Free Wi-Fi exists in far more places than you might think — and much of it is paid for with public money, precisely for those who need it. The problem is that nobody puts up signs advertising it, and the network that appears in your phone's list isn't always the network its name suggests.
This guide solves both problems: where to look for a genuine open connection and how to avoid giving your password to a cloned network along the way.
The map that almost nobody knows about.
The largest free public internet network in Brazil is municipal, and the example of São Paulo gives an idea of what exists. The WiFi Livre SP program reached... 7,842 active points, a number released by the city hall in July 2025, distributed in squares, libraries, cultural centers, health units, bus shelters and educational units.
Pay attention to the type of place on the list, because the pattern repeats itself in large and medium-sized cities throughout the country:
- Municipal squares and parks — the most common spot, and usually without any registration required.
- Bus shelter — the facility that has grown the most in recent years, and the one that the fewest people know exists.
- Library and cultural center — They tend to have the most stable signal in the neighborhood because the network was designed for long-term use.
- Health unit — a network designed for those waiting for service.
Outside the municipality, there is also the federal digital inclusion program, which brings satellite broadband to places where no operator has yet arrived, prioritizing vulnerable communities. This usually explains the existence of a free hotspot in the central square of a small town.
Regarding speed, it's good to adjust your expectations before you start looking: in São Paulo, the minimum contracted speed per user is 512 kbps. This is perfectly adequate for messaging, maps, email, banking, and browsing. High-definition video and large downloads will suffer because the bandwidth is divided among everyone connected.
Transportation: the new thing for 2026
The São Paulo Metro started in July 3, 2026 Testing of a free Wi-Fi service at the stations, operated by Eletromidia with sponsorship from PicPay. The initial phase covers three stations. Line 3 - RedBresser-Mooca, Pedro II and Belém.
The way it works gives a good idea of what to expect from this type of network: the passenger selects the test network, fills out a registration form with email, phone number, and CPF (Brazilian tax identification number), accepts the terms, and browses. After the first access, there is no need to log in again when moving between stations on the same day. The advertised speed is up to 2 Mbps per user, and coverage extends from the entrances to the platforms.
According to the published schedule, the technology should be extended to all public lines by the end of 2026, including tests inside the trains. It's worth checking the list of stations served before relying on the service — it changes during testing.
Commerce and public buildings: the silent rule
Shopping malls, cafes, fast-food chains, bookstores, airports, and bus stations have offered free Wi-Fi for years. It's the oldest agreement on public internet: they pay for the bandwidth hoping you'll stay longer and buy something.
In almost all cases, access requires a quick registration with email or phone number. If you don't want to receive promotions for the rest of your life, use a secondary email address—it's better than giving up on connecting.
Public buildings follow a different logic: municipal libraries, CRAS (Social Assistance Reference Centers), service centers, and health units usually allow people to use the network if they are there, generally without being registered. If there's no signal on the street, this is the kind of place where going in and asking works.
How to connect in less than a minute
The script is always the same, and step 3 is where most people get stuck:
- Open the list of networks and select the open network (the one without a padlock) with the official name of the place.
- Wait for the login screen to appear automatically. It will ask you to accept the terms or fill out a registration form.
- If the screen does not open, The phone stays connected but no websites load. Type an address into your browser. http://, Without the "s" — websites using https are not redirected, which is why it appears as if the network is broken.
- Still not opening? Turn your Wi-Fi off and on again, or use "forget network" and reconnect.
- Still not opening? Deactivate VPN It is Private DNS. Both of these factors block the authentication screen and are the least obvious cause of the problem.
The twin scam: when the right network isn't the right network.
Here's the real risk of public Wi-Fi, and it's not too technical for you to understand. The attack is called evil twin — evil twin — and the mechanism is simple: the criminal connects an access point with the same name From the legitimate local network, using a cell phone, a laptop, or a portable router. Whoever connects is taken to a login page that is a copy of the real one, and everything typed there is sent to them.
