Free Wi-Fi in cafes, hotels, and airports is convenient – but without the right settings, it can also be risky. Here's how to surf safely on the go.
Whether in a café, at the airport, in a hotel, or on a train – public Wi-Fi networks are part of everyday life. They're convenient, free, and offer fast internet access on the go. But this very openness makes them an ideal target for attackers. In unsecured networks, third parties can intercept data traffic, set up fake hotspots, or carry out man-in-the-middle attacks. The good news: Your iPhone comes with several built-in security features to protect you on public networks. This article shows you what risks exist and how to minimize them with the right settings.
Why public Wi-Fi networks are risky
In a public network, you share your connection with dozens or hundreds of unknown people. Unlike your home network, there's usually no encryption between your device and the router – or only weak encryption. This opens up multiple attack vectors.
In a so-called man-in-the-middle attack, an attacker positions themselves between your device and the router. They can intercept and manipulate data traffic or redirect it to fake websites. This is especially dangerous with unencrypted connections without HTTPS.
Another common method is the Evil Twin attack. The attacker creates their own hotspot with the same name as the legitimate network – for example, "Hotel_Wifi" or "Cafe_Free". Your iPhone might automatically connect to the fake network, and the attacker can intercept all data traffic.
Furthermore, other devices on the same network may attempt to access your iPhone, scan for open services, or send connection requests. While iOS is generally well-protected in this regard, the right settings can further reduce the risk.
Rotate Wi-Fi address
Since iOS 18, Apple has offered the "Rotate Wi-Fi Address" feature, which goes beyond the previous private Wi-Fi address. It changes your iPhone's MAC address not only for each network, but also within the same network at random intervals. This makes it virtually impossible for public network operators and trackers to monitor your device over extended periods.
To activate the feature, open "Settings" and tap "Wi-Fi". Tap the information icon (ⓘ) next to the connected network and enable "Rotate Wi-Fi address". This setting applies per network – you can leave it disabled for your home network, but it should always be enabled for public Wi-Fi networks.
Enable iCloud Private Relay for Safari
iCloud Private Relay masks your IP address and encrypts your DNS queries when browsing with Safari. This feature routes your data traffic through two separate relays—one from Apple and one from a third-party provider. The result: Neither your internet service provider, nor the operator of the public Wi-Fi network, nor the website you're visiting knows your identity or browsing behavior at any given time.
Private Relay is part of iCloud+ and therefore included in every paid iCloud subscription. To activate it, open Settings, tap your name, and then tap iCloud. Select Private Relay and turn it on. Additionally, you can enable the "Limit IP Address Tracking" option in your Wi-Fi settings under the information icon for your network.
Important to know: Private Relay is not a complete VPN replacement. It only protects Safari traffic and certain DNS queries, not the traffic of other apps. We explain all the details and differences compared to a VPN in our article iCloud Private Relay: Simple data protection for Safari.
VPN: When it's worth it
A VPN (Virtual Private Network) encrypts all internet traffic on your iPhone – not just Safari, but all apps, messaging apps, and services. This makes it the most comprehensive protection measure on public Wi-Fi networks. A VPN creates an encrypted tunnel between your device and a VPN server, so no one on the same network can intercept your data traffic.
A VPN is especially worthwhile if you regularly work on public networks, transfer sensitive data, or access business applications. When choosing a VPN provider, look for a no-logs policy, strong encryption, and a location in a country with strict data protection laws. Be wary of free VPNs – they often finance themselves by collecting and reselling user data. You can learn more about this in our article VPN: Who Sees What? The Truth About VPNs.
Prevent automatic Wi-Fi connections
Your iPhone remembers all the networks it has ever connected to and automatically reconnects as soon as one is within range. In public environments, this can be dangerous – especially if an attacker creates a hotspot with the same name as a known network.
To prevent this, open "Settings" and tap "Wi-Fi." Tap the information icon (ⓘ) next to a public network and turn off "Connect Automatically." This way, you'll have to consciously connect to this network in the future, instead of it happening in the background. Additionally, under "Settings" → "Wi-Fi," you can change the "Ask me to connect to networks" option to "Ask" so that your iPhone always asks for your permission before connecting to new networks.
Additionally, you should regularly remove old, no longer needed networks from your list. To do this, tap "Edit" in the top right corner of the Wi-Fi settings, authenticate with Face ID or your device passcode, and delete the networks you no longer need. Our article Viewing Wi-Fi Passwords on iPhone explains how to view and manage saved Wi-Fi passwords.
Pay attention to HTTPS
Modern websites use HTTPS, which encrypts the data traffic between your iPhone and the server. Safari displays a lock icon in the address bar when a connection is established via HTTPS. If this icon is missing or Safari displays a warning, you should not enter any personal information on that page—especially not on a public Wi-Fi network.
