In-Flight Wi-Fi: Can You Trust the Network Name?

You board a flight, switch your phone to Airplane Mode, turn Wi-Fi back on, and suddenly several networks appear.

Perhaps you see names resembling:

Airline_WiFi
Airline_Free_WiFi
Free_Inflight_WiFi
Onboard_WiFi

Which one would you choose?

It may be tempting to select the network that looks most official. But there is one important thing to remember:

A Wi-Fi network name is not proof that the network actually belongs to the airline.

As in-flight internet becomes more common, travelers increasingly use phones, tablets, and laptops during a flight. Airlines including Korean Air and Asiana publish official connection instructions for supported aircraft and services.

That makes knowing how to identify the correct network increasingly useful.

This does not mean that in-flight Wi-Fi is inherently unsafe. The goal is simply to understand how fake networks can work and how to avoid connecting to the wrong one.

What Is Fake Wi-Fi?

One well-known wireless attack is called an Evil Twin.

Imagine that someone opens a fake café next to a real one and copies the sign, logo, and menu closely enough that customers mistake it for the original.

An Evil Twin applies a similar idea to Wi-Fi.

An attacker creates a wireless access point with the same or a very similar network name, known technically as the SSID.

CISA describes an Evil Twin as a system designed to impersonate a legitimate public access point and trick users into connecting to the bogus network. NIST also recognizes rogue access points as a Wi-Fi threat that can place an attacker between a user's device and the internet.

Evil Twin vs. Rogue Access Point

The terms are related but not completely interchangeable.

A Rogue Access Point, or Rogue AP, broadly refers to an unauthorized or untrusted wireless access point.

An Evil Twin is a more specific type of deception in which a malicious access point attempts to resemble a legitimate network closely enough to fool users.

Why the Wi-Fi Name Alone Is Not Enough

The SSID is simply the name a wireless network announces to nearby devices.

It is not comparable to an official identity certificate.

Someone could create names such as:

Airline_WiFi

Airline_Free_WiFi

Airline_WiFi_VIP

without being associated with an airline.

That is why travelers should check the airline's actual instructions rather than guessing.

For example, Korean Air's current official instructions tell passengers on supported flights to enable Airplane Mode, turn Wi-Fi back on, select its specified in-flight network, and then access the airline's Wi-Fi portal.

Asiana also provides service-specific instructions. Its Starlink rollout announced in September 2026 uses a connection procedure that differs from some existing A350 Wi-Fi instructions. This is a good reminder that network names and procedures can change depending on aircraft and service.

Always use the current instructions for your particular flight.

Has Fake Wi-Fi Actually Been Found on Flights?

There is at least one well-documented law-enforcement case showing that the risk is not purely theoretical.

In 2024, Australian authorities charged a man accused of creating Evil Twin Wi-Fi networks at several locations, including airports and domestic flights.

According to the Australian Federal Police investigation, the case began after airline employees reported a suspicious wireless network detected during a domestic flight.

Police alleged that fake networks directed users to fraudulent pages requesting email or social-media login credentials. The information entered was allegedly stored on the suspect's devices. These were law-enforcement allegations, so they should not be confused with a final judicial finding.

The case does not prove that fake in-flight Wi-Fi is common.

It does show, however, that portable hardware can be used to create deceptive wireless networks and that such activity has been investigated in aviation environments.

Does Connecting to Fake Wi-Fi Instantly Expose Everything on Your Phone?

No.

Simply connecting to a suspicious Wi-Fi network does not automatically mean that every photo, password, banking credential, and file on your phone has been stolen.

Risk depends on what happens next.

A typical phishing scenario might look like this:

You connect to a network that looks legitimate.
You open your browser.
A convincing login portal appears.
It asks you to sign in with an email or social-media account.
You enter your username and password.
If the page belongs to an attacker, those credentials may now be compromised.

Other possible risks include exposure of unencrypted HTTP traffic, manipulated DNS responses, phishing redirects, or attempts to persuade users to install malicious files or fake software updates.

The important point is that these are possible attack paths, not proof that every unfamiliar Wi-Fi network is performing them.

What About HTTPS?

HTTPS changes the picture considerably.

When you connect to a legitimate HTTPS website, traffic between your device and that website is encrypted.

The FTC notes that widespread adoption of web encryption has made public Wi-Fi considerably safer than it was in the early days of widespread hotspot use. Users can look for HTTPS and the browser's security indicators to help confirm that a connection is encrypted.

This means someone operating the local Wi-Fi generally cannot simply read the contents of a properly protected HTTPS session as though it were plain text.

There is an important limitation, however.

HTTPS protects the connection to a website. It does not guarantee that the website itself is honest.

A phishing website can also use HTTPS.

If you voluntarily enter your password into an attacker's encrypted phishing site, HTTPS securely delivers that password to the attacker operating the site.

The FTC specifically warns that scammers can create encrypted fake websites.

The Simple Rule

HTTPS protects the route to a website.

It does not make the decision for you about whether that website is legitimate.

Airport Wi-Fi vs. In-Flight Wi-Fi

Some of the security principles overlap, but the environments are different.

