Used Public WiFi? Here’s How to Secure Your Accounts

That café login is suddenly bothering you ☕

You’re waiting for a train, grab a coffee, and hop onto the café’s free WiFi. You check your email, reply to a few messages, and open your banking app before heading out.

Then comes the thought: should I have done that? Take a breath—using public WiFi doesn’t automatically mean someone got into your accounts, and you don’t need to change every password just because you connected.

If you want to secure personal accounts after using public WiFi, start with these three moves. They’ll help you check for trouble and tighten things up without turning your evening into a full-time investigation.

1. Check who’s signed in 👀

Switch off the public WiFi and use your mobile data or a trusted connection while you check things. Open your account’s usual app or type its website address yourself, rather than following a surprise “security alert” link.

Start with your main email account. It’s often where password reset messages land, so keeping it safe helps protect your other accounts too.

Look in settings for labels like “Recent activity,” “Your devices,” or “Where you’re logged in.” Check for devices you don’t recognise, logins at odd times, or changes you didn’t make.

A location that looks slightly wrong isn’t proof of a break-in; location estimates can be off. An unfamiliar device plus messages you didn’t send is a much stronger reason to act.

Sign out any unfamiliar devices, then check that your recovery email and phone number are still yours. Repeat this check for important accounts you used, especially banking, social media, and anything holding payment details.

2. Change passwords where there’s a reason 🔑

If you spot an unfamiliar login, entered your password on a suspicious page, or shared it with a fake support account, change it promptly. Simply using legitimate apps on public WiFi isn’t, by itself, a reason to replace every password.

Make the new password long and unique. Your phone or browser’s built-in password tool can suggest and save one, so you don’t have to memorise another random string.

Used that same password elsewhere? Change those accounts too, starting with email and money-related accounts, because someone who learns one reused password may try it on other services.

When offered, choose the option to sign out other devices after changing your password. Don’t assume a password change automatically ends every existing login.

If you entered card details on a suspicious page or notice a payment you didn’t make, contact your bank through its official app or the number on your card. Don’t use contact details from the suspicious message.

3. Add a second sign-in check 📱

Turn on the setting that asks for an extra check when you sign in, not just your password. Depending on the account, that might mean approving a prompt on your phone or entering a code from a separate app.

This makes a stolen password less useful on its own. Start with your email, then add it to your other important accounts.

Save any backup codes somewhere private and safe, so losing your phone doesn’t lock you out. Never share a sign-in code or approve a login prompt you didn’t request—even if someone claims they’re helping secure your account.

Make your next WiFi stop less stressful 🧳

Before your next café session, turn off automatic joining for public networks and forget networks you no longer need. Ask staff for the correct WiFi name rather than choosing whichever looks convincing.

A VPN can help protect your connection while you use public WiFi, but it won’t undo an earlier login or stop you handing a password to a fake website. For sensitive tasks, mobile data is a useful alternative when it’s available.

The goal isn’t to panic after every coffee-shop visit. Check for unfamiliar activity, fix anything suspicious, and give your important accounts that extra sign-in check—then get back to your day.