Since iOS 17, Safari in private mode blocks known trackers and removes tracking parameters from URLs. For particularly sensitive tasks such as online banking, it is recommended to always use private mode on public networks or, better yet, to use your bank's official app, which establishes its own encrypted connection.
Personal hotspot as a safer alternative
The most secure connection on the go isn't public Wi-Fi, but your own personal hotspot. Your iPhone creates a private, encrypted network over your cellular connection, which your other devices can then connect to.
Activate your personal hotspot under "Settings" → "Personal Hotspot". You'll also find the hotspot password there – change it to a strong password if necessary. If you need to perform sensitive tasks such as online banking, work emails, or access company systems, your personal hotspot is a better choice than any public Wi-Fi network.
Safe browsing starts with the right settings
Public Wi-Fi networks aren't a cause for panic, but they are a cause for caution. With just a few settings on your iPhone, you can significantly reduce the risks: Enable rotating Wi-Fi addresses, use iCloud Private Relay or a VPN, prevent automatic connections to unknown networks, and consistently use HTTPS. For particularly sensitive tasks, a personal hotspot is the safest alternative. This way, you can browse securely on the go – without sacrificing the convenience of public networks. The best products for you: Our Amazon storefront offers a wide selection of accessories, including those compatible with HomeKit. (Image: Shutterstock / Chonlatee42)
- iOS 26.4: Show Hotspot Data usage per Device
- Recognizing Smishing: How to protect yourself from SMS fraud
- Create and manage secure passwords: The Apple guide
- WhatsApp hacked: How to protect your Account
- Recognizing Phishing: How to protect yourself from fraud
- Creating, Changing, and Deleting an Apple ID: The complete Overview
- Activate iPhone Call forwarding: All Methods under iOS 26
- iPhone vibrates for no Reason: Causes and Solutions under iOS 26
- Connecting and resetting AirPods: Instructions for all Models
- AirDrop not working: All Solutions for iOS 26
- iPhone loading slowly: Causes and Solutions under iOS 26
- iPhone Screen Recording: Instructions for iOS 26
- How to view your Wi-Fi Password on your iPhone: All Methods under iOS 26
- iPhone Update Problems: All Solutions for iOS 26
- Creating an iPhone Backup: All methods under iOS 26
- Transferring Data to a new iPhone: All Methods under iOS 26
- Clear History on iPhone: Safari, Chrome and more
- Disable Audio Zoom on iPhone
- iPhone Battery drains quickly: Here's how to extend Battery Life under iOS 26
- Resetting your iPhone: All reset methods under iOS 26
- iCloud Costs: All storage plans, prices, and which one is worth it
- Recording an iPhone call: What works in Germany – and what doesn't
- Clear iPad Cache: More Storage and better Performance
- Clear iPhone cache: How to make your iPhone fast again
- Search iCloud.com: Activate new search function in iOS 26.4
Frequently asked questions: Using public Wi-Fi safely
Not generally, but significantly riskier than your home network. In open Wi-Fi networks, other users on the same network can potentially intercept your data traffic or set up fake hotspots. With the right iPhone settings, such as rotating Wi-Fi addresses, iCloud Private Relay, and a VPN, you can significantly minimize these risks.
iCloud Private Relay protects only Safari traffic and masks your IP address. A VPN, on the other hand, encrypts all internet traffic on your iPhone, including traffic from apps, messaging apps, and other services. For comprehensive protection on public Wi-Fi networks, a VPN is the better choice.
Since iOS 18, your iPhone changes its MAC address not only per network, but also within the same network at random intervals. This prevents public Wi-Fi operators and trackers from monitoring your device for extended periods. This feature can be enabled individually for each network in the Wi-Fi settings.
Yes, if an attacker creates a network with the same name as a Wi-Fi network you know, your iPhone can connect to it automatically. To prevent this, tap the information icon (ⓘ) next to the relevant public network in your Wi-Fi settings and disable "Auto-connect." Additionally, under "Settings" → "Wi-Fi," you can change the "Ask me to join networks" option to "Ask" and regularly delete old networks.
With the right precautions, yes, but caution is advised. Only use your bank's official app, which establishes its own encrypted connection. Avoid entering banking data via a browser on a public Wi-Fi network. It's even more secure to use your iPhone's personal hotspot for such tasks.
Not necessarily – iCloud Private Relay already offers good basic protection for Safari users and is included in every iCloud+ subscription. A paid VPN is worthwhile if you want to protect all data traffic from all apps or regularly use public networks. Free VPNs should be used with caution, as they often finance themselves by collecting user data.
Your iPhone can create its own private Wi-Fi network over your cellular connection, which your other devices can then connect to. Since you're the only person on the network and the connection is encrypted, the typical risks of public Wi-Fi networks are eliminated. For sensitive tasks, a personal hotspot is the most secure option.
