Public wifi security is the set of habits and tools that keep data safe on shared wireless networks. For crypto users it carries one extra rule. The keys and recovery details that control a wallet deserve more care than a social feed, because a leak is permanent.
The real picture is calmer than the old warnings, and narrower. Encryption now shields most browsing, so the FTC calls public networks usually safe. The live risks are fake hotspots and fake sites, not eavesdropping on every login. And no network setup protects a coin's price: assets can lose most or all of their value quickly, and nothing on this site is a reason to buy.
How risky is public Wi-Fi today?
Less than it was, per the FTC. In the past, most websites did not encrypt traffic, so snoopers on a network could read data. Today most sites encrypt, and the agency says connecting through a public Wi-Fi network is usually safe. Its guide still tells users to look for the lock symbol or https in the address bar.
Two limits sit inside that comfort. Encryption covers the path, not the endpoint. And the FTC warns that scammers build fake websites and encrypt them too, so a locked bar does not prove an honest site.
What is an evil twin hotspot?
The UK's National Cyber Security Centre defines it in its staff training material: an attacker-owned access point that pretends to be the real one by using the same or similar name. The NCSC's example is a coffee shop, where a rogue point lets the attacker intercept and manipulate traffic.
The answers are practical. When unsure which network is real, ask the shop owner or a member of staff to confirm it. A VPN also helps. The NCSC says the use of a VPN can prevent this type of attack. We covered a connected angle in What is a SIM swap attack, and how does it drain a crypto wallet?.
What should you avoid doing on public networks?
Browsing is the low-risk case in the NCSC's guidance. Logging in is the case that calls for a VPN, and its advice is blunt: only use public Wi-Fi networks for browsing, and if a login is unavoidable, ensure a VPN is on. For crypto, add one habit. Do the signing at home on a network you control, and treat a cafe session as read-only time. Readers following this should also see How to spot a crypto drainer before it takes your wallet.
How should a wallet travel with you?
bitcoin.org's wallet guide keeps the answer simple. It compares a Bitcoin wallet to a wallet with cash — the analogy breaks down here: lost cash is gone, while keys are copyable data that backups can rescue. The guide says to keep only small amounts on a computer or phone for everyday use, and to keep the rest somewhere safer. It also warns that online services holding your money can be hacked, fail, or freeze funds, so holding your own keys is the preference when practical.
Self-custody is not free of risk, though. The same guide pairs it with backups, encryption, and regular care, because a lost key with no backup is a lost wallet. Cold storage or a hardware wallet shifts the risks around rather than erasing them.
Which fixes take five minutes?
- Turn on multi-factor authentication wherever a service offers it. Both the FTC and bitcoin.org push this habit.
- Keep the operating system, browser, and security software updated, per FTC guidance.
- Confirm the exact network name with staff before connecting, per the NCSC.
- Check for https, and stay skeptical anyway, since fake sites encrypt too.
Conclusion
Public Wi-Fi is not the monster in the old warnings. Encryption covers most traffic, per the FTC, and the evil twin is a named trick with simple answers: confirm the network, use a VPN for logins, and keep browsing light. For crypto, the deeper rule is older than any hotspot. Carry small amounts, keep strong backups, and hold your own keys with care.
