing link is still a phishing link, but it removes the tricks that make public Wi-Fi risky.

That makes mobile data the sensible default for:

• Online banking and payment apps
• Entering card details, for example when booking or changing a flight
• Logging in to email, work and cloud accounts
• Resetting passwords and approving sign-ins

Hotel, airport and café Wi-Fi: using them sensibly

Hotel Wi-Fi

Ask reception for the exact network name rather than picking the most likely-looking one from the list. Hotel Wi-Fi is ideal for heavy, low-risk jobs: downloading offline maps, updating apps, backing up photos or streaming a film in the evening. Keep banking and important logins for mobile data.

Airport Wi-Fi

Use only the network named on official airport signs, and be wary of near-identical names. Airport networks often have time limits or registration pages, so give the minimum details needed. Busy terminals are exactly where a lookalike network is most tempting to set up.

Café, train and bus Wi-Fi

These are fine for reading the news or checking opening times. If a network suddenly asks you to log in with an email or social account to "continue", that is a good moment to switch to mobile data instead.

VPN basics, without the hype

A VPN (virtual private network) creates an encrypted tunnel from your device to a server run by the VPN provider. On public Wi-Fi, the local network then sees only that you are connected to the VPN, not which sites you visit.

Two caveats keep expectations realistic. First, you are moving your trust from the Wi-Fi operator to the VPN company, so choose a reputable provider and read how it handles your data; a free service has to make money somehow. Second, a VPN does not protect you from phishing pages, weak passwords or malicious apps. It is a useful extra layer on public Wi-Fi, not a substitute for the habits below.

Mixing Wi-Fi and mobile data on your phone

Phones prefer Wi-Fi whenever they recognise a network, which is helpful at your accommodation but can backfire elsewhere:

• Auto-join can reconnect you to any network with a name you joined before, including generic ones like "Free WiFi". Turn auto-join off for public networks, and forget them when you leave.
• Wi-Fi Assist on iPhone, and similar Android options that switch to mobile data when Wi-Fi is weak, keep you online but draw on your data allowance.
• Turning Wi-Fi off for a banking session is the simplest way to make sure the phone uses mobile data.

Mobile data is finite, so it pays to know roughly what you use: around 1 GB a week if you mostly navigate and message, 3–5 GB if you browse and scroll social media, and 10 GB or more once video calls and streaming come in. Let hotel Wi-Fi handle backups and big downloads, and keep mobile data for being out and about and for anything involving a password or a payment.

A simple safety routine for the trip

1. 1Update your phone and apps before you leave.
2. 2Turn on two-step verification for email and banking, using an authenticator app where the service allows it.
3. 3Set AirDrop or nearby sharing to contacts only.
4. 4Switch off auto-join for public networks.
5. 5Use mobile data, not public Wi-Fi, for anything involving passwords or payments.
6. 6Check that the web address is the one you expect before you type a password.
7. 7Forget public networks once you leave the place they belong to.

A travel eSIM makes this routine easy to follow. A HelloSIM eSIM is installed at home and connects once you arrive and switch the line on, with data roaming turned on for that line, so you are not relying on airport Wi-Fi to message your host or book a ride. Because it is data-only, your own SIM stays in the phone and your usual number can still receive bank codes by text. Keep data roaming off on that home line so your carrier does not bill you for roaming data.