What the network owner can and cannot see
On a modern encrypted website, the network usually cannot read the actual content of what you are doing in the way people imagine from old internet stories. HTTPS protects a lot. That is good news.
But that does not mean the network is harmless. The operator may still see which services you connect to, and a malicious or badly managed network can still create opportunities for trickery, spoofed portals, or other shady behavior around the edges.
Lower risk
Reading news, checking maps, or browsing normal sites over HTTPS is usually fine.
Medium risk
Logging into important accounts on a network you do not trust deserves more caution.
Higher risk
Doing banking, work admin tasks, or sensitive account recovery on sketchy Wi-Fi is asking for unnecessary drama.
The most common mistakes
Connecting to the wrong network
Fake access points can use names that look almost right. "Airport Free WiFi" and "Airport_Free_WiFi" are not the same thing, even if one is trying very hard to look official.
Treating the captive portal like proof of trust
Just because a network has a branded login page does not mean the rest of the setup is secure. It only means there is a branded login page.
Doing highly sensitive work when you do not need to
If you can wait until you are back on a trusted home connection or your phone hotspot, that is often the smarter move for important account changes or financial activity.
Where VPNs actually fit
A VPN can add privacy and reduce how much the local network sees about your traffic path. That can be useful on public Wi-Fi. But a VPN does not make bad decisions safe. It does not fix phishing, weak passwords, or logging into a fake page because it looked friendly enough.
The useful way to think about a VPN is "extra protection for traffic routing and privacy," not "magic internet cape."
Safer habits that matter more than drama
- prefer sites and apps that use HTTPS properly
- avoid sensitive account recovery or financial tasks on unknown networks when possible
- use a password manager so fake login pages are easier to notice
- turn on 2FA for important accounts
- use your phone hotspot instead when something is especially sensitive
So is it safe or not?
Public Wi-Fi is not automatically unsafe, and it is not automatically trustworthy. It is just a shared environment with more uncertainty than your home network. If you treat it with the right amount of caution, use modern protections, and save the high-stakes tasks for better connections, you can use it without turning every coffee shop into a paranoia exercise.