2 min read
The real risk today
Accessing your account over public Wi-Fi — a café, a station, a hotel — used to be genuinely risky. Today, because connections to sites like ours are encrypted end to end, the data you send can't simply be read off the network. The main residual risks are fake hotspots and shoulder-surfing rather than interception.
Sensible precautions
- Use your own device, not a shared or public computer.
- Prefer your mobile data or a trusted network for anything sensitive; if using public Wi-Fi, a reputable VPN adds a layer.
- Check you're on the real network, not a look-alike hotspot with a similar name.
- Be aware of who can see your screen.
Let your account defend itself
The strongest protection is layered account security that doesn't depend on the network at all: two-factor authentication or a passkey means even a captured password is useless, and alerts flag anything unexpected.
When to wait
If you only need to check a balance, public Wi-Fi on your own device is fine. For a sensitive change — bank details, adding a user — consider waiting for a trusted network. And never do it on a shared machine; see shared computers.
Frequently asked questions
Is it safe to check my account on café Wi-Fi?
On your own device, generally yes — connections are encrypted. Use 2FA, watch for fake hotspots and onlookers, and consider waiting for a trusted network for sensitive changes.
Do I need a VPN?
Not essential, since connections are already encrypted, but a reputable VPN adds a layer on untrusted networks. Your own device and 2FA matter more.
What's the biggest public Wi-Fi risk now?
Fake look-alike hotspots and people seeing your screen, more than data interception. Check the network name and your surroundings, and keep 2FA on.
Related reading

Keeping your account safe on shared or public computers
On a machine you do not fully control, treat every session as temporary: use a private window, never save the…
Read →
Setting up an authenticator app for two-factor authentication
Two-factor authentication adds a second step to sign-in: after your password you enter a six-digit code from…
Read →
Setting up a passkey for your Credit Corp account
A passkey replaces your password with your device's own unlock — fingerprint, face or PIN. It is…
Read →
Turning on security alerts for your account
Security alerts email you the moment something sensitive changes — a new sign-in, a password reset, a change…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.