Free WiFi is everywhere now: coffee shops in Kololo, hotel lobbies in Entebbe, shopping malls, university campuses, bus terminals and even some restaurants upcountry. It saves your data bundles and is often faster than mobile data. But public networks are shared with strangers, and some are set up specifically to spy on users. This guide explains how to safely use public WiFi, what the real risks are, and a simple checklist you can follow every time you connect.
What are the risks of public WiFi?
Most public WiFi users never have a problem. Still, it helps to understand what can go wrong so you can make sensible choices.
Fake hotspots
Anyone can create a WiFi network and name it "Free Mall WiFi" or "Hotel Guest". If you connect to a fake hotspot, the person running it may be able to see some of your traffic, redirect you to fake login pages or try to push malware.
Snooping on open networks
Networks without a password, or with a password shared with everyone, offer limited privacy. On an open network, information sent without encryption can potentially be intercepted by others on the same network. Most major websites now use HTTPS, which protects the content, but not every site or app does.
Fake login and captive pages
Many public networks ask you to log in through a web page, sometimes requesting your phone number, email or social media login. A fake version of such a page can harvest your details.
Device sharing and exposure
If your laptop has file sharing turned on, other people on the same network might see shared folders or devices.
Before you connect: check the network
- Ask staff for the exact network name. If the cafe is called "Java Corner", confirm the WiFi name and password with a staff member rather than guessing among several similar names.
- Prefer networks with a password. A password protected network, using WPA2 or WPA3, is generally better than a completely open one.
- Be suspicious of duplicates. Two networks with almost identical names in the same place is a warning sign.
- Do not enter unnecessary personal information on a WiFi login page. A phone number may be acceptable; your email password never is.
While connected: safe habits
Look for HTTPS
Check for the padlock and "https" at the start of web addresses. If your browser warns that a connection is not secure, or that a certificate is invalid, do not continue, especially on login or payment pages.
Avoid sensitive tasks if you can
Banking apps, Mobile Money apps and work systems use encryption, but it is still wise to do highly sensitive tasks on your own mobile data or a trusted home or office network when possible. Switching to MTN or Airtel data for a few minutes to make a payment is a small cost for peace of mind.
Use two factor authentication everywhere
If someone does steal a password, two factor authentication means they still cannot log in without the second code. Turn it on for email, WhatsApp, Facebook, Instagram, your bank and your website admin.
Consider a reputable VPN
A Virtual Private Network encrypts all traffic between your device and the VPN provider, so others on the public network cannot see what you are doing. If you regularly work from cafes or hotels, a trusted paid VPN is worth considering. Avoid unknown free VPN apps that may collect and sell your data.
Keep your device updated
Security updates for your phone, laptop, browser and apps fix weaknesses that attackers could use. Install them promptly, ideally on a trusted network.
Device settings that protect you
On Android
- Turn off "Connect to open networks automatically" or similar options in WiFi settings.
- Forget public networks after you use them: long press the network name and choose Forget.
- Keep Google Play Protect enabled.
On iPhone
- Set "Ask to Join Networks" so your phone does not connect silently.
- Turn off Auto Join for public networks after using them.
- Keep Private WiFi Address enabled for public networks.
On Windows laptops
- When connecting, choose Public network so file sharing and discovery are turned off.
- Keep Windows Defender Firewall on.
- Disable file and printer sharing when away from the office.
On Mac laptops
- Turn on the firewall in system settings.
- Turn off file sharing and AirDrop for everyone when in public.
Special advice for business owners and staff
Many Ugandan professionals work from hotels during conferences or from cafes between meetings. If you access business email, your website admin or customer data, extra care is worth it.
- Always use HTTPS for your website's admin area. If your site does not have SSL, fix that first.
- Use business email with strong passwords and two factor authentication.
- Do not save passwords in a shared or public computer browser.
- Log out of accounts when you finish on a borrowed device.
- Avoid using cyber cafe computers for logging in to sensitive business systems.
Baasa Cloud hosting includes free SSL for every website, and our business email supports secure connections, so your logins stay protected even when you are on the move.
Alternatives to public WiFi
- Mobile data: your own 4G connection is usually more private than public WiFi.
- Phone hotspot: share your phone's data with your laptop using a strong hotspot password.
- Portable MiFi device: useful for people who travel often for work.
Quick public WiFi safety checklist
- Confirm the network name with staff.
- Prefer password protected networks.
- Check for HTTPS on every site you log in to.
- Use mobile data for banking and Mobile Money if possible.
- Turn on two factor authentication.
- Use a trusted VPN if you work in public often.
- Turn off file sharing and auto connect.
- Forget the network when you leave.
Frequently asked questions
Is it safe to use Mobile Money apps on public WiFi?
Official apps use encryption, so the risk is lower than many people think. Still, for peace of mind, switch to your own mobile data when making payments.
Can someone hack my phone just because I joined their WiFi?
It is unlikely if your phone is updated and you avoid suspicious downloads and warnings. The bigger risks are fake login pages and unencrypted traffic.
Are hotel WiFi networks safer than cafe WiFi?
Not necessarily. Any network shared with many strangers carries similar risks. Apply the same precautions everywhere.
Do I need a VPN on my phone?
Not for everyone. It is most useful if you often use public WiFi for work or sensitive tasks.
Conclusion
Public WiFi is a convenience you do not have to fear, as long as you use it wisely. Confirm the network, rely on HTTPS, keep sensitive tasks for your own data connection, turn on two factor authentication and keep your devices updated. With these habits, you can enjoy free WiFi across Uganda without putting your accounts or your business at risk.