Category	Airport Public Wi-Fi	Official In-Flight Wi-Fi
Location	Terminals, gates and lounges	Inside the aircraft
Typical users	Large and varied public population	Mostly passengers on the flight
How to verify	Airport signs and official websites	Airline instructions, cabin displays or crew
Main concern	Look-alike networks and fake portals	Confirming the airline's correct SSID and procedure
Sensitive activity	Prefer a trusted connection when possible	Use similar caution for sensitive transactions

CISA recommends avoiding sensitive activities such as banking or transmitting personal information over open public Wi-Fi networks when possible.

How to Verify the Real In-Flight Wi-Fi

Do not choose a network simply because its name looks convincing.

Instead:

Check the seatback or cabin information screen.
Review the airline's official Wi-Fi instructions.
Check the airline's official mobile app where applicable.
Ask a flight attendant if you are unsure.
Compare the Wi-Fi portal with the airline's stated connection process.
If several nearly identical networks appear, do not guess.

Airline procedures vary by aircraft, provider, route and service generation.

An old travel blog or screenshot may no longer reflect the network used on your current flight.

Wi-Fi Warning Signs Worth Double-Checking

None of these signs automatically proves that a network is malicious.

They simply mean you should verify before proceeding.

□ A Wi-Fi name not mentioned in the airline's instructions
□ A network adding words such as FREE, VIP or FAST to an official-looking name
□ A portal immediately asking for your email or social-media password
□ Requests for personal information unrelated to Wi-Fi access
□ Unexpected demands for payment-card details
□ Requests to download an app, program or software update
□ Browser certificate or security warnings
□ A web address that closely resembles an official domain but contains spelling changes

What If You Already Connected to Suspicious Wi-Fi?

Do not assume the worst.

Instead, respond according to what you actually did while connected.

Disconnect from the network.
Forget the saved network and disable automatic reconnection.
If you entered a password, change it through the service's official app or website.
Change the password anywhere else you reused it.
Enable multi-factor authentication where available.
If you entered financial information, monitor the relevant accounts and transaction alerts.
If you installed an unfamiliar app or file, remove it and perform an appropriate device security check.

The FTC recommends strong, unique passwords, multi-factor authentication, updated operating systems, and current browsers as part of good cybersecurity hygiene.

In-Flight Wi-Fi Safety Checklist

Save this list before your next trip:

Verify the airline's official SSID.
Disable automatic Wi-Fi connections.
Keep your operating system and browser updated.
Ask cabin crew when multiple similar networks appear.
Check both HTTPS and the actual website domain.
Never enter sensitive information into an unexpected login page.
Be suspicious of unexpected software or update downloads.
Use two-factor authentication on important accounts.
Avoid sensitive financial transactions when a more trusted connection is available.
Remove unnecessary saved public Wi-Fi networks afterward.

The FTC also recommends preventing devices from automatically connecting to public Wi-Fi networks.

Does a VPN Make You Completely Safe?

A VPN can be useful, but it is not a universal solution.

A properly implemented VPN can encrypt traffic between your device and the VPN server, adding another layer of protection when using an untrusted network. FTC guidance notes that VPNs can help protect information transmitted through public Wi-Fi.

However, a VPN cannot stop you from:

typing your password into a phishing website,
installing malware,
running a fake software update,
or voluntarily giving personal information to a scammer.

Using a VPN also means placing trust in the VPN provider, so installing a random VPN solely because it promises "free security" is not necessarily safer.

A better approach combines several habits:

Official Wi-Fi verification + HTTPS + phishing awareness + multi-factor authentication.

Frequently Asked Questions

Q. Can I use Wi-Fi while my phone is in Airplane Mode?

On supported flights, yes. The normal procedure is to enable Airplane Mode and then turn Wi-Fi back on separately. Follow the instructions provided by your airline and aircraft. Korean Air and Asiana currently describe this type of connection process for supported services.

Q. If the network contains the airline's name, is it legitimate?

Not necessarily. An SSID can be copied or imitated. Confirm it through the airline's official instructions or cabin crew.

Q. Is it safe to use messaging or email on in-flight Wi-Fi?

When you are connected to the legitimate airline network and the service or app uses modern encryption, public Wi-Fi does not automatically expose all of your communications. Important accounts should still use multi-factor authentication.

Q. Should I use online banking on in-flight Wi-Fi?

It is not accurate to say that banking over every in-flight network is automatically unsafe. However, for highly sensitive transactions, using a more trusted connection when available reduces unnecessary risk. CISA advises avoiding banking and other sensitive personal activities over open public Wi-Fi.

Q. Does a VPN make an Evil Twin harmless?

No. It can protect network traffic, but it cannot prevent you from entering credentials into a phishing site or installing malicious software.

Q. I accidentally connected to suspicious Wi-Fi for a few minutes. Has all my data been stolen?

Not necessarily. What matters is what happened while you were connected: whether you entered credentials, ignored browser warnings, installed files, or used insecure services.

The Most Important Habit: Verify Before You Connect

In-flight Wi-Fi itself should not be treated as inherently dangerous.

Modern websites and apps widely use encryption, making today's public-network environment different from the early days of Wi-Fi hotspots.

At the same time, there is no reason to blindly trust a network simply because its name looks official.

The most practical rule is simple:

Before connecting, verify that the network matches the airline's official instructions.

That small habit can greatly reduce the chance of falling for an Evil Twin or fraudulent Wi-Fi login portal.