Being in an airport has a way of making you abandon normal habits. You might be so hungry that you’ll spend $25 on a crummy sandwich. You're so tired that you turn a jacket into a pillow on a dubious airport floor. And sometimes, you're so desperate for a charge that you plug into whatever port and log onto whatever free Wi-Fi network you see first.
I know, I’ve been there. But those are the airport habits we all really need to stop doing.
Yes, there's a lot of fear-mongering out there, and not every airport cybersecurity warning deserves the panic it gets. But some risks are legitimate and very much worth paying attention to. Here are five airport tech habits worth seriously reconsidering.
In this article
Joining Free Wi-Fi Without Checking the Network Name
When you're rushing to make a connection, and also need to stay connected, you'd be forgiven for quickly glancing at any free network name and joining it. Maybe you even take an extra moment to pick the one that looks like it comes from the airport. But in some cases, it’s a trap. And that’s exactly why fake networks work on travelers.
The Cybersecurity and Infrastructure Security Agency (CISA) warns about networks with similar names created with the full intention to trick travelers into connecting. These are sometimes called “evil twin” networks because they impersonate real network names.
Once you join, your personal info could be at risk, allowing an attacker to use specialized tools to read your data, including credit card numbers, username-password combinations, and other personal details.
When joining any public Wi-Fi network, always verify the hotspot's validity before use to ensure it's a trusted access point. An official airport Wi-Fi network will be listed on airport signage or the official website, or you can ask an employee if you’re visiting a lounge.
Better yet, I use my phone’s cellular connection or personal hotspot. CISA says a mobile network connection is generally more secure than public Wi-Fi.
Plugging Directly Into a Public USB Port
The made-for-viral-internet-content term “juice jacking” sounds alarming. And it is. The idea is that a compromised public USB port could be used to access data on your phone or install malicious software.
For this reason, CISA has advised travelers to avoid plugging their phones into charging stations they don’t control.
Most modern smartphones have built-in protections that make it harder for a USB connection to get into your data without your permission.
Apple, for example, defaults to requiring users to unlock an iPhone or iPad before it can communicate with a new wired accessory. Android also requires users to select file transfer when connecting via USB.
Still, I just pack my own wall adapter and plug into an electrical outlet to be safer whenever that's an option.
Doing Sensitive Business on Airport Wi-Fi
I work from airports on the regular. But even when I’m logged into official Wi-Fi networks, I still exercise a safe amount of caution.
When using these networks, I make sure to only answer run-of-the-mill emails. If I need to access financial or otherwise sensitive accounts, I reserve that for when I’m home or on a secure, password-protected network.
Indeed, government cybersecurity guidance recommends avoiding banking, shopping, and other sensitive transactions on public networks where your information might be stolen. If you need to do any of those tasks while traveling, use cellular data instead.
That means I’ll happily research my next trip or read about how to get cheap flights over airport Wi-Fi, but I save checking my bank account or any other similarly sensitive tasks for my cellular connection.
It’s an easy distinction to make and doesn’t require treating every airport network like it’s crawling with hackers.
Leaving Wi-Fi and Bluetooth on When You're Not Using Them
Since it’s the default, many of us leave Wi-Fi and Bluetooth on practically all the time. It’s convenient, especially when you’re moving between headphones, smartwatch, and other devices.
But the National Security Agency actually recommends disabling Wi-Fi and Bluetooth when they’re not in use in public settings, reducing opportunities for unwanted connections.
It's just a quick toggle that takes 2 seconds, so now I switch off what I’m not actively using. I think of it like the other little good-hygiene routines I’ve picked up after spending so much time in airports, whether that’s keeping my hands clean after touching some of the dirtiest travel items or taking steps to avoid getting sick on a plane. Call it good cyber hygiene.
Assuming Public Wi-Fi Means Everyone Can See Passwords
Here’s one airport warning we can dial back. You may have heard that anyone on public Wi-Fi can simply intercept your passwords and other information. That was a much bigger concern in the earlier days of the internet, when many websites didn’t encrypt their traffic.
Today, most websites use HTTPS encryption. The Federal Trade Commission says that because encryption is now widespread, connecting through public Wi-Fi is “usually safe.”
That doesn’t mean I connect indiscriminately. Fake networks and phishing sites remain actual threats, and HTTPS only protects information traveling between you and the site you’re visiting. But merely joining legitimate airport Wi-Fi isn’t the digital catastrophe some old advice makes it out to be.
The Shortcut
Confirm the airport’s official Wi-Fi network name before connecting. Fake networks can mimic legitimate ones.
Bring your own wall adapter instead of plugging directly into a public USB port, and always use cellular data or your personal hotspot for banking and other sensitive transactions.
Turn off Wi-Fi and Bluetooth when you aren’t using them and also rest easier knowing that public Wi-Fi isn’t automatically unsafe. Widespread HTTPS encryption has made ordinary browsing significantly more secure.
