The Truth Behind Free Wi-Fi - Who Profits When the Internet Costs You Nothing

Free Wi-Fi at cafes and convenience stores costs nothing for the user, but the businesses providing it shoulder real expenses.

Internet line: $50 to $200 per month. Commercial venues typically use business-grade internet plans that deliver faster speeds and greater stability than residential connections.

Equipment: $300 to $1,000 upfront. Commercial-grade Wi-Fi access points, routers, and installation fees. Unlike home routers, these devices cover a wider area and handle far more simultaneous connections.

Maintenance: $10 to $50 per month. Hardware upkeep, security measures, and terms-of-service management add ongoing costs.

All told, a single location spends roughly $100 to $250 per month on Wi-Fi. The shape of that spending matters more than the amount. The line and the upkeep are fixed monthly costs that arrive in full even in a month when nobody connects, while one additional user costs the venue almost nothing extra. Free Wi-Fi is equipment that loses money when unused and gets cheaper per head the more it is used.

That structure is tied directly to why venues leave it free. Charging for access would drive the number of users down and leave the fixed costs untouched. So where does the money come back from instead?

Offering free Wi-Fi is not charity. There are clear business objectives behind it.

Longer stays lead to extra orders. When a cafe offers Wi-Fi, customers linger. The longer they stay, the more likely they are to order a second coffee or a slice of cake. If the additional revenue exceeds the monthly Wi-Fi cost, the investment pays for itself.

Customer acquisition. "Free Wi-Fi available" has become a deciding factor when people choose where to sit down. Given two otherwise equal cafes, many customers will pick the one with Wi-Fi. Viewed as an advertising expense, a monthly Wi-Fi bill is a bargain.

Data collection. Many free Wi-Fi networks require you to register an email address or log in with a social media account before connecting. This is a mechanism for gathering user demographic data. Just as we explored in Loyalty Card Privacy, the equation "the price of a free service is your data" applies here too.

Having three objectives has a practical consequence: a venue recovering its costs through longer stays designs its Wi-Fi differently from one using it as a draw or one collecting data. A business that wants tables to turn over sets a time limit on connections; one that wants you to settle in does not. When data is the goal, the sign-up screen gets longer. Connect once and look at what you were asked for, and you can usually tell which route that venue chose.

As explained in The Hidden Cost of "Free", nothing is truly free. Free Wi-Fi is no exception - but the form the payment takes differs by venue, and you can observe the difference from the customer's side.

Connect to free Wi-Fi and a browser window usually opens by itself with a terms-of-use screen. That page is not an accident: until you have been authenticated, the network funnels all your traffic to it. Before you press accept you are connected to the network but cannot reach the internet.

For the venue, that screen does real work. It captures your agreement to the terms, records the device that connected, and applies a time limit if one exists. The minimum administration needed for equipment left open to the public is concentrated into that single page.

What matters from the user's side is that this is also the easiest place to imitate. The page you see belongs to the venue, not to anyone your browser vouches for. So when a connection screen asks for personal information or a password, it is worth checking that it matches the venue's official instructions.

The way devices latch on has a quirk too. A phone remembers every network it has joined and reconnects silently the next time it sees the name. Convenient - but it is drawn just as readily to any other device broadcasting the same name. That behaviour is what connects the next section's risks to the third rule further down.

When free Wi-Fi crawls, it is tempting to blame cheap equipment. The reason is usually simpler than that: one line is being shared by everyone in the room.

The capacity coming into the venue does not grow when more people connect. Split between ten people and split between thirty, each share simply gets smaller. That is why speeds drop at peak hours and recover once the room empties. If a handful of people are streaming video, they occupy the thick part of the pipe and everyone else gets what is left.

The second factor is on the radio side. An access point can only hold so many conversations at once, and when a lot of devices are attached, they end up waiting their turn and responses lag. Frequencies can also overlap with a microwave or the shop next door. Sudden slowdowns by a window or against a wall are less often a matter of no signal than of a disturbed one.

