Is Public WiFi Safe? How to Check a Network Before You Connect (2026)
Hotel, airport, and coffee-shop Wi-Fi is far safer than it was ten years ago, mostly because almost every website and app now encrypts what you send. The U.S. Federal Trade Commission now says that "connecting through a public Wi-Fi network is usually safe." But "usually" carries a lot of weight in that sentence. The network itself can be open with no encryption at all, a copy set up by someone else under the same name, or quietly redirecting your traffic. This guide shows what you can check yourself on an Android phone in under a minute, what each result means, and the parts a phone won't show you on its own.
NoSnoop: WiFi Security CheckerChecks if the Wi-Fi you're on is safe
Steps are current as of November 2026 and were checked on Android 14 (Google's own Settings app). Menu names vary by phone maker and Android version.
1. The short answer
Public Wi-Fi is usually fine for ordinary browsing on sites and apps that use encryption. Before you connect — and especially before you log in to anything — run through these five checks:
- Encryption: In the Wi-Fi list, networks with a password show a lock icon. Tap the gear next to the network you're on and look at Security. "None" means nothing you send over that Wi-Fi link is scrambled. Section 3.
- The name: Ask staff for the exact network name. Two networks with the same name — one locked, one open — is a warning sign. Section 4.
- The sign-in page: If a page asks for details before you get online, only type what you'd hand to that business at the counter. Section 5.
- Private DNS: Settings → Network & internet → Private DNS → leave it on Automatic (or set a provider). Section 6.
- The padlock: Look for the lock or "https" in your browser before typing a password — while remembering that scam sites can have one too. Section 7.
Encryption on the website (https) protects what you send to that site. Encryption on the Wi-Fi (WPA2, WPA3) protects the link between your phone and the router. A safe session on public Wi-Fi needs the website's encryption at minimum. The Wi-Fi checks tell you whether the network itself is trying to get in between.
2. What can actually go wrong on public Wi-Fi
"Public Wi-Fi is dangerous" is too vague to act on. In practice the risks come down to five specific situations, and each one has a different check:
| Situation | What it means for you | Check |
|---|---|---|
| Open network (no password, no encryption) | Anything an app sends without its own encryption travels over the air unscrambled. | Section 3 |
| Old encryption (WEP, WPA) | The lock exists but is weak. The Wi-Fi Alliance replaced WEP in 2003 and describes TKIP (used by WPA) as having "some vulnerability to cryptographic attacks". | Section 3 |
| Look-alike network ("evil twin") | Someone broadcasts a network with the same name as the real one, so your phone joins theirs instead. | Section 4 |
| Sign-in page asking for too much | Whatever you type on that page goes to whoever runs the network. | Section 5 |
| Redirected address lookups (DNS) or intercepted connections | You type the right site name but are sent somewhere else, or something in the middle reads your traffic. | Sections 6 and 9 |
The first four you can check by eye in Android's Settings. The last one doesn't show up anywhere in Settings — that's covered in section 9.
3. Check 1 — Is the network encrypted? (lock icon and security type)
In the Wi-Fi list: Open Settings → Network & internet → Internet. Google's Android help states that "networks that require a password have a lock icon." A network with no lock is open.
The exact security type:
- In the same list, tap the gear next to the network you're connected to.
- Look at Security. It shows the type of encryption, for example None, WPA2, WPA3, or Enhanced Open.
On Samsung Galaxy phones the Wi-Fi list is under Settings → Connections → Wi-Fi.
| What you see | What it means | Verdict |
|---|---|---|
| None (no lock icon) | No encryption between your phone and the router. | Avoid logging in to anything |
| WEP | An outdated lock, replaced by WPA in 2003. Samsung's own setting calls it an "outdated security protocol". | Treat as open |
| WPA (or WPA/TKIP) | Older encryption, replaced by WPA2 in 2004. | Weak — avoid sensitive logins |
| WPA2 | The current common standard. | Fine |
| WPA3 | The newest standard, introduced by the Wi-Fi Alliance in 2018. | Fine |
| Enhanced Open (OWE) | No password, but traffic is still encrypted. Android 10 and later support it. | Fine for eavesdropping — but see the note below |
One thing encryption doesn't tell you: whether the network is the one you think it is. Android's own documentation notes that Enhanced Open encrypts an open network but doesn't verify who runs it. And a hotel network with a password printed on a card at reception is shared with every guest, so the password keeps out passers-by, not other guests. That's why section 4 exists.
4. Check 2 — Is it the real network, or a look-alike?
A look-alike network (often called an "evil twin") uses the same name as the real one. Your phone can't tell them apart by name, and if you've joined that name before, it may connect on its own.
- Get the exact name from staff. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) advises: "Confirm the name of the network and exact login procedures with appropriate staff to ensure that the network is legitimate." A sign on the wall or a card at the desk counts.
- Look for duplicates in the list. If you see the same name twice — one with a lock, one without — be suspicious. Big venues often have several access points with the same name, and that's normal; the warning sign is the same name appearing both with and without a password.
