Is Hotel Wi-Fi Safe? What Hotels Can See, and When to Use Mobile Data

Short answer: hotel Wi-Fi is usually safe for everyday browsing, because most sites and apps now encrypt your data. The real risks are fake networks, fake login pages and logging into sensitive accounts. For banking, use mobile data or a VPN.

Ask online whether hotel Wi-Fi is safe and you’ll get two extremes. One camp says never use it. The other says it’s fine. Both are partly right, and the difference comes down to what you’re doing.

Banking on the road is the case most travelers worry about, so it gets the most attention here. This guide draws on advice from the US FTC and FBI, the Australian Cyber Security Centre and the Australian Federal Police. It also covers the Wi-Fi at conferences held in hotels, which has risks of its own.

Is it safe to use hotel Wi-Fi?

For most things, yes. The US Federal Trade Commission says public Wi-Fi is now usually safe, because encryption is so widely used. When a site shows a padlock and “https”, other people on the network can’t read what you send.

But the FBI has warned that hotel Wi-Fi carries more risk than your home network, especially for sensitive work and financial details. Both are true.

Why the difference? Encryption protects what you send. It doesn’t protect you from joining the wrong network, or typing your password into a fake page. Those are the risks that remain. Here’s where they sit:

Activity on hotel Wi-Fi	Risk level
Reading news, maps, streaming	Low
Messaging apps like WhatsApp	Low (end-to-end encrypted)
Email and social media logins	Medium. Use two-factor sign-in
Work accounts and file sharing	Medium. Use your company VPN
Presenting or working at a hotel conference	Medium. See the conference section below
Banking and payments	Higher. Use mobile data or a VPN
Joining a network without checking its name	High
Entering personal details to “unlock” free Wi-Fi	High

Can hotels see what you are browsing?

Partly. On most sites, a hotel can see which websites you visit and when, but not what you do on them.

That’s because encrypted sites hide the page content, your passwords and your messages. The site’s name usually still shows up in the network’s records. So a hotel could see you visited your bank’s website, but not your balance or login.

What the hotel network can usually see	What it can’t see on secure (https) sites
Which websites you visit	The pages you read
When, and for how long	Passwords you type
How much data you use	Messages, emails and card numbers
Your device’s network ID	Your account balances

A VPN hides the site names too. So does switching to mobile data, because your traffic then goes through the mobile network instead of the hotel’s.

Most hotels have no interest in your browsing. The table above is about what’s technically possible, not what most hotels do.

The real risks of hotel Wi-Fi

1. Fake networks (evil twin Wi-Fi)

An “evil twin” is a fake hotspot with a convincing name, like “Hotel_Guest_Free”. If you join it, the attacker controls your connection and can push fake login pages.

How to avoid it: ask reception for the exact network name. Don’t join a network just because it looks right.

2. Fake login and payment pages

Many hotels make you sign in through a web page first. Attackers copy these pages to collect card details or account logins. As the FTC notes, encryption doesn’t protect you if the site itself is fake.

This happens in Australia too. In 2024, the Australian Federal Police charged a man over fake Wi-Fi pages that allegedly collected dozens of people’s email and social media logins.

“To connect to a free WiFi network, you shouldn’t have to enter any personal details.” AFP Detective Inspector Andrea Coleman

How to avoid it: never enter card details or a social media login on a Wi-Fi sign-in page. A room number and surname is normal. A password for another account isn’t.

3. Open, unsecured networks

A network with no password is an unsecured network. Anyone nearby can join, and older or unencrypted apps are exposed.

The Australian Cyber Security Centre recommends choosing password-protected networks over open ones where you can.

4. File sharing left switched on

Laptops set up for home or office often share files and printers with the network. On hotel Wi-Fi, that means sharing with every guest.

How to avoid it: on Windows, choose “Public network” when you connect. That switches sharing off. On a Mac or iPhone, set AirDrop to “Contacts Only”.

5. Out-of-date devices

An old phone or laptop with missing security updates is easier to attack on any shared network. Update before you travel.

How to spot a fake network or login page

Fake networks are built to look real, but they often give themselves away. Watch for these signs:

• Two networks with almost the same name, such as “Hilton_Guest” and “Hilton Guest Free”.
• A free network where you expected a paid or password one. Many hotels use a password from reception.
• A sign-in page asking for your email password, social media login or full card details.
• Security warnings in your browser about an invalid or untrusted certificate.
• Sites you’re logged into suddenly asking you to log in again.

If you see any of these, disconnect and forget the network. Then switch to mobile data.

Is conference Wi-Fi at a hotel safe?

Many conferences, trade shows and corporate events run in hotel ballrooms. The event Wi-Fi is usually the hotel’s own network, set up for the day. It carries the same risks as guest Wi-Fi, plus a few more.

Why conference Wi-Fi is riskier than guest Wi-Fi

• The password is public. It’s printed on signs, lanyards and slides. A network everyone knows the password to is close to an open network.
• Fake networks are easy to blend in. An attacker only needs a name like “Summit2026_Guest” or “Summit-WiFi-Fast” next to the real one.
• The crowd is valuable. Business events gather people with work email, client files and company logins in one room.
• Everyone’s distracted. Between sessions, people log in quickly without checking which network they’ve joined.
• QR codes everywhere. Agendas, event apps and feedback forms often use QR codes. A sticker over a real code can send you to a fake login page.

It’s also unreliable

Conference Wi-Fi is built for the average load, not for 500 people uploading photos at morning tea. Speeds often collapse during breaks and keynotes, exactly when you need them.

If you’re presenting, don’t rely on it. Download your slides and videos to your laptop beforehand. Have your phone’s hotspot ready as backup for any live demo.

