Is the Free Wi-Fi on Your Flight Safe?

SYDNEY, AU, 22 September 2026 — Free Wi-Fi is now standard across much of the Australian domestic fleet, and it sits in an awkward spot. It is not the network at home, and it is not quite the café hotspot either. It is an open network shared by everyone in the cabin. In 2024 the Australian Federal Police charged a man over fake free Wi-Fi networks set up at three airports and on domestic flights.

Three questions follow. What can the other people on board work out about what you are doing? Could the fake-network case happen on your flight? And is any of it worth paying for on a two-hour trip?

The cost question has the shortest answer. A two-hour domestic flight is no reason to take on a monthly subscription, and a free VPN already covers the part of the connection an open cabin network leaves exposed. The first two questions take longer, and the honest answers sit between the two versions travellers usually hear.

What the Australian Federal Police Found on a Domestic Flight

This is not hypothetical: it happened on Australian domestic flights, and an airline found it first.

In April 2024 an airline reported a suspicious Wi-Fi network on a domestic flight. The Australian Federal Police then charged a man with nine cybercrime offences over fake free Wi-Fi networks set up at Perth, Melbourne and Adelaide airports and on domestic flights. Investigators recovered dozens of other people's credentials and copies of the sign-in pages used to collect them.

The fake pages shared one feature: each asked for an email or social media login before it would let anyone online. The AFP's first piece of advice addresses exactly that — to join a free Wi-Fi network, "you shouldn't have to enter any personal details". That line is the most useful one here, and it comes from the police rather than from us.

The case is at the charge stage, and its point is narrow: a hotspot carrying a name close to the official one can turn up inside a cabin.

Why Cabin Wi-Fi Is Not the Network You Have at Home

Cabin Wi-Fi differs from your home network in two structural ways: it has no password, and it reaches the internet by satellite.

On equipped aircraft the service is free in every cabin, and joining it takes no pre-shared key. Your home network has a door, and behind it are the people you live with. The cabin network has no door, and behind it is the whole aircraft — what free open access produces, not an oversight by the airline.

Features

Who Set It Up

Who Else Is on It

How It Reaches the Internet

Your Home Network

You did, and you know the password

The people who live with you

A fixed line you pay for

An Open Café Hotspot

A business, for anyone walking past

Anyone in range, with no password

The same kind of fixed line

An Aircraft Cabin Network

The airline, with no password to enter

Everyone in the cabin

A satellite link shared by the whole aircraft

Australian domestic cabin Wi-Fi is carried by satellite, with capacity shared across the whole aircraft. That last column decides the trade-off later on: a second layer of encryption costs something on a link that is already slow.

The third row is the only one travellers misjudge. It comes from an airline you trust, so it feels like the first row, while the way you join it puts it in the same class as the second.

Is Qantas Wi-Fi Safe? And What About Virgin Australia?

Both sit in the same place, and the answer comes from an airline rather than from us.

Cathay Pacific's FAQ answers it directly: the connection onboard is "as secure as any other public hotspot". The Qantas and Virgin Australia Wi-Fi pages describe how to connect and which aircraft are equipped, not how secure the connection is. That phrase is accurate, and its weight sits in the second half — a public hotspot has never separated one user from another.

The two carriers differ commercially, not technically. Qantas offers the domestic service free in every cabin on equipped aircraft; Virgin Australia includes it for some fare types and tiers and sells passes to everyone else. Paid or free, it remains one open network shared by the whole cabin.

So "is plane Wi-Fi safe" is the wrong question. The useful one is what other people on that network can work out.

What Other Passengers Can Work Out, and What They Cannot

Both claims travellers repeat are wrong: one says encrypted websites have covered everything, the other says anyone on the same network can see everything.

What Someone on the Same Cabin Network Can Work Out

What They Cannot Read

That your device joined, and when

The contents of an email or a message

Which sites your device connected to, by domain name

Which page on that site you opened

How long each connection lasted

Your passwords

How much data moved

What you typed into a form

Nearly every Australian site uses HTTPS, so what you send cannot be read in transit. The network still has to know where to deliver each request, so the domain layer stays visible. That line does not move when you switch devices or browsers.

