Is Hotel Wi-Fi Safe? What Hotels and Other Guests Can See, and How to Lock It Down
HTTPS hides what you do, not where you go: hotels log every site you visit, and fake networks and login pages target guests. What the hotel and other guests can see, the real risks, how to check a network, airport and banking advice, and how to lock it down.
Quick Answer
Only partly. HTTPS hides your passwords and messages, but the hotel still logs every site you visit, and HTTPS cannot protect you on a look-alike “evil twin” network or a fake login page, both of which the FBI warns about in hotels. Other guests may also see your shared devices. Join only the network name staff give you, never enter a card or email password into a Wi-Fi portal, and turn on a VPN as soon as you log in, or use your phone’s hotspot.
Hotel Wi-Fi is only as safe as the weakest of three things: the network you joined, the page you typed into, and what you are happy for the hotel to log. HTTPS hides the content of most sites, but not which sites you visit, and it cannot help you on a fake network set up to look like the hotel’s.
That is why the FBI tells people working from hotels to use a VPN or their phone’s hotspot: look-alike networks, fake login pages and weak shared passwords are common in hotels. The FTC adds that encryption makes public Wi-Fi “usually safe”, which holds only while you are on the real network and on real sites. Below: what the hotel and other guests can see, what can go wrong, and how to lock it down in two minutes. The same applies to airport and café Wi-Fi.
Can the Hotel See What You Browse?
More than most guests expect. The hotel, or the company that runs its Wi-Fi, logs every site you connect to, when, and how much data you use, tied to your device. It cannot read what you do on HTTPS sites. A VPN removes even the site names:
| What the network sees | Without VPN | With VPN |
|---|---|---|
| Your device’s Wi-Fi (MAC) address and name | Yes | Yes |
| Which websites you visit (domain names) | Yes | No, only the VPN server |
| Pages, searches, messages, passwords on HTTPS sites | No | No |
| Content of plain HTTP pages | Yes | No |
| How much data you use and when | Yes | Yes |
Incognito mode does not change any of this: it only stops your own browser saving history. More in incognito vs VPN and does a VPN hide search history.
What Can Actually Go Wrong on Hotel Wi-Fi
| Risk | How it works | How likely | What protects you |
|---|---|---|---|
| Fake “evil twin” network | An attacker names a hotspot like the hotel’s (e.g. “Hotel_Guest_Free”) and watches or redirects what you do | Uncommon, but the FBI lists it | Ask staff for the exact network name; VPN |
| Fake login page | A look-alike portal asks for your room number, card or email password | Uncommon | Never type a card or account password into a Wi-Fi portal |
| Other guests on the same network | Without client isolation, your laptop’s shared folders and services are visible to every room | Common on cheap or old setups | Set the network to Public; turn off file sharing |
| Unencrypted (open) Wi-Fi | No password means nearby devices can read any unencrypted traffic | Common in hotels | HTTPS sites and apps; VPN |
| Hotel or ISP logging | The network sees which sites you visit (domain names), when and how much | Routine | VPN hides destinations from the hotel |
| Reading your HTTPS traffic | Breaking into banking, email or messaging sessions directly | Very unlikely | HTTPS/TLS already does; heed certificate warnings |
Most of these need no skill from the attacker: they work because guests connect in a hurry to whatever looks right. A VPN covers the network-level risks in one step, because everything leaves your device encrypted; staying alert to fake pages covers the rest.
How to Check If a Hotel Wi-Fi Network Is Safe
- 1
Confirm the exact network name
Ask reception or read the key-card sleeve. Two similar names (“Hilton Guest” and “Hilton_Guest_Free”) are a warning sign; join only the one staff name.
- 2
Look for a password or a lock icon
A network with WPA2 or WPA3 encrypts traffic over the air. Open networks without a password do not, even if they show a login page later.
- 3
Check the login page
The portal should load on the hotel’s or Wi-Fi provider’s domain and ask only for your room number and surname, or an access code. A request for a card number or email password is a red flag.
- 4
Heed certificate warnings
If your browser says a site’s connection is not private, close it. On a hotel network that can mean someone is intercepting traffic.
- 5
See who else is visible
If your laptop or phone lists other guests’ TVs, printers or AirPlay devices, the network has no client isolation. Treat it as shared and make sure sharing is off on your side.
Login page will not open at all? That is a separate problem with a quick fix: see Wi-Fi login page not showing.
Hotel vs Airport vs Café Wi-Fi, and Banking
Hotel Wi-Fi
Airport Wi-Fi
Banking on public Wi-Fi
How to Stay Safe on Hotel Wi-Fi
- Turn on a VPN as soon as you log in. Complete the hotel’s login page, then connect. From that moment the hotel, other guests and any look-alike hotspot see only an encrypted stream, not the sites you use.
- Or use your phone’s hotspot for work or banking. The FBI recommends it when available.
- Mark the network as Public on Windows (Settings → Network & internet → Wi-Fi → network properties) and turn off file and printer sharing and AirDrop “Everyone”.
- Turn off auto-join for hotel networks once you check out, so your device does not connect to a look-alike name elsewhere.
- Keep updates and two-factor authentication on. The FTC’s two main tips: strong passwords with 2FA, and automatic updates.
Proton VPN
- Free plan with no data cap for basic protection
- Apps for Windows, macOS, iPhone, Android and Linux
- Kill switch blocks traffic if the VPN drops
- 30-day money-back guarantee on paid plans
2-year plan
PureVPN
- Many simultaneous devices on one plan
- Apps for laptops and phones, plus router setups
- 31-day money-back guarantee
5-year plan·$1.69/mo $12.95/mo
This page contains affiliate links. If you sign up through them, NAT Checker may earn a commission at no extra cost to you.
Pair the VPN with the checks above: it encrypts the connection, while you still decide which pages get your details. For streaming in your room, see VPNs for hotel streaming; for trips in general, VPNs for travel. Thinking about a free VPN? Read are free VPNs safe first.
Related Guides
Sources (checked October 31, 2026):
- • FBI IC3 PSA: telework from hotels could pose a cyber security risk (evil twins, false login pages, VPN and hotspot advice)
- • FTC: Are public Wi-Fi networks safe? (encryption makes public Wi-Fi usually safe; 2FA and updates)
- • Proton VPN: Free plan