Disclosure: This page contains NordVPN affiliate links. If you buy through them we may earn a commission at no extra cost to you. We are not employed by Nord Security. · Learn more

Is My Public Wi-Fi Safe? Free Quiz

By Jaden Vo · Free · Private (browser-only)

Cafe, airport, and hotel Wi-Fi feel risky because the horror stories are memorable. The calmer question is whether your habits match what the FTC and CISA actually recommend. Answer the seven questions below for a private score and plain-English tips — nothing leaves your device.

Educational checklist based on FTC and CISA public Wi-Fi guidance. Runs in your browser — answers stay on your device.

1. Before you join cafe or airport Wi-Fi, what should you do first?

Join the strongest signal with a familiar-looking nameConfirm the exact network name and login steps with staffOpen the captive portal and enter your email password

2. You are browsing on public Wi-Fi. Which habit matters most for everyday sites?

Only use sites that show HTTPS (lock icon) in the browserDisable HTTPS so pages load fasterShare your connection password in the group chat

3. You need to check a bank or tax account while traveling. Best choice?

Use the cafe Wi-Fi and hope for HTTPSUse your phone’s cellular hotspot (or wait until a trusted network)Email your password to yourself so you can paste it faster

4. What should you do about Wi-Fi auto-join on your phone or laptop?

Leave auto-join on for every network you have ever usedTurn off auto-join for public networks and forget them when you leaveRename your device to “CEO laptop” for priority

5. Which device habit reduces risk more than fretting about the cafe SSID itself?

Keep the OS, browser, and apps updatedInstall every free “Wi-Fi booster” app from search adsDisable automatic updates forever

6. When is a reputable VPN most useful on public Wi-Fi?

Always required for opening any HTTPS news site onceWhen you regularly use public Wi-Fi, want encrypted egress you control, or need extras like threat filteringOnly if the cafe asks you to install their VPN

7. Someone near you needs the “hotel Wi-Fi login page.” What is the phishing-aware move?

Open links from SMS or QR codes without checking the URLType the hotel’s official URL yourself or follow staff directions, and prefer passkeys where offeredReuse your email password so you only remember one secret

What “safe enough” means on public Wi-Fi in 2026

A decade ago, open hotspots routinely exposed unencrypted sessions. Today, most sites you care about force HTTPS, which encrypts the path between your browser and that site. The FTC’s consumer explainer on public Wi-Fi stresses that HTTPS (the lock icon) matters for everyday browsing. That is why the honest headline is not “never join cafe Wi-Fi” — it is “join carefully, browse on HTTPS, and keep high-stakes logins off unknown networks.”

The risks that still show up in official tip cards are social and operational more than cryptographic: joining a network with the same name as the real cafe, typing passwords into a fake captive portal, leaving auto-join on so your phone reconnects to a stranger’s SSID later, and running an unpatched phone or laptop. Our long-form guide Is public Wi-Fi dangerous? walks through those traps with the same FTC and CISA sources.

How to read your quiz score

Each question has one best answer aligned with that public guidance (two points) and weaker alternatives (zero). A high score means your defaults already match the basics: confirm the SSID with staff, prefer HTTPS, use a personal hotspot for banking, disable auto-join for public networks, keep software updated, and treat VPN as a situational tool rather than a superstition.

A mid or low score is not a moral failing — it usually means marketing fear (“VPN or die”) crowded out habit checklists. Use the per-question tips after you submit, then skim Do you need a VPN on public Wi-Fi? (2026) for a clear when-yes / when-no framing. If public networks are part of your weekly routine, a reputable VPN such as NordVPN (affiliate link) can add encrypted egress you control; verify current pricing and the refund window on the official site before you pay.

Habits that beat panic

Confirm the network name with staff or a posted sign. Look-alike SSIDs are a classic evil-twin move.
Prefer HTTPS and stop when the browser warns about insecure or mismatched certificates.
Hotspot for banking and tax accounts — or wait until you are on a network you trust.
Turn off auto-join for cafes and hotels; forget the network when you leave (CISA’s tip card recommends disabling automatic connection features).
Update the OS, browser, and apps — unpatched devices are often a bigger hole than the cafe brand.
Prefer passkeys on important accounts so a fake login page cannot silently accept your password — see passkeys vs passwords.

Where a VPN still helps

HTTPS protects you site-by-site. A VPN encrypts most of your traffic to a provider you chose, which can matter on hostile networks, for DNS privacy preferences, or when you want a consistent tunnel on travel days. It does not make phishing pages safe, replace device updates, or excuse joining a suspicious SSID. If you subscribe, test inside the refund window and keep the free habits either way.

What this quiz does not do

It cannot scan the access point in front of you or detect an evil twin radio.
It does not invent breach statistics or “percent of cafe hackers” claims.
It is not legal, compliance, or enterprise network advice.

Next steps

FAQ

Is public Wi-Fi always dangerous?

No. Public Wi-Fi is safer than it was a decade ago for routine browsing because HTTPS encrypts traffic to most sites. Real remaining traps include look-alike networks (“evil twins”), fake login portals, ignored browser warnings, and outdated devices. The FTC and CISA both publish plain-language guidance on those habits.

Do I need a VPN every time I use cafe Wi-Fi?

Not automatically. HTTPS already protects most sessions to a specific website. A reputable VPN is more useful if you use public networks often, want encrypted egress you control, or value extras such as threat filtering. See our guide: Do you need a VPN on public Wi-Fi?

What is an evil twin network?

A hotspot that copies the real cafe or hotel name so your device joins the attacker’s access point instead. CISA’s public Wi-Fi tip card warns that criminals can create similarly named networks and recommends confirming the network name and login procedure with staff.

Should I bank on public Wi-Fi?

Prefer your phone’s cellular hotspot or wait for a trusted network for banking, tax, and other high-stakes logins. Even with HTTPS, fake portals and phishing pages raise the cost of a mistake.

Does this quiz upload my answers?

No. Scoring runs entirely in your browser with JavaScript. We do not collect or store your selections on a server.

Where does the advice come from?

Question tips mirror public FTC and CISA materials already cited on our public Wi-Fi articles (checked October 2026 on those pages). This quiz is educational, not a penetration test of the cafe you are sitting in.