The practical conclusion follows: do not hand speed-dependent work to free Wi-Fi. Moving a large file or holding a video call you cannot afford to drop is sometimes faster over mobile data, which is not affected by the crowd around you. Reading an article, checking a map, or sending a single photo works perfectly well on a slow connection.

Convenience comes at a price. Here are three security risks everyone should know about before connecting to free Wi-Fi.

Risk 1: Eavesdropping on your traffic. On an unencrypted free Wi-Fi network, other people connected to the same network can potentially intercept your data. Passwords, messages, and browsing activity are all at risk of exposure.

Risk 2: Fake Wi-Fi hotspots. Attackers set up rogue access points with names like "Free_WiFi" and intercept everything sent by anyone who connects. These fakes are nearly indistinguishable from the real thing, so always verify the correct SSID (network name) through the venue's official signage.

Risk 3: Malware infection. Poorly secured free Wi-Fi networks can serve as a channel for delivering malware to your phone or laptop.

Line the three up and the common thread appears: every one of them starts with someone else on the same network. On your home Wi-Fi, the only devices attached belong to your household. A venue's free Wi-Fi is a room anyone present can walk into, and you have no idea what the person at the next table is doing. The danger is not Wi-Fi as a technology but the fact that you cannot choose who else is in the room.

Seen that way, the order of priorities settles itself. In a place where you do not know who is watching, do not send anything you would mind being seen. That is the one measure that works against eavesdropping and rogue hotspots at the same time, and the three rules below are nothing more than that sentence made concrete.

Rule 1: Avoid entering passwords or personal information. While connected to free Wi-Fi, do not log into banking sites, shopping accounts, or enter credit card details. Switch to mobile data (4G/5G) before performing any of these actions. Mobile data runs over the connection you pay for, which leaves no room for anyone else in the venue to get in.

Rule 2: Stick to HTTPS sites only. Sites whose URLs begin with "https://" encrypt the data in transit. If you see a padlock icon in your browser's address bar, the connection is protected. Sites starting with "http://" (no "s") are unencrypted and especially dangerous on free Wi-Fi. Worth knowing, though: only the contents are hidden - the record of which sites you visited is not.

Rule 3: Disconnect when you are done. After using free Wi-Fi, turn off automatic Wi-Fi connections or delete the network from your device. This prevents your device from reconnecting automatically the next time you pass by. As noted above, a device rejoins remembered names silently, so deleting them also stops it from attaching itself to anything impersonating that name.

The order of the three matters as well. Rule 1 is a decision you make just before typing, and rule 2 is something you can check the moment a page opens. Only rule 3 happens after you have left, which makes it the easy one to forget. On a day spent moving between several venues, setting aside a moment to clear them all at once is the reliable approach.

Many people use free Wi-Fi to save mobile data, but it is important to weigh that convenience against the security trade-offs before connecting.

Knowing the rules is no help if you have to deliberate every time. The quickest way to make the decision cheap is to sort tasks by whether you would mind them being seen.

Fine on free Wi-Fi. Reading news and articles, looking up a destination on a map, watching video, downloading app updates. None of these send information you would mind a stranger knowing, and they fit the original point of saving mobile data.

Better avoided. Logging in with an ID and password of any kind, entering an address or phone number, moving work files around. Switching back to mobile data costs you one tap, so when in doubt, lean towards switching.

Best not done at all. Banking operations and typing in a credit card number. Recovering from either takes real time and effort, which does not balance against the value of the mobile data you save.

One more habit worth forming is to look at the network name before connecting. Check that the SSID matches the venue's official notice - on a receipt or a card on the table - and you will avoid most rogue access points. Where several similar names appear side by side, asking a member of staff is the shortest route.

Free Wi-Fi is equipment whose provider has a clear objective. The cost is recovered through longer stays, through footfall, or through data. Knowing which lets you stop being suspicious of the word "free" and start using it with an understanding of why it is free. That single habit of choosing your moment is enough to take the convenience without the rest.