Is Public Wi-Fi Safe for Online Banking? 4 Rules

Online banking on public Wi-Fi is usually safe enough in your bank's official app, because the app encrypts what it sends. The real risks are fake networks, fake sign-in pages and a phone that joins networks by itself. Four rules cover them.

Checked on 31 October 2026.

Is it safe to use public Wi-Fi for online banking?

Banking apps and bank websites use encryption, so other people on the same Wi-Fi cannot read your balance or your password as it travels. The danger is around that connection, not inside it: a hotspot set up to look like the café's network, a page that asks for your bank login, or a link in a message that opens a copy of your bank's site. Follow the four rules below and the risk drops a lot.

Rule 1: Use the bank's app, not a link

Open your bank's official app, or type the bank's address yourself. Do not log in from a link in an email, a text message or a Wi-Fi sign-in page. Fake bank pages look exactly like the real ones.

Rule 2: Join only the network you were given

Ask staff for the exact Wi-Fi name and join only that one. Two networks with almost the same name are a warning sign. How to check in a minute: How to spot a fake Wi-Fi network.

Rule 3: Turn on your VPN before you open the app

Once any Wi-Fi sign-in page has let you through, connect your VPN, then open the bank app. A VPN encrypts the connection between your phone and the VPN server, so the people running the network cannot see which apps and sites you use.

Rule 4: Keep two-factor sign-in on

Turn on two-factor sign-in in your bank app, using the app's own approval or a code, so a stolen password alone is not enough. If you ever typed your bank password into a page you did not trust, change it over mobile data and call your bank.

When should you wait or use mobile data instead?

Wait, or switch to mobile data, if the network has no password and a famous name, if a page asks for your bank details to get online, or if your phone shows a certificate or security warning. Never tap past a warning to reach your bank.

What a VPN changes, and what it does not

A VPN protects the connection on any Wi-Fi. It does not make a fake bank page safe and it does not replace two-factor sign-in. Rules 1, 2 and 4 cover those parts. More on the limits: What a VPN cannot protect you from.

Frequently asked questions

Is mobile data safer than public Wi-Fi for banking?

Usually yes. Only your phone company sits between you and the internet, and nobody nearby can set up a copy of it.

Can people on the same Wi-Fi see my bank password?

Not when you use the bank's app or its real website, because both encrypt the password. The risk is typing it into a fake page.

Should I log out of my bank app after using public Wi-Fi?

Yes. Log out when you finish, and keep the phone lock on, so nobody can open the app if your phone is lost.

---

CasperVPN encrypts your internet connection with WireGuard, OpenVPN, IKEv2 and CasperCloak, our own protocol, on iPhone and iPad (Mac app coming). Travelling soon? Read our VPN guide for travellers or Download CasperVPN →