01 / 04

HTTPS protects the connection to a website

Most legitimate websites now encrypt their connections with HTTPS. This limits what others on a public wireless network can read in transit. However, HTTPS does not prove that a website is genuine; a scammer can also use HTTPS.

02 / 04

Confirm which network is real

Airports, cafés and hotels may have several network names, including imitations. Ask staff which network they provide instead of joining the first similarly named hotspot. Disable automatic joining when it creates confusion or unwanted connections.

03 / 04

Secure accounts independently

Use unique passwords, MFA or passkeys, and current operating-system updates. Avoid entering information after clicking an unsolicited message that claims a payment or account problem; open the service's official app instead.

04 / 04

Know when to disconnect

A captive portal that unexpectedly requests payment-card data, a software download or a password for an unrelated service is suspicious. You can switch to a trusted cellular connection when uncertain. No VPN can make a fake website trustworthy.

Sources & further reading
✳  Our promise

A general educational overview, not a substitute for professional guidance. Check current local rules and trusted primary sources before making consequential decisions.

← Back to all guides