A three story hotel with a WiFi symbol above it.

From checking emails and researching local restaurants to posting on the ‘gram, most of us rely on hotel Wi-Fi to stay connected when far from home. It’s usually fast, stable, and free. But is it safe?

Unfortunately, most hotel Wi-Fi networks lack proper security measures, which could expose your data to a slew of online threats. However, if you’re still skeptical about using hotel Wi-Fi, let’s first go over some of its dangers and then explore how to stay safe with a VPN (Virtual Private Network) and other protective measures.

Table of contents

    Is it safe to connect to hotel Wi-Fi?

    It’s not safe to connect to hotel Wi-Fi, as most hotels don’t properly secure their networks. This leaves your data vulnerable to various dangers, such as malware infections, fake WAP (Wireless Access Point), and Man-in-the-Middle attacks. External threats aside, network administrators or hotels may monitor and track your online activities.

    What are the dangers of hotel Wi-Fi?

    Hotel Wi-Fi networks might tempt you with their promise of fast, free, and convenient internet, but they also come with certain security pitfalls. Here are some of the risks of using hotel Wi-Fi:

    Man-in-the-Middle attacks

    MITM (Man-in-the-Middle) attacks are when hackers get in between two parties to intercept or alter their communication, often without the parties catching on. These attacks are particularly common on unsecured public Wi-Fi networks, such as those found in hotels, where security measures may be lacking.

    Your intercepted data could then be sold to third parties and advertisers, manipulated to cook up crafty phishing scams, or used to access sensitive banking and credit card information. 

    Evil twin attacks

    Don’t be too hasty to connect to the Wi-Fi when you get to the hotel — it could very well be an evil twin. Evil twins, or fake WAPs, are bogus Wi-Fi hotspots created to trick you into connecting, allowing bad actors to monitor and intercept your internet traffic.

    These fake networks often have generic and unassuming names like “Guest Wi-Fi,” “Hotel Guest Network,” and “Hotel Wi-Fi.” They also typically don’t require passwords to connect, making it easier for unsuspecting guests to fall into the trap. 

    Malware

    Cybercriminals often distribute malware by taking advantage of unsecured or poorly secured public Wi-Fi networks, like hotel Wi-Fi. Malware, or malicious software, is a catch-all term for software harmful to your device, including viruses, ransomware, and spyware. These threats can remain undetected until significant damage has been done.

    Once infected, malware can: 

    • Track your online activities, including websites visited, email content, and search history; 
    • Steal your personal information such as login credentials, banking details, and other sensitive files; 
    • Use your device to infect other devices on the same network; 
    • Disable your device, rendering it practically unusable. 

    Wi-Fi sniffing

    When connected to an unsecured hotel Wi-Fi network, hackers can intercept your data using a sniffer — a type of monitoring software. They then “sniff” through the data, searching for anything that could be exploited, such as your login credentials, browsing history, and financial information.

    As a result, simply checking your email or booking a day tour from your hotel room could lead to unauthorized charges, compromised accounts, and even identity theft.

    Cookie theft

    To bad actors on the hotel Wi-Fi network, your cookies are just as valuable as your online activity. Cookies are text files with small pieces of data sent to your browser by the websites you visit. They contain sensitive information such as login credentials, preferences, and even where you live.

    Cookies also store session tokens that help websites recognize you as a returning visitor and keep you logged in. Once stolen, hackers can use these session tokens to impersonate you and hijack whatever you’re doing on your browser without even needing your password.

    How to stay safe on hotel Wi-Fi

    Tips to stay safe on hotel WiFi.

    While it’s best to steer clear of hotel Wi-Fi, sometimes you might not have a choice. If you can’t avoid using hotel Wi-Fi, here’s how to protect yourself: 

    Use a VPN

    The most effective way to stay safe while on hotel Wi-Fi is to use a premium VPN (Virtual Private Network) like Surfshark. A VPN encrypts your data before it leaves your device, keeping it safe from snoopers on the hotel Wi-Fi network.

    Even if intercepted, the hackers will only see jumbled characters instead of compromising personal information like login credentials, bank account details, and travel itineraries. 

    Enable firewall

    A firewall acts as a barrier between your device and potential threats lurking on hotel Wi-Fi networks, helping to prevent unauthorized interception and malware infections. These days, most devices come with a built-in firewall, so make sure to activate it before connecting to hotel Wi-Fi. 

    Use 2FA (two-factor authentication)

    Most websites offer 2FA (two-factor authentication), which you should enable to protect yourself on hotel Wi-Fi. 2FA provides an additional layer of security by requiring a secondary verification step on top of your password before you can log in. Common methods include a code sent to your phone via calls, text, or push notifications and biometric verification like Face ID.

    Even if hackers get hold of your password on an unsecured hotel Wi-Fi network, they can’t access your account without the second step. You’ll also receive notifications for unauthorized login attempts and can block them. 