How to work safely at a hotel conference

1. Check the official network name with the event desk or organiser, not just a sign.
2. Use your company VPN for work email, files and internal systems. Many employers require it on shared networks.
3. Use your phone’s hotspot for anything sensitive, such as client files, contracts or payments.
4. Set AirDrop to Contacts Only and turn off Bluetooth file sharing. Crowded events attract unwanted file requests.
5. Close sensitive tabs before you share your screen, and lock your laptop when you step away.
6. Type event web addresses yourself if a QR code looks like a sticker or leads to a login page.

A travel eSIM is useful here if you’re at a conference overseas. A day of hotspot use for email and documents typically fits within a few gigabytes. Our business travel data guide shows typical usage.

Do you need a VPN on hotel Wi-Fi?

Not for everything, but it helps. A VPN encrypts all your traffic between your device and the VPN server. The hotel then sees only that you’re connected to a VPN.

It’s most useful if you work on the road or use hotel Wi-Fi often. The ACSC suggests a VPN for frequent public Wi-Fi users, and recommends checking a provider’s privacy policy and independent reviews first.

Two cautions. First, a VPN doesn’t stop you typing a password into a fake page. Second, avoid free VPN apps you don’t know. Your traffic passes through their servers, so you need to trust them.

If you work for a company, use its VPN for work accounts. Many employers require it on public networks.

Is mobile data safer than Wi-Fi?

For sensitive tasks, yes. 4G and 5G traffic is encrypted between your phone and the tower. You also aren’t sharing a network with strangers in the lobby, and there’s no hotel login page to fake.

That’s why the FBI suggests using your phone’s hotspot instead of hotel Wi-Fi where you can. Your own hotspot is password-protected. So are hotspots secure? Your personal one is, as long as you set a strong password.

Option	Safety	Best for
Hotel Wi-Fi	OK for browsing; risky for logins	Streaming, downloads, video calls
Hotel Wi-Fi + VPN	Good	Regular work on the road
Mobile data (travel eSIM)	Good	Banking, payments, logins
Your phone’s hotspot	Good, with a strong password	Laptop work and banking

A travel eSIM makes this cheap abroad. Data costs from about US$1 per GB in Europe, instead of roaming rates. Here’s how to turn on hotspot with a travel eSIM, and our deeper look at whether eSIM data is private.

A practical split works well. Use hotel Wi-Fi for streaming and big downloads. Switch to mobile data for anything involving money or passwords.

Phone settings to change before you travel

Five minutes of setup makes every network safer:

• Turn off auto-join for public networks. On iPhone, set “Ask to Join Networks” in Wi-Fi settings. This stops your phone joining look-alikes.
• Keep private addresses on. iPhone (“Private Wi-Fi Address”) and Android (“randomized MAC”) hide your device’s real network ID from each network.
• Forget hotel networks when you check out. The AFP and ACSC both recommend this.
• Set AirDrop to Contacts Only and turn off Bluetooth sharing you don’t need.
• Install updates for your phone, laptop and apps before you leave.
• Turn on two-factor sign-in for email, banking and social media.

Hotel Wi-Fi safety checklist

• Confirm the network name with reception before joining.
• Never enter personal details or other account logins to unlock Wi-Fi.
• Check for the padlock before typing anything private.
• Use mobile data or a VPN for banking, payments and work accounts.
• Choose “Public network” on your laptop so file sharing is off.
• Forget the network when you check out.

For more on keeping accounts safe while traveling, see is it safe to use eSIMs for banking and SIM swap fraud explained.

What to do if you think you joined a fake network

Act quickly, but don’t panic. Most fake networks are after logins, and those can be changed.

1. Disconnect and forget the network. Switch to mobile data.
2. Change passwords for any account you logged into while connected. Start with email, as it can reset everything else.
3. Check two-factor sign-in is on for those accounts.
4. Call your bank if you entered card details. Ask them to watch for or block the card.
5. Report it. In Australia, use ReportCyber. Tell the hotel too, so they can warn other guests.

Frequently asked questions

Is hotel Wi-Fi safe?

For everyday browsing, usually yes, because most sites encrypt your data. The real risks are fake networks and fake login pages. For banking, use mobile data or a VPN.

How secure is public Wi-Fi abroad?

About as secure as at home, which is reasonably safe for browsing. Check network names carefully, because fake hotspots are common in hotels, cafés and tourist areas.

Can hotels see what you are browsing?

They can usually see which websites you visit, but not what you do on them. Encrypted sites hide passwords, messages and page content. A VPN or mobile data hides the site names too.

Is it safe to do online banking on hotel Wi-Fi?

It’s better avoided. Your bank’s site is encrypted, but a fake network or login page could still catch you out. Use mobile data or a VPN instead.

Do I need a VPN on hotel Wi-Fi?

Not for casual browsing. A VPN is worth it if you work on the road or use public Wi-Fi often. Choose a reputable paid provider rather than an unknown free app.

Is conference Wi-Fi safe for work?

It’s fine for browsing, but risky for sensitive work. The password is usually public and fake networks are easy to set up nearby. Use your company VPN or your phone’s hotspot for work accounts and files.

Can someone hack my phone through hotel Wi-Fi?

It’s unlikely on an up-to-date phone. The bigger risk is being tricked into entering a password on a fake page. Keep your phone updated and check network names.

What is an evil twin Wi-Fi network?

A fake hotspot named to look like a real one, such as a hotel or café network. Joining it lets the attacker see your traffic and show fake login pages.

Is mobile data safer than public Wi-Fi?

Yes, for sensitive tasks. Mobile data is encrypted between your phone and the tower, and you’re not sharing a network with strangers.