|
It feels like it should be safe: a reputable business, such as a coffee shop, is offering free public Wi-Fi for you to use while you sip and snack. But whenever anything is free, it pays to be a little suspicious. Using free public Wi-Fi opens you up to a potential cyberattack. Attackers can steal your information, or trick you into getting infected with malware. When you get some work or social media scrolling done at your local café, don’t let yourself be vulnerable.
The best policy is to not do anything on a public Wi-Fi that you wouldn’t want the world to see. Don’t do any banking or shopping, don’t enter your passwords or credit card information. Save that for when you’re on a trusted, secure private network. If you have to use public Wi-Fi, there are some ways to keep yourself safer.
First of all, turn off auto-connect. You don’t want your phone, laptop, or other device to connect to a network as soon as it detects it. You need to be able to choose whether or not you connect. You can set it up to automatically connect to trusted networks – home, friends and family, workplace – while not automatically connecting to any others.
When you do choose to connect to public Wi-Fi, look closely at the name. Is it the real network associated with the business that is offering the service, or is it an “evil twin” with a similar name that is created to trick you. For example, a coffee house called Human Bean might offer a free network called “HumanBeanFreeWi-Fi” but when you look for a network the first one you see is “FreeHumanBeanWiFi.” Which one is real? Your best bet is to ask the business itself, or look for a sign they have posted, then make sure what you’re connecting to is an exact match. If you connect to a fraudulent network, someone can see what you’re surfing. If you enter sensitive information like your password, they may be able to see it and steal it.
Some Wi-Fi connections want you to sign in or accept terms of use, so you may get a popup before you can get online. Before you enter any personal information, make sure you’re on the real network. Scammers might trick you into downloading or installing malware, or manipulate you into entering personal information. If you get a popup when connecting to public Wi-Fi, ask the business if it is legitimate, and never enter personal information or click a link.
Whether on public Wi-Fi or on a secure network, look for a locked padlock icon in the address bar of your browser, and a URL that starts with HTTPS. The “S” is the important part – it stands for “secure.” That lets you know that the page is encrypted and sensitive information you send can’t be intercepted in transit. Be aware though that this only protects the information from being seen when in transit. If the website itself is fake or malicious, the information can still be delivered to an attacker, so make sure you’re going to a safe website in the first place. It’s like if you hire a guard to deliver a letter – they might keep it safe during delivery, but if you told them to give it to a dangerous person it’s not protected.
Using a Virtual Private Network (VPN) can help keep you safe because it encrypts your data and keeps it invisible as it goes through a network. Even if your data is intercepted, it can’t be read.
Another good practice whether on a public or a secure connection is to always use strong passwords and multifactor verification. This makes use of at least two kinds of verification. It may use something you know, such as a password or the answer to a security question, combined with something you possess, such as a code texted to a phone, or something that you are, such as facial recognition or a fingerprint.
The safest option when looking for a connection out in the wild is to make your own hotspot. If you need to use your laptop and have your phone with you, you can turn on your phone’s mobile hotspot and use that signal for your laptop. You know it is secure, and no one else can use it or intercept your data.
There’s another vulnerability connected with something free to the public that is mostly theoretical, but the FBI and TSA warn about it, so it doesn’t hurt to be aware of it. Some places like airports, theme parks, and hospitals offer charging ports for public use. Some even include cables that are compatible with a variety of devices. But USB ports don’t just charge devices – they can also transfer data. In a cyberattack known as juice jacking, the USB charging port or cable could be compromised so that when you charge your device, malware could be installed or your data could be stolen. Key loggers could track everything you type, including passwords. Malware could let someone remotely access your device.
Juice jacking is extremely rare, but you can avoid any possibility by using your own charger plugged into a wall outlet instead of using a USB port. You can also charge your device from your own power bank. Or you could use a USB data blocker, which ensures that only power, not data, is exchanged between the port and your device.
Free public Wi-Fi access lets people connect and work anywhere. It is a boon to remote workers and travelers. It helps families who can’t afford home internet, allowing kids to access educational materials and adults to search for jobs. After natural disasters such as hurricanes, public Wi-Fi offers a lifeline when home internet isn’t functioning. Despite these many benefits, people should be aware of the risks, and take precautions.
In general, if anything is free or open to the public you should be cautious. If you’re using public Wi-Fi, a public computer such as at the library, or any shared device, don’t log into your bank or other sensitive accounts. Using public Wi-Fi is like having a conversation other people can eavesdrop on – don’t say anything other people shouldn’t know.
|