Links, QR Codes, Browsers, and Public Networks
Navigate unfamiliar links and public connections without relying on myths about HTTPS or Wi-Fi.
In this lesson, you will learn to:
- Read web destinations and distinguish encryption from legitimacy.
- Use public networks without repeating outdated claims about universal Wi-Fi eavesdropping.
Links, QR Codes, Browsers, and Public Networks
Provides accurate, current guidance about domains, QR codes, encrypted connections, fake sites, browser warnings, and public Wi-Fi.
A QR code is a hidden link
QR codes are convenient because they move a destination from paper, a screen, or a message into your phone. That also hides the address until scanning. Stickers can cover real codes on parking meters, menus, and signs. A code in an unexpected parcel or account-warning message may lead to phishing or a malicious download.
Before continuing, preview the destination and read the actual domain. If the code concerns a payment or account, open the service independently instead. Do not install a special scanner unless needed; modern phone cameras usually provide safe preview. If you entered credentials after scanning, change the affected password using the real service, enable MFA, and inspect account activity. The code itself is not dangerous; the destination and requested action determine the risk.
HTTPS protects the journey, not the destination owner
The padlock or HTTPS means information is encrypted between your browser and the site. It helps prevent someone on the network from reading or changing that connection. A scammer can also obtain a certificate, so HTTPS does not prove that the site is legitimate. Read the domain and consider how you reached it.
Current FTC guidance notes that widespread website encryption makes ordinary public Wi-Fi generally safer than many older warnings suggest. The larger risks are often fake sites, deceptive network names, unpatched devices, weak accounts, and ignoring browser warnings. Keep software updated, use MFA, avoid sharing files with nearby devices, confirm the hotspot name when it matters, and prefer a known mobile connection for unusually sensitive activity. A VPN can provide benefits, but it does not make a fraudulent website honest.
Browser warnings are part of the safety system
Browsers may warn about deceptive sites, dangerous downloads, invalid certificates, or reused passwords. Do not train yourself to click through automatically. Read what the warning says and consider whether your task justifies continuing. A certificate warning on a familiar site can indicate misconfiguration, interception, or an impostor; return later or use another known route.
Keep the browser and extensions updated. Use separate profiles when helpful to separate work, study, and personal accounts, but remember that profiles are convenience boundaries rather than guaranteed isolation. Clear unwanted notification permissions; deceptive sites often abuse browser notifications to display fake infection alerts. A webpage cannot reliably diagnose every infection merely by loading. Close the tab and use trusted device-security tools.
Resources
- FTC: Public Wi-Fi Networks — Read the FTC’s updated 2026 explanation of encryption, fake sites, and practical public-network precautions.