This is no textbook example. In Australia, a 44-year-old man was sentenced to... seven years and four months in prison for setting up fake networks using the names of legitimate airport networks in Perth, Melbourne, and Adelaide, as well as domestic flights. The fake page required social media login, and that's how he collected the credentials. The conviction was published in December 2025.
What makes the scam effective is that it doesn't require hacking into anything. The fake network is listed alongside the real ones, with identical or nearly identical names—and the phone, on its own, tends to choose the one with the strongest signal.
How to recognize a fake network
- Two networks with the same name, or nearly identical names. This is the clearest sign. Seeing "Shopping_WiFi" and "Shopping WiFi Free" side-by-side should raise suspicion.
- Please confirm the name on site. A reputable establishment will display the chain's name on the wall, menu, or bill. Asking at the counter will resolve the issue in five seconds.
- Be wary of registration forms that ask for too much. Public networks ask for email, phone number, and sometimes CPF (Brazilian tax identification number). If the screen asks for it... social media, email, or bank password, That's a scam — no legitimate network needs that.
- Open network with a generic name and signal that's too strong in an unlikely location. “"Free WiFi" in the middle of a square with no establishments nearby is a natural candidate.
- Turn off automatic connection. If your phone saves the network, it will automatically reconnect the next time — even to a fake network, if it uses the same name. Use "forget network" when you log out.
Dos and don'ts when online
Even on a legitimate network, traffic passes through an environment you don't control. Three rules cover almost all the risk:
- Banking and shopping, only with mobile data. It's the rule that makes no exceptions. It's worth spending two minutes of your data allowance instead of resolving this on the public Wi-Fi.
- Only enter your password on websites with a padlock icon. If the browser warns that the certificate is invalid, close it. This warning is exactly what appears when someone is in the way.
- Turn on two-step verification. in your main accounts. If a password is leaked, it alone cannot open the account.
If using a public internet connection is part of your routine, a VPN from a known provider solves a large part of the problem because it scrambles the traffic between your cell phone and the destination. And it's worth checking if the router you use at home is certified by Anatel — the agency recommends this precisely to reduce vulnerability in home networks.
Map apps: what they do and what they don't do.
There's a family of apps that maps open Wi-Fi hotspots and shows their locations. They work collaboratively: users themselves mark the networks they find. They're useful for discovering a hotspot you didn't know existed, and it's fair to say the information gets old—networks go offline, change names, start requiring passwords. If you want to understand how these maps are maintained, see [link to relevant documentation]. How do Wi-Fi map apps work?.
What does this category mean? no What this does is reveal someone else's network password. An app that promises this is problematic on two fronts: it's one of the most common vectors for malicious software in the app store, and accessing a third party's device without authorization is a crime of unauthorized access to a computer system, as stipulated in law. Article 154-A of the Penal Code. The topic is discussed in detail in Why can't any app "crack" a Wi-Fi password?.
Frequently Asked Questions
Do I need to register to use public Wi-Fi?
It depends on the type. A vacant spot in a public square usually doesn't require anything. Retail, transportation, and airport locations almost always require a quick registration with an email or phone number.
Is it safe to enter my CPF (Brazilian tax identification number) in this registration?
On official networks, such as the subway system, registration is part of the service. The important thing is to confirm that you are on the correct network before entering any data — the problem is never the CPF (Brazilian taxpayer ID) itself, but the fake network that mimics the screen.
I connected the phone but no websites are opening. Is the phone defective?
Almost never. It's the login screen that didn't appear. Type an address at http:// in your browser and it usually opens instantly.
Can you watch videos on these networks?
Yes, even at low quality. The bandwidth is divided among all connected users, and the speed contracted per user is modest, so high-resolution videos and large downloads will buffer.
Is a VPN mandatory?
It's not mandatory, but it helps a lot with frequent use. It just doesn't replace the main rule: banking and shopping remain the domain of mobile data.
Summary
Free Wi-Fi is likely already available near you: a public square, bus shelter, library, health center, shop, and increasingly, public transportation. Searching in these places yields better results than searching blindly. And the check that avoids the only serious risk of public Wi-Fi takes five seconds—confirming the network name on-site before connecting, and never typing your personal account password on a network login screen.
