Filipinos are being urged to be more careful when using public WiFi after cybersecurity firm Kaspersky warned that unsecured networks remain a common way for cybercriminals to steal personal information, passwords, and other sensitive data.

The warning comes as the Department of Information and Communications Technology (DICT) also reminded the public to avoid risky online activities on public WiFi, saying users "may become soft targets for hackers."

"Free WiFi feels convenient, but it often comes at a hidden cost. Cybercriminals know that public networks require no authentication, making it easy for them to intercept data without users ever realizing it," Choon Hong Chee, Head of Consumer Channel for APAC at Kaspersky, said on Friday.

"The DICT's warning echoes exactly what we have been seeing in our own threat research. The moment you connect to an unsecured network, you may be exposing your passwords, banking details, and personal messages to anyone monitoring that connection," Chee added.

Kaspersky advised users not to access banking apps or carry out other sensitive transactions over public WiFi and to verify that a network is legitimate before connecting.

It also recommended using a trusted virtual private network (VPN), enabling device firewalls, keeping operating systems and applications updated, and using strong, unique passwords with two-factor authentication.

The cybersecurity firm also warned against storing passwords or recovery phrases in photo galleries or note-taking apps, saying dedicated password managers are a safer option.

It further advised users to turn off file-sharing features such as AirDrop, avoid public USB charging stations, disable Bluetooth and NFC in crowded places, avoid scanning untrusted QR codes, and connect to public WiFi only when necessary.

For travelers, Kaspersky recommends using an eSIM with mobile data instead of public WiFi to reduce exposure to cyber threats while abroad.