You sit down at a cafe, see a Wi-Fi network with the right name, and connect without a second thought. But what if that network is not the cafe’s at all — just a look-alike set up by someone at the next table? That is an evil twin, and it can quietly sit between you and everything you do online. Our GetMyPassword team explains how to recognize an evil twin hotspot and stay safe.
What an evil twin is
An evil twin is a fake Wi-Fi hotspot set up to impersonate a legitimate one, using the same or a similar network name to trick you into connecting. An attacker broadcasts a network called something like “Cafe_Free_WiFi” right next to the real one. Once your device joins theirs, your traffic flows through their equipment, letting them watch what you do, capture details you enter, or push you toward fake pages. To you, it looks like the normal free Wi-Fi you expected.
Why it is hard to spot
The whole point of an evil twin is to look ordinary. The network name can be identical to the real one, the connection works normally, and there may even be a familiar-looking login page asking for an email or password. Some evil twins knock you off the real network so your phone reconnects to theirs automatically. Because nothing obviously breaks, you have no reason to suspect that an extra set of eyes is now in the middle.
How to protect yourself
- Confirm the exact network name with staff, and be wary of duplicates or slight misspellings.
- Use a VPN on public Wi-Fi, so your traffic is encrypted even through a rogue hotspot.
- Stick to HTTPS sites and never ignore browser certificate warnings.
- Avoid banking and sensitive logins on public Wi-Fi, or use your phone’s mobile data instead.
- Turn off auto-connect so your device does not silently rejoin look-alike networks.
An evil twin wins by looking exactly like the network you trust. A VPN and a habit of not banking on public Wi-Fi take away almost everything it was set up to steal.
If you think you connected to one
Disconnect, switch to mobile data, and avoid entering anything sensitive until you are on a network you trust. If you typed a password while connected, change it — and change it from a safe connection. Because an evil twin’s goal is usually your logins, the strongest safety net is account security that survives a snooped connection: a unique password from our password generator on every account and two-factor authentication, so one intercepted login cannot unlock the rest.
Frequently asked questions
What is an evil twin Wi-Fi hotspot?
It is a fake Wi-Fi network set up to impersonate a real one, using the same or a similar name. When you connect, your traffic flows through the attacker’s equipment, letting them watch what you do or capture details you enter.
How can I tell a Wi-Fi network is fake?
It is genuinely hard, since the name and connection can look normal. Confirm the exact network name with staff, watch for duplicates or misspellings, be suspicious of unexpected login pages, and protect yourself with a VPN rather than relying on spotting it.
How do I stay safe on public Wi-Fi?
Use a VPN to encrypt your traffic, stick to HTTPS sites, avoid banking and sensitive logins or use mobile data instead, turn off auto-connect, and protect your accounts with unique passwords and two-factor authentication.