Short answer
Use HTTPS, updated devices and preferably a VPN on public WiFi. Avoid sensitive actions if the network feels unsafe.
Risks on open networks
Others on the same network may try to monitor traffic, trick users into fake login pages or exploit insecure sharing settings.
Basic protection
Check that websites use HTTPS, turn off automatic connection to unknown networks, keep the system updated and use strong passwords with two-factor authentication.
When VPN helps
VPN encrypts traffic between your device and the VPN server. It reduces visibility from the local WiFi network, but does not protect against fake websites or malicious downloads.
Common questions
Is password-protected café WiFi safe?
It is better than a fully open network, but all guests often know the same password. Still treat it as untrusted.
Should I use a banking app on public WiFi?
Banking apps normally use strong encryption, but mobile data or your own hotspot is often a better choice for sensitive tasks.