Using a public network requires attention to the access point and the services you are accessing. The fact that a network has a password does not prove who manages it, and a name similar to that of the establishment may have been created by someone else. Confirm the instructions with the staff before connecting.
At the same time, it's incorrect to conclude that anyone on the network can read all the content of a valid HTTPS connection. Securing the connection is important, but it alone doesn't solve the problem of fake pages, unauthorized permissions, or an outdated device.
Confirm your name and login method.
At a hotel or café, ask for the exact network name and authentication instructions. If several similar options appear, don't just choose the one with the strongest signal. Also check if there is a specific network for guests or visitors.
An access portal may ask you to accept terms and conditions. Read what is being requested and assess whether the information makes sense. Do not provide the password for a personal account just because the page uses the logo of a well-known service.
Do not ignore browser warnings.
If your browser reports a certificate or connection problem, do not automatically proceed to a sensitive website. Verify the address and try again using a known route. For urgent tasks, consider using your mobile connection when it is available and adequate.
CERT.br recommends caution with secure networks and connections. Installing an unknown certificate, configuration profile, or program simply to use Wi-Fi increases the trust placed in that operator. Before accepting, understand the need and look for an alternative.
Reduce unnecessary sharing.
- Keep your system, browser, and applications up to date.
- Avoid leaving shared folders open to other network users.
- Use public network settings when offered by the system.
- Disable discovery and downloading of files you are not using.
These choices reduce local data exposure without hindering normal internet use. If you need to transfer a file to someone, verify the recipient and end the process when finished. See our guide on... sharing between devices.
A VPN does not prove that a page is legitimate.
A VPN changes the route some of your traffic takes and requires trust in the provider. It doesn't make a fake login site genuine or prevent you from voluntarily handing over data to a scammer. Don't install any VPN application just because the network is public.
If you already use a trusted solution, follow the guidelines provided by the service or your organization. For work-related tasks, respect the procedures of the person responsible for the systems. Avoid improvising configurations that expose files or credentials.
After using
Log out of shared devices and review automatic connections to visited networks. Forgetting about a network you don't intend to use again helps prevent unexpected reconnections. If something seemed suspicious, make a note of what happened and check the activity of the accounts involved.
For travel, download maps And documenting essential information beforehand reduces reliance on an unfamiliar network. Planning the basics offline is often simpler than hastily addressing access and security issues at the destination.
Separate the risks of the network from the risks of the page.
The network is the connection path; the website or application is the service you interact with. A legitimate network can be used to open a fake page, and a secure connection to a website does not automatically confirm the commercial identity it claims to have.
Therefore, check both things. Confirm the Wi-Fi with the establishment and access sensitive services using known addresses. Don't assume that all your data is exposed just by using public Wi-Fi, but also don't use the presence of HTTPS as justification for ignoring a strange request for credentials.
A sequence of access points in hotels and airports.
| Step | Conference |
|---|---|
| Choose the network | Exact name provided by the person in charge. |
| Open the portal | Terms and conditions requested |
| Connect | Absence of an unexplained requirement to install profiles or programs. |
| Use services | Known addresses and security warnings respected. |
| Close | Disconnection and automatic reconnection review |
If the actual procedure differs from what the team informed you, ask for clarification. Do not follow instructions from a stranger who offers to "fix the access" by entering your device.
The access portal is not your personal account login.
An establishment may use a page to present its terms of use. Read what identity is being requested and why. If the page asks for your email password without a verifiable reason, stop and confirm another means of access.
Avoid reusing a personal password for a temporary account. If you need to provide data, assess the necessity and your trustworthiness in the person responsible. CERT.br booklet on networks This complements the necessary precautions regarding connection and configuration.
When a certificate or profile is requested
Do not automatically accept. This type of installation can alter the device's trust and behavior. On a work network, seek authorized support and confirm the procedure; on a casual public network, consider using an alternative instead of granting permission you don't understand.
Do not remove browser protections to open a sensitive page. Check the device's address, date and time, and the relevant official instructions. If you continue to receive a warning, use another reliable method and investigate before entering data.
Local sharing and nearby devices
On a laptop, check if folders or discovery services are exposed to other network users. On your mobile phone, restrict proximity receiving functions when not in use. A useful setting at home may be unnecessary while traveling.
If you need to send a document, choose a method with an identified recipient. See the guide. file transfer To compare cable, proximity, and cloud. When finished, review the permissions and links created for that occasion.
Prepare a backup plan before you need it.
Download reservations, maps and translation languages on a reliable connection. Check your mobile plan's usage and terms to decide when it might be an option. Don't leave all your essential information dependent on a portal that might not work.
If you use a VPN for work purposes or from a trusted provider, keep the application updated and follow the instructions. Don't install an unknown option just because it promises to make any network secure. A VPN doesn't prevent you from providing data to a fake website.
Frequently asked questions about public networks
Is a password-protected network always trustworthy?
No. The password does not prove who operates the access point. Confirm the name and procedure with the person in charge of the location.
Can I use banks and other sensitive services?
Assess the reliability of the connection and the device, and use official apps. If you have any doubts or security warnings, choose a reliable path before proceeding, without bypassing the protection.
Does forgetting the network erase my data from websites?
No. This refers to the connection saved on the device. Sessions and information provided to services need to be managed separately.
Do I need to change all my passwords after using public Wi-Fi?
Not just because the network was used. If there was exposure of credentials or signs of compromise, follow the... appropriate script as it happened.
Continue reading
- How to identify fake promotions before clicking or paying. A guide to verifying the origin, address, conditions, and suspicious requests in coupon, giveaway, and game offers.
- App permissions: what to review on your phone — See how to evaluate requests for camera, microphone, location, and files according to the function you want to use.
- How to update apps and system without falling for false warnings. — Use official channels, prepare storage space and backups, and investigate potential vulnerabilities before downloading files from third-party sources.
- How to share files between your phone and computer without complications. — Choose between proximity sharing, cable, and cloud link, paying attention to quality and permissions.
Official sources and references
Consult the channels responsible for the resources and conditions mentioned in this guide.