- Be wary of near-misses like "Airport_Free_WiFi" next to "Airport Free WiFi", or a network named after the venue when staff tell you theirs is called something else.
- Samsung Galaxy: in Wi-Fi settings, Intelligent Wi-Fi includes a Detect suspicious networks option, which Samsung describes as "Get notified when suspicious activity is detected on the current Wi-Fi network."
5. Check 3 — The sign-in page
Many hotel, airport, and café networks show a web page before letting you online — a "captive portal". Android has detected these since Android 5.0 and shows a notification asking you to sign in to the network.
- That page is run by whoever runs the network. Only enter what you'd hand over at the counter: a room number and surname, or accepting the terms.
- Be suspicious if the page asks for a card number for "free" Wi-Fi, or for your email account password, or a social media login.
- Never reuse an important password to create an account on a Wi-Fi sign-in page. The FTC recommends strong passwords and two-factor authentication on your accounts in general.
- If you expected a sign-in page (the venue said there would be one) and none appears, or one appears on a network that shouldn't have one, ask staff.
The same caution applies to sign-in links that arrive by text or email rather than on a Wi-Fi page. NoLinkTrap, an Android app from the team behind NoSnoop, shows where a link really goes and flags addresses that only look like a well-known company's site.
6. Check 4 — Private DNS
Every time you open a site or app, your phone first looks up its address (a DNS lookup). On a hostile network, those lookups can be answered with the wrong address. Android's Private DNS setting encrypts these lookups.
- Open Settings → Network & internet → Private DNS.
- Automatic is the default. Google's Android Developers Blog explains that "by default, devices automatically upgrade to DNS over TLS if a network's DNS server supports it" — on networks that don't support it, lookups are not encrypted.
- To always encrypt lookups, choose Private DNS provider hostname and enter a provider's hostname (for example
dns.googleorone.one.one.one).
Google's help page is clear about the limit: "Private DNS helps secure only DNS questions and answers. It can't protect anything else."
7. Check 5 — The padlock in your browser
The FTC's main tip for public Wi-Fi is to "look for a lock symbol or https in the address bar" before entering personal information. With https, the content of what you send to that site is encrypted even on an open network.
The FTC also warns that scammers "create fake websites and encrypt them to make you think they're safe." The padlock means the connection is encrypted, not that the site is genuine. Type the address yourself or use the official app rather than following a link from a sign-in page or pop-up.
8. After you connect: auto-connect, banking, and updates
- Turn off Auto-connect for public networks. Settings → Network & internet → Internet → gear next to the network → Auto-connect ("Allow connection to this network when in range"). When you leave, you can also tap Forget. This stops your phone silently joining a network with the same name somewhere else.
- Save banking and sensitive work for mobile data. CISA advises not to conduct "sensitive activities, such as online shopping, banking, or sensitive work" over public wireless networks. If the network fails any of the checks above, switch Wi-Fi off and use mobile data.
- Keep Android and your apps updated. The FTC recommends keeping your operating system and browser up to date and turning on automatic updates.
9. What you can't see by eye — and how an app can check it
The checks above take a minute, but some things don't appear anywhere in Settings:
- Whether address lookups on this network are being answered with the wrong address.
- Whether a certificate or proxy has been added to your phone that would let someone read encrypted traffic.
- Whether the network's router has an old, unencrypted admin door open.
- Comparing every nearby network for duplicates each time you walk into a new place.
NoSnoop is an Android app that runs these checks for the network you're on and shows a plain verdict — Safe, Caution, or Danger — for each:
- Encryption — no password or WEP is Danger, WPA is Caution, WPA2/WPA3/OWE is Safe.
- Fake look-alike network — flags the same name broadcast both with and without a password nearby.
- Login page — tells you whether the network uses a sign-in page.
- DNS tampering — looks up a name that shouldn't exist and a few fixed addresses that are identical everywhere, and flags answers that don't match.
- Signs of eavesdropping — checks for a manually-added certificate or a proxy on your device, and whether a well-known site's connection is being intercepted.
- Router open ports — checks whether the router answers on telnet or an unencrypted admin page. It never tries to log in.
It can also compare nearby networks before you connect, and alert you the moment your phone joins a Wi-Fi network with no encryption or weak encryption. Network names and your location are never sent off your phone.
NoSnoop: WiFi Security CheckerChecks if the Wi-Fi you're on is safe
10. Checklist: by hand vs. with an app
| Check | By hand on Android | NoSnoop |
|---|---|---|
| Encryption | Wi-Fi list lock icon; gear → Security | Automatic, with verdict |
| Look-alike network | Ask staff; scan the list for duplicates | Compares nearby networks |
| Sign-in page | Android's sign-in notification | Shown as a check |
| Redirected DNS | Not visible; Private DNS reduces the risk | Tested on each check |
| Interception (certificate or proxy) | Not visible in Wi-Fi settings | Tested on each check |
| Router admin ports | Not visible | Tested on each check |
| Alert when joining an unsafe network | Samsung: Detect suspicious networks. No equivalent setting on Pixel's Wi-Fi screens | Optional notification |
11. FAQ
- Is it safe to use public Wi-Fi?