    Disable Wi-Fi auto-connect

    Many of us enable the Wi-Fi auto-connect feature on our devices for convenience, but it ends up benefitting online crooks. With this feature activated, there’s a greater chance of you unknowingly connecting to an evil twin network —  a malicious imitation of your hotel Wi-Fi network.

    To protect against this risk, turn off your device’s auto-connect feature and select your hotel Wi-Fi manually. This way, you can be sure you’re connecting to the real deal.  

    Update your software

    Make sure that your devices are running the latest OS (operating system) and software updates. These updates often include security patches that address vulnerabilities. This is particularly critical when connecting to an unsecured hotel Wi-Fi network where cybercriminals are eagerly looking for security gaps to exploit.

    Clear cache and browsing history 

    Cookies can store sensitive information like login credentials, while your browsing history may reveal your online activities. Both can be valuable to malicious actors snooping around on hotel Wi-Fi. Clearing your cache and browsing history before connecting to hotel Wi-Fi keeps this sensitive information safe from prying eyes on the network.

    Avoid sensitive transactions 

    Refrain from logging into accounts that contain sensitive information, such as your bank, email, and social media, while using hotel Wi-Fi. Leave tasks like email checking, photo sharing, and online banking for when you’re on a secure network. 

    Why travelers should use VPNs

    When you’re traveling, it’s critical to have a VPN for online safety and convenience. Here are some benefits of using a VPN while on the go: 

    • Encrypt your traffic: a VPN encrypts all data to and from your device, making it unreadable to anyone trying to intercept it when you’re on hotel Wi-Fi or other unsecured public networks like those in airports. 
    • Browse websites while abroad: many websites and online services are only available if you’re in the country. With a VPN, you can continue visiting websites from your home country when traveling abroad. 
    • Secure online banking services: banks and financial institutions tend to flag or block accounts if they see you trying to log in with a foreign IP, making it difficult to access your funds while traveling. Using a VPN to get an IP from your home country allows easy access to these financial services abroad. Banks may also restrict access if they notice frequent IP address changes. Opting for a VPN with static servers can help with this issue by allowing you to use the same IP address each time you’re online.  
    • Get better deals: airline companies and hotels often adopt different pricing tactics depending on geographical locations. You can use a VPN to change your IP to grab the best offers and rates
    • Overcome oppressive censorship: authoritarian governments may have strict internet policies, restricting or blocking access to certain websites and platforms. With a VPN, you can safely and freely visit social media platforms, global news sites, and online services while globetrotting. 

    Play it safe if you must use hotel Wi-Fi

    Hotel Wi-Fi is undeniably handy when traveling. It’s often even a necessity when you don’t have mobile data or access to a secure network. However, its guise of convenience hides all sorts of dangers.

    It’s crucial to recognize the risks of unsecured hotel Wi-Fi so you can protect yourself if you need to connect to it. Be sure to take all precautions, such as enabling your device’s firewall, using 2FA, and encrypting your data with a VPN. In fact, you might want to consider getting a VPN now rather than later.

    Stay safe on hotel Wi-Fi
    Protect your data with VPN encryption
    Surfshark

    FAQ

    Can hotel Wi-Fi see your screen?

    Generally, hotel Wi-Fi network administrators and operators can’t see your screen. However, if you’re connected to a hotel Wi-Fi network without a VPN, they can monitor and log things like the websites you visit, the time you spend on each site, and the files you download or upload.  

    Is it safe to use hotel Wi-Fi for Netflix?

    No, it’s not safe to use hotel Wi-Fi for Netflix as most public Wi-Fi networks are unsecured, leaving your data vulnerable to monitoring and interception. If you must use hotel Wi-Fi for Netflix, protect yourself by using a VPN to encrypt your data, enabling 2FA for an extra layer of security, and activating your device’s firewall.

    Disclaimer: Please note that using Surfshark services for any illegal activities is strictly forbidden and violates our Terms of Service. Make sure that any use of Surfshark services for your particular activities conforms to all relevant laws and regulations, including those of any service providers and websites you access using Surfshark.

    Is it safe to use hotel Wi-Fi with an iPhone?

    No, it’s not safe to use hotel Wi-Fi with an iPhone, as with any other device. However, you can minimize the risks and enhance security by taking precautions. These include using a VPN like Surfshark to encrypt your data, enabling 2FA on your online accounts, and ensuring your iPhone’s iOS software is up to date.  

    Is it safe to use hotel Wi-Fi for banking? 

    No, it isn’t safe to use hotel Wi-Fi for banking. Most hotel Wi-Fi networks aren’t secured, making it extremely easy for cybercriminals to monitor and intercept your data, including your banking account password and credit card information. If you must use hotel Wi-Fi for banking, make sure to use a premium VPN like Surfshark to protect your data.