What makes hotel networks different
A hotel network is shared by many unknown people, often including guests, visitors and staff devices, over equipment you did not choose and cannot inspect. That does not mean it is dangerous by default, and many networks are managed well. It does mean you cannot assume the same level of trust you might place in your home network. A sensible approach is to treat it like any shared space: fine for casual tasks, with extra care for sensitive ones.
This is general guidance only. Technology changes, and the hotel’s own instructions and your employer’s policies, if you travel for work, take precedence.
Confirm you are on the right network
Fake or lookalike networks are a known trick. A name that is almost the same as the hotel’s, or a second open network with a similar name, may not belong to the property. Ask the front desk for the exact network name and login method. Be wary of any login page that:
- asks for a card number or a password you did not expect,
- asks you to install a program or certificate to connect, or
- sends you to a strange address after you connect.
Typically a hotel login asks for a room number and last name, or a code from your check-in paperwork. Public Wi-Fi security is a topic of its own, but the basic principle is to connect only to a network you can confirm.
Keep devices in good shape
The most useful protections are the least exciting.
- Install system and app updates before you travel, not on the hotel connection.
- Turn on a screen lock and device encryption if your device supports it.
- Use a password manager or strong, unique passwords for important accounts.
- Turn on two-step sign-in for email and financial accounts, since email is often the key to resetting other passwords.
- Turn off automatic file sharing and nearby-sharing features when not in use.
- Log out of accounts and clear saved passwords on any shared computer, such as a business center machine.
Choose what to do on the network
Not every task carries the same risk. Browsing the news, streaming or reading a menu is low-risk. Logging in to your bank, entering card numbers, accessing work systems or sending sensitive documents deserves more care. If you have the option, use your phone’s mobile data for those tasks, or wait until you are on a trusted network. Most modern websites use encrypted connections, which helps, but encryption does not protect you from a fake site that you were tricked into visiting or from malware already on your device.
Pay attention to certificate and browser warnings. If your browser says a site is not secure or a certificate is invalid, stop. Do not click through just to get online.
Wired connections
Some rooms offer a wired port. A cable can feel more private than wireless, and it can be more stable for video calls. Still, it connects you to the hotel’s network, so the same cautions apply. Do not assume wired means safe, and see the material on wired connections for how these compare in practice.
What a VPN can do
A VPN, or virtual private network, creates an encrypted connection between your device and a service run by the VPN provider. It can hide your traffic from other people on the same local network, and in many cases from the hotel itself. It does not make you anonymous in general, protect you from phishing, or fix an infected device. Some countries restrict VPN use, and some hotel networks block them, so check local rules. If you use one, choose a provider carefully, because you are placing your traffic in its hands, and avoid free services that you cannot assess. Do not rely on a VPN as a reason to ignore the other habits above.
Printers, business centers and shared devices
If you need to print a boarding pass or document, consider sending it to the front desk or using a printing option that does not require logging in to your accounts. If you use a shared computer in a business center, avoid logging in to sensitive accounts, do not save passwords, and close all sessions afterward. Business centers are covered more broadly in the amenities section.
Devices that connect to the room
Smart TVs, voice assistants and casting devices in a room may be shared by guests. Sign out of any streaming or social accounts you used before you leave, and perform any reset the room provides. Do not plug personal USB drives into unknown devices, and treat public charging ports with caution, since a charging-only cable or your own adapter is a simple precaution. Travel adapters and your own plug, rather than a public port, are discussed in the in-room habits section.
If you suspect a problem
If you notice a strange login alert, unusual account activity or a device acting oddly, change passwords from a trusted device, sign out of other sessions, and contact your bank or service provider if money is involved. Tell the hotel if you believe their network was involved. No set of habits can remove all risk, but these steps reduce it considerably.