Networks
Is public Wi-Fi really risky?
Most of the classic public Wi-Fi risk disappeared when the web encrypted itself. Here is what remains, what a VPN changes, and which habits still matter.
Updated 7 min readqikfox
The short answer
Public Wi-Fi is far less dangerous than it was, because nearly all websites are now encrypted, so the network cannot read what you send. What the network can still see is which services you connect to, and a hostile network can interfere with unencrypted connections or present captive portals designed to deceive. A VPN removes the visibility part by encrypting everything that leaves the device.
Key points
- Encryption is now the default on the web, so password sniffing on open networks is largely historical.
- The network still sees the names of the services you connect to, plus timing and volume.
- Captive portals are a reliable place to be shown a fake login page.
- Automatic reconnection to remembered open networks is an underrated risk.
- A VPN addresses network-level visibility, not tracking inside pages.
What actually changed
The traditional warning came from an era when logging in over an open network could expose a password to anyone nearby with the right tool. That was true, and it is now mostly obsolete: encrypted connections are the norm, browsers warn when they are absent, and content is protected in transit.
This matters because outdated advice erodes trust. If people are told that using a café network is reckless and nothing bad happens, they discount the parts of the warning that are still accurate.
What still remains
Encryption hides content, not destinations. The network can see which services you connect to, when, and roughly how much data moves. Over an afternoon that becomes an activity summary, which is precisely the material some public networks monetise.
A hostile network can also interfere with anything not encrypted, redirect the first unprotected request, and control what the captive portal displays. Portals are unusually effective for deception because a login prompt on joining a network feels normal.
Finally, devices reconnect automatically to network names they have seen before. Somewhere else, a network broadcasting a familiar name gets the same automatic trust.
- Destination visibility: which services you use, and when.
- Interference with unencrypted requests and redirects.
- Deceptive captive portals and fake sign-in pages.
- Automatic reconnection to remembered open network names.
What a VPN changes, precisely
A VPN builds an encrypted tunnel from your device to a server it operates. The local network then sees a single encrypted stream to that server and can no longer tell which services you use. Your apparent location becomes the server's, which also means sites see the server's address rather than yours.
qikfox VPN provides that tunnel with a connect control that states plainly whether it is on. We do not describe it as making you anonymous, because the destination service still identifies you as usual when you sign in, and a page's own trackers are unaffected.
Habits that still pay off
Turn off automatic joining for open networks and forget ones you used once. Treat a captive portal as an untrusted page: never enter an account password into it, and never install anything it offers. If the browser warns that a connection is not private, stop rather than continue.
Keep the system and browser updated, since interference exploits old flaws. And for genuinely sensitive tasks, a mobile connection is a reasonable alternative to any network you cannot vouch for.
Questions and answers
Related qikfox pages
How qikfox VPN works
The tunnel, step by step.
What tracking collects
The observer a VPN does not address.
qikfox VPN
One connect control, stated plainly.
Safety at qikfox
How the products fit together.
Back to Guides · Written and reviewed by the qikfox editorial team. Published .
Put the advice into practice
qikfox Safe Browser applies most of what this article describes by default, and works alongside qikfox Search, Antivirus and VPN.