How to use public Wi-Fi safely on your Mac

How To + Security & Privacy

Public Wi-Fi is useful when you’re away from home, but you don’t control the hotspot or its login page. A lookalike network, an unnecessary sharing setting, or a fake sign-in prompt can put your Mac or information at risk. That doesn’t mean every café or airport network is dangerous.

Before connecting, confirm the network name with the venue and check the Mac settings below. If you use a VPN, complete the genuine Wi-Fi login first, then turn it on before opening sensitive accounts. This guide also shows what to do if a network seems suspicious.

Is public Wi-Fi safe to use on a Mac?

Public Wi-Fi can be safe for everyday use, but it carries more risk than a trusted home or work network. Other people on the same network don’t automatically gain access to your Mac. However, a poorly secured or fraudulent hotspot could expose your connection to monitoring, redirection, or attempts to reach features your Mac is set to share, such as file or screen sharing.

Your safety depends on the network, your Mac’s settings, and the precautions you take while connected. Verify the hotspot, limit unnecessary sharing, and encrypt your internet traffic before opening sensitive accounts.

How can you recognize an unsafe public Wi-Fi network?

You can’t always tell whether a public network is unsafe, but these warning signs should make you cautious:

• The network name looks unusual: It contains spelling mistakes, extra numbers, or unexpected words. Several nearly identical names could be a fake hotspot.
• The venue can’t confirm the network: Staff members don’t recognize the name or can’t explain how guests should connect.
• The login page asks for sensitive information: A normal public Wi-Fi login page may request an access code or basic registration details. Be wary if it asks for the password to your email, Apple Account, social media, or banking details.
• It asks you to install something: a normal Wi-Fi login never needs this. Be cautious if it wants you to add an app, a browser add-on, or a security certificate or profile to get online.
• Your browser keeps warning you: it says a site isn’t private or can’t be verified, sends you somewhere you didn’t expect, or you see pop-up “security alerts” pushing you to act.
• Your Mac shows “Weak Security,” or the network is open: macOS may show a security warning when a network uses outdated protection. An open network has no lock icon and requires no Wi-Fi password. Neither proves the network is dangerous, but it offers less protection, so use a VPN and HTTPS websites.

How to stay safe when using public Wi-Fi on your Mac

You don’t need to avoid public Wi-Fi completely. Use the following steps to prepare your Mac, protect it while connected, and prevent it from rejoining the network unexpectedly.

Before you connect

1. Install available updates. Open Apple menu > System Settings > General > Software Update and install any macOS updates. This also installs available Safari updates. Check your security software separately for updates.
   
2. Turn off unused sharing services. Open System Settings > General > Sharing, then turn off File Sharing, Screen Sharing, Remote Login, and any other services you don’t need.
   
3. Limit AirDrop access. Open System Settings > General > AirDrop & Continuity, then set AirDrop to Contacts Only or turn off receiving when you aren’t using it.
   
4. Turn on the firewall. Open System Settings > Network > Firewall, then switch on Firewall. It helps prevent unwanted incoming connections from the internet and other networks.
   

While you’re connected

1. Sign in on the network’s login page: Some venues require you to accept their terms or enter an access code before connecting to the internet. Complete this step before turning on your VPN.
2. Check your Private Wi-Fi Address is set to Rotating: On macOS Sequoia 15 or later, your Mac already uses Rotating by default on open or weak-security networks, so this is usually just a confirmation.

Open System Settings > Wi-Fi. For your current network, click Details; for a saved network, click the More button and choose Network Settings. Under Private Wi-Fi Address, choose Rotating. If a hotel or captive-portal login keeps disconnecting you, try Fixed as a fallback.

3. Connect your VPN: Turn on your VPN before opening other websites or apps, especially work systems, financial accounts, or payment services. Check that the VPN shows an active connection.
4. Leave Limit IP Address Tracking on: in the network’s Details screen, keep this on to hide your IP address from known trackers in Mail and Safari. If you use iCloud+ Private Relay, turning it off also disables Private Relay on that network.
5. Lock your Mac when you step away: Press Control-Command-Q before leaving your Mac unattended in a public place.
6. Disconnect if something changes unexpectedly: Leave the network if a page sends you to an unexpected address, Safari warns that a site isn’t private, or a download starts without your permission. Switch to a trusted connection before opening important accounts.

When you’re finished

1. Stop your Mac from reconnecting automatically. Open System Settings > Wi-Fi. For the current network, click Details, for a saved network, click More and choose Network Settings. Turn off Automatically join this network if you want to choose when to connect.
   
2. Forget networks you no longer need. In System Settings > Wi-Fi, click Details for the current network and choose Forget This Network. For a saved network under Known Networks, click More beside its name and choose Forget This Network.
   

What can public Wi-Fi see about your online activity?

A public Wi-Fi operator can usually see basic connection details and may identify some of the online services your Mac contacts. What it can see depends on whether the traffic uses HTTPS, iCloud Private Relay, or a VPN.