- Usually, for ordinary browsing. The FTC says that because of the widespread use of encryption, connecting through public Wi-Fi is usually safe. The risks come from the network itself: no encryption, a look-alike network with the same name, a sign-in page asking for too much, or redirected traffic. Check the security type and the network name before logging in to anything.
- How do I check if a Wi-Fi network is secure on Android?
- Open Settings → Network & internet → Internet. Networks with a password show a lock icon. Tap the gear next to your network and look at Security: None means no encryption, WEP and WPA are outdated, and WPA2, WPA3, or Enhanced Open are encrypted.
- Is public Wi-Fi with a password safe?
- Safer than an open network, but the password is shared with everyone at that venue, so it keeps out passers-by, not other users. It also doesn't prove the network is the real one. Confirm the network name with staff and still check for the padlock before logging in.
- How can I tell if a Wi-Fi network is fake?
- Ask staff for the exact name and compare. Be suspicious if the same name appears both with and without a password, or if the name is a near-miss of the venue's. Samsung Galaxy phones have a Detect suspicious networks option under Intelligent Wi-Fi. An app such as NoSnoop can flag duplicate look-alike networks automatically.
- Is it safe to use banking apps on public Wi-Fi?
- Banking apps encrypt their own connections, but CISA advises against banking and online shopping over public wireless networks. If you need to, use mobile data instead, or at least confirm the network is encrypted and genuine first.
- Does a VPN make public Wi-Fi safe?
- A VPN encrypts traffic between your phone and the VPN provider, so the Wi-Fi operator can't see it — but you are then trusting the VPN provider instead. It doesn't help if you type your details into a fake sign-in page or a fake website. The checks in this guide still apply.
12. Summary
Public Wi-Fi is usually safe for encrypted sites and apps, but the network itself can be open, fake, or tampered with. In under a minute on Android: check the lock icon and Security type, confirm the name with staff, be careful on sign-in pages, keep Private DNS on Automatic, and look for the padlock. Turn off Auto-connect for public networks and use mobile data for banking. DNS redirection, interception, and router ports aren't visible in Settings — an app like NoSnoop can check those for you.
- Encryption: Settings → Network & internet → Internet → gear → Security (None = no encryption).
- Name: confirm with staff; same name locked and unlocked = warning sign.
- Sign-in page: only enter what you'd give at the counter.
- DNS: Settings → Network & internet → Private DNS → Automatic or a provider.
- Afterwards: Auto-connect off, Forget the network, mobile data for banking.
Sources
- Federal Trade Commission, "Are Public Wi-Fi Networks Safe? What You Need To Know" ("connecting through a public Wi-Fi network is usually safe"; lock symbol or https; scammers encrypt fake websites; strong passwords, two-factor authentication, updates) consumer.ftc.gov
- CISA, "Cybersecurity for Electronic Devices" (confirm the network name and login procedures with staff; avoid online shopping, banking, or sensitive work on public wireless) cisa.gov
- Android Help, connecting to Wi-Fi on Android (Settings → Network & internet → Internet; "Networks that require a password have a lock icon") support.google.com
- Pixel Phone Help, Wi-Fi connections (automatic connection to saved networks; Forget a network) support.google.com
- Android Help, advanced network settings (Private DNS: Off, Automatic, provider hostname; "Private DNS helps secure only DNS questions and answers") support.google.com
- Android Developers Blog, "DNS over TLS support in Android P Developer Preview" (automatic upgrade to DNS over TLS when the network's DNS server supports it) android-developers.googleblog.com
- Android Developers, "Captive portal API support" (captive portal detection since Android 5.0) developer.android.com
- Android Open Source Project, "WPA3 and Wi-Fi Enhanced Open" (support from Android 10; OWE encryption without authentication) source.android.com
- Wi-Fi Alliance, "What are legacy protocols?" (WEP replaced in 2003, WPA in 2004; TKIP vulnerability) wi-fi.org
- Wi-Fi Alliance, "Wi-Fi Alliance introduces Wi-Fi CERTIFIED WPA3 security" (2018) wi-fi.org
- Wi-Fi Alliance, "Wi-Fi CERTIFIED Enhanced Open delivers data protection in open Wi-Fi networks" (protection against passive eavesdropping without a password) wi-fi.org
- Samsung Support (US), Wi-Fi settings on Galaxy phones (Settings → Connections → Wi-Fi; Allow WEP networks; Intelligent Wi-Fi → Detect suspicious networks) samsung.com
- Android 14 Settings app, checked on device (network details: Security, Auto-connect, Forget; Network & internet → Private DNS) — November 2026
- NoSnoop app, in-app check names and descriptions (Encryption, Fake look-alike network, Login page, DNS tampering, Signs of eavesdropping, Router open ports) play.google.com
Phone makers change these menus over time. If a step doesn't match what you see, check your phone maker's current help page.