Is it safe to use SSH over public Wi-Fi?

Yes, SSH is designed for untrusted networks: the connection is encrypted and the server proves its identity with its host key. The weak point is accepting a wrong host key. The first time you connect, and every time SSH warns that a host key has changed, check the fingerprint against one you obtained through another channel before you continue; on a café network, a changed key is a reason to stop. Use key-based logins rather than passwords, protect your private key with a passphrase, and keep the SSH client updated. Better still, connect through the company VPN or your phone's hotspot, so that the café network sees only one encrypted tunnel. NetSenX does not see public Wi-Fi networks. It sees the SSH session when it reaches a monitored server, and flags repeated login attempts and unusual sessions involving that server, on every plan.

← All 40 questions on Remote work and exposed servicesAll topics