Hotel Wi-Fi safety is mostly about assuming the network is shared and unmanaged, then adjusting what you do on it. Check that you are joining the real hotel network, rely on HTTPS sites, switch on a VPN if you have one, and save the most sensitive tasks for a mobile data connection. These steps take little effort and remove most of the realistic risks.
Why hotel Wi-Fi safety deserves attention
A hotel network serves a constantly changing crowd of guests, many with unknown devices. Staff rarely have the resources to monitor it closely, and the password is often printed on a card handed to everyone. That means you cannot assume the people sharing your network are trustworthy, nor that every device on it is clean.
The most common concerns are not dramatic movie-style hacks. They are simpler: fake networks with convincing names, poorly configured equipment, outdated devices on the same network, and users logging into sensitive accounts without precautions. For the wider picture, our article on whether public Wi-Fi is safe explains how these risks compare in everyday use.
Confirm you are on the real network
Attackers can set up a Wi-Fi network with a name that looks almost identical to the hotel’s. Devices may even connect to it automatically if the name matches one they have seen before.
- Ask reception for the exact network name and how to log in, rather than picking the closest match.
- Be suspicious of two similarly named networks, or one that needs no password when the hotel gave you one.
- Turn off automatic joining of open networks on your phone and laptop.
- After you check out, remove the hotel network from your saved list.
Many hotels use a login page where you enter your room number and surname. That is normal. What should raise suspicion is a page asking for card details, a request to install software, or a prompt to download an update before you can connect.
What to do once you are connected
Stick to encrypted connections
Look for the padlock and HTTPS in the address bar. HTTPS encrypts the content of your session between your browser and the website, even if the network is untrusted. If your browser warns you about a certificate problem, stop and do not click through. Our VPN explainer also covers how encrypted tunnels differ from HTTPS.
Use a VPN as an extra layer
A VPN encrypts everything leaving your device, including traffic from apps that do not show a padlock, and hides your browsing from the hotel’s network. Connect to the Wi-Fi, finish the hotel login page, then switch the VPN on. If the VPN will not connect, the login page is usually still waiting. Remember that some hotels or countries have rules about VPN use, so check local rules and the hotel’s terms if you are unsure.
Tighten your device settings
When your system asks what type of network you are on, choose public rather than home or work. That setting turns off file sharing and device discovery. Also keep your firewall enabled, and turn off AirDrop-style sharing or set it to contacts only.
A quick checklist for each stay
- Confirm the network name and login method with staff.
- Set the network profile to public on your laptop.
- Connect, complete the login page, then enable your VPN.
- Use a unique password and two-factor authentication on key accounts.
- Install pending updates before you travel, not on the hotel network.
- Log out of accounts and forget the network when you leave.
Safer alternatives for sensitive tasks
Some tasks are better done off the hotel network entirely. Online banking, tax or health portals, and anything involving payment details are good candidates. Your phone’s mobile data, or a personal hotspot from it, avoids the shared network completely. Check your plan’s roaming and hotspot allowances first, as terms vary a lot between providers and countries.
If you must use the hotel’s business centre computer, treat it as untrusted. Our advice on public computer safety covers what to do and what to avoid.
Do not forget the physical side
Wired connections in hotel rooms can be handy, and a network cable is not automatically safer than Wi-Fi, since you still share the same hotel network behind the wall. Be careful about using hotel USB ports or unknown public charging stations with a cable that also transfers data. Carry your own charger and plug it into the mains, or use a charge-only adapter.
Also lock your devices when you leave the room, and use the room safe for passports and spare devices if one is provided. Do not leave a laptop open on the bed when housekeeping is due.
If something looks wrong
If you notice odd pop-ups, unexpected logouts, or an alert about a login to one of your accounts, disconnect from the network. Then change the affected password from a trusted connection, such as your mobile data, and review recent activity on the account. Reporting suspicious behaviour to hotel staff helps them investigate too.
Where to start
Make a habit of confirming the network name, using HTTPS sites, enabling your VPN and keeping banking for mobile data. For more guidance on staying safe on trips, explore the rest of our Travel & Remote Work articles.
Frequently asked questions
Is hotel Wi-Fi safe for online banking?
It is better to avoid it for banking if you can. Use mobile data instead, or at the very least use HTTPS, a VPN and two-factor authentication.
How do I spot a fake hotel Wi-Fi network?
Ask staff for the exact network name and login method. Be wary of near-identical names, networks that skip the password the hotel gave you, or pages that ask for card details.
Should I connect the VPN before or after the hotel login page?
After. Join the Wi-Fi, complete the hotel's login page in your browser, then turn on the VPN.
Is a wired connection in my room safer than Wi-Fi?
Not automatically. You are still on the hotel's shared network, so the same precautions apply.
