# Is it safe to use SSH over public Wi-Fi?

Yes, SSH is designed for untrusted networks: the connection is encrypted and the server proves its identity with its host key. The weak point is accepting a wrong host key. The first time you connect, and every time SSH warns that a host key has changed, check the fingerprint against one you obtained through another channel before you continue; on a café network, a changed key is a reason to stop. Use key-based logins rather than passwords, protect your private key with a passphrase, and keep the SSH client updated. Better still, connect through the company VPN or your phone's hotspot, so that the café network sees only one encrypted tunnel. NetSenX does not see public Wi-Fi networks. It sees the SSH session when it reaches a monitored server, and flags repeated login attempts and unusual sessions involving that server, on every plan.

FAQ: [Remote work and exposed services](https://netsenx.com/en/faq/remote) · https://netsenx.com/en/faq/is-ssh-over-public-wifi-safe

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/encrypted-traffic-analysis

## Related questions

- [How dangerous is port forwarding to a server in the office?](https://netsenx.com/en/faq/how-dangerous-is-port-forwarding-for-an-office-server)
- [How do I check what our company exposes to the internet?](https://netsenx.com/en/faq/how-to-check-what-our-company-exposes-to-the-internet)
- [Is automatic port opening (UPnP) on the office router a risk?](https://netsenx.com/en/faq/is-upnp-on-the-office-router-a-risk)
- [Who notices a remote login at 3 a.m. on a Sunday?](https://netsenx.com/en/faq/who-notices-a-remote-login-at-3-am-on-a-sunday)
- [Is remote desktop (RDP) exposed to the internet dangerous?](https://netsenx.com/en/faq/is-rdp-exposed-to-the-internet-dangerous)