Working out anything in the left column takes deliberate effort from someone on the same network with the right tools open — not an accident, and not exotic. The point is not that someone is watching you. It is that this network does not provide the separation it appears to provide.

Four Things Worth Doing Before You Tap Connect

Four things are worth five minutes on board. Three of them install nothing.

1. Check the network name against the card in the seat pocket or the cabin announcement. Names sit close together, and the fake networks in the AFP case were joined exactly this way.

2. Leave any page that wants an email or social media login before it lets you online. This is the AFP's first piece of advice.

3. Turn off automatic joining of open networks on your phone and tablet, so every connection is one you chose rather than one the device chose.

4. Leave anything that needs a password until you land. A bank login has no reason to happen on a network you joined ten minutes ago.

Where a VPN Helps, and What It Slows Down

A VPN handles the left column of that table. The right column falls outside it, and the cost is a slower satellite link.

A VPN builds an encrypted tunnel between your device and a VPN server, so the cabin network and everyone on it see one encrypted connection instead of a list of domain names. On a network whose settings you cannot check, where DNS queries travel is not transparent; built-in DNS leak protection keeps those lookups off the path this network would otherwise choose.

The satellite link already carries high latency and shares its capacity across the cabin. Another layer of encryption makes it slower still. The trade is specific: switch it on for the things that matter, leave it off for a news feed.

X-VPN is one service to check against that. It runs a no-logs policy that was independently audited in 2026, uses AES-256-GCM, and keeps its servers in memory only. The free tier asks for no sign-up and sets no data cap, which suits a single flight rather than a monthly plan. On iPhone and Android the free version lets you pick a location by hand, and Sydney and Melbourne are both on the list; the free desktop version connects automatically instead. Install it at home, on a network you know, not on the first cabin network you meet.

A VPN encrypts the connection between your device and the internet. It does not tell you whether the network you joined belongs to the airline, it does not stop that network seeing a device is online and how much data moved, and it shifts the domain-level view to the company running the VPN — which is why an audited no-logs policy is worth checking before you install one.

If You Are Working on a Laptop Rather Than a Phone

Most people who open a laptop on a flight work inside the browser, and that decides what to install.

A full app encrypts everything the laptop sends. A browser extension covers the browser, which is where a flight's work usually happens — the mail tab, the docs tab, the ticket system. X-VPN's free VPN for Chrome needs no sign-up and sets no data cap, and takes less setting up on a browsing machine.

The boundary is stated on X-VPN's own page: a Chrome extension "only protects your browser activity". A desktop mail client, a sync client or a chat app sits outside it. If those are open during the flight, the full app is the one to install.

"A VPN encrypts the leg between your device and our servers, and it will make a satellite link feel slower," said [Name]. "That trade is worth making for a sign-in, not for a news feed."

Questions Travellers Ask

Can Other Passengers See What I Am Browsing? They can work out which domains your device connected to, not what you did on those sites. Even that takes someone deliberately watching the same network.

Is Plane Wi-Fi Safer Than the Free Wi-Fi at a Café? Same class of network. Both are open, and neither separates one user from another. The cabin adds a satellite link and capacity shared by everyone on board.

Why Is Inflight Wi-Fi So Slow? The connection reaches the internet by satellite, and the whole aircraft shares that capacity. Running a VPN over it makes it slower again.

Should I Just Use My Own Mobile Data Instead? At cruising altitude there is no ground signal, so that choice does not exist in the air. Leave password entry until you land.

Do I Need a VPN on a Plane? It depends what you do up there. Messages, maps and a news feed do not call for one. Signing in to accounts or opening work files makes it worth having.

Cabin Wi-Fi is one open network shared by the whole aircraft, and the airlines describe it that way. What the people around you can work out is the domain layer, not the contents. Five minutes of checking on board does more than anything installed once you are in the air.