• Connection details: The network can usually see that your Mac is connected, when it joined, how long it stayed, and how much data it transferred.
• Information entered on the login page: The operator can collect any email address, room number, phone number, or other details you enter on its Wi-Fi login page.
• Websites and online services: Without a VPN, the network may see which sites or services your Mac contacts, even when HTTPS protects what you send. A VPN hides those destinations from the Wi-Fi operator for traffic sent through it; iCloud Private Relay does something similar for Safari browsing.
• Specific pages and content: HTTPS normally prevents the network from seeing the exact pages you open, messages you send, passwords you enter, and payment details you submit.
• Unencrypted traffic: On the few sites that still use plain HTTP with no encryption, the network can see or change what’s sent.
• VPN use: The network can see that you’re using a VPN and how much data you transfer, but it can’t see the destinations or content inside the encrypted connection.

How does a VPN protect your connection on public Wi-Fi?

A trusted VPN for Mac encrypts the connection between your Mac and the VPN server. The Wi-Fi operator can still see that you’re using a VPN, but can’t see the websites you visit through it or the information sent inside that connection.

It’s worth knowing a VPN can’t make a fake website trustworthy, spot online threats, or remove malware from your Mac. It also can’t protect information you willingly enter on a fraudulent page. You still need to check website addresses, follow browser warnings, and avoid suspicious downloads.

How does a VPN compare with other privacy features?

HTTPS and Private Wi-Fi Address still matter when you use a VPN: they protect the website connection and reduce device tracking in different ways. iCloud Private Relay covers different traffic and isn’t a substitute for a full VPN.

For more privacy and protection on public Wi-Fi, Intego ONE Complete brings VPN, antivirus, and Smart Firewall together for your Mac. VPN encrypts traffic between your Mac and its server, Smart Firewall lets you review and control app connections, and antivirus scans for known malware. You still need to confirm the network and avoid suspicious login pages.

Get Intego ONE Complete

What should you do if a public Wi-Fi network seems suspicious?

Disconnect from the network as soon as you notice warning signs, such as unexpected redirects, Safari privacy warnings, requests for account passwords, or downloads you didn’t start. These signs don’t automatically mean someone accessed your Mac or accounts. What you should do next depends on what happened.

• Disconnect and forget the network: Open your Mac’s Wi-Fi settings, disconnect from the network, and remove it from your saved networks.
• Use a trusted connection: Switch to your phone’s personal hotspot or ask staff to confirm the correct Wi-Fi network before accessing accounts or taking further action.
• Protect any payment details you submitted: Contact your bank or card provider, follow its advice, and monitor the account for unfamiliar transactions.
• Check anything you installed: Don’t reopen an unfamiliar file or app. Remove any suspicious extension, certificate, or configuration profile, then update your security software and scan your Mac.
• Check accounts if you entered a password or saw unexpected sign-in activity: On a trusted connection, review devices, sessions, recovery details, messages, and purchases. Change any password you entered on a suspicious page, sign out unknown sessions, and report the activity to the affected service.

Make safer connections part of your routine

Public Wi-Fi doesn’t have to be off-limits. You can use it for everyday browsing and work as long as you remember that you don’t control the network. Your Mac’s built-in security features, HTTPS, and a trusted VPN each provide useful protection, but none can confirm that every hotspot or login page is genuine.

Pay attention to unexpected requests, redirects, downloads, and browser warnings. If you can’t verify a connection, switch to your personal hotspot instead of taking the risk. Knowing when to continue and when to disconnect makes public Wi-Fi much safer to use.

Frequently asked questions

Is password-protected public Wi-Fi safe?

Not necessarily. A password can restrict access and may encrypt the Wi-Fi connection, but it doesn’t prove that the network belongs to the venue. A fake network can also require a password, and everyone using a shared password still joins the same network. Verify the network name and use websites that show HTTPS.

Can public Wi-Fi see which websites I visit?

Yes, the network operator may see the domains or online services your device connects to. However, HTTPS usually prevents the operator from seeing the specific pages you open, the information you enter, or the content you exchange. A VPN hides the website names by sending your traffic through an encrypted connection, although the network can still see that you’re using a VPN.

Is iCloud Private Relay the same as a VPN?

No. iCloud Private Relay protects Safari browsing for iCloud+ subscribers by sending requests through two separate relays. It hides your IP address and prevents third parties from seeing both your identity and the websites you visit. However, it doesn’t protect all your device’s traffic or let you choose a server location like a VPN does.

How can I safely use public Wi-Fi on an iPhone or iPad?

Verify the network name, keep iOS or iPadOS updated, and leave Private Wi-Fi Address enabled. After completing the genuine login page, connect your VPN before opening sensitive accounts. Use a personal hotspot if you can’t verify the network, then turn off Auto-Join or forget it when you’re finished.

About Doris Muthuri

Doris is a cybersecurity writer with a knack for making technical topics approachable and relevant. Her work focuses on online security, digital privacy, emerging cyber threats, and practical ways to stay safer online. Before joining Intego, she spent more than six years creating content for sites such as AT&T, VPNMentor, and CyberGhost VPN. When she’s away from the keyboard, she enjoys gardening, baking, and exploring the outdoors with her two boys.
View all posts by Doris Muthuri →