By the MailGenerator Team · Updated November 8, 2026
You connect to the Wi-Fi at an airport, café, mall or hotel, and before anything loads a page pops up asking for your email address, sometimes your name and phone number too. It's called a captive portal, and it's one of the most common places people hand out their real email without thinking. Here's what's going on and how to handle it.
Why do Wi-Fi networks ask for your email?
- Marketing. This is the main reason. The venue, or the company that runs its Wi-Fi, adds you to a mailing list. Some portals pre-tick a box agreeing to promotions from "partners".
- Analytics. Your email, device and visit times help the venue understand how often you come back and how long you stay.
- Accountability. Some operators want a record of who used the network.
The fine print usually allows the data to be shared with the Wi-Fi provider and sometimes with third parties. Your address may end up on lists you never knowingly joined.
Should you give your real email?
For a one-time visit, there's rarely a good reason to. Options:
- Use a temporary email. If the portal sends a confirmation link, a temporary inbox receives it, and any marketing that follows goes to an address that expires. Tip: some portals need you to confirm within a few minutes using your phone's mobile data, so open the temp inbox before connecting.
- Use an email alias for places you visit often, such as your regular coffee shop or a hotel chain's loyalty Wi-Fi. If the spam starts, switch the alias off. See how to set up an email alias.
- Look for a "skip" or guest option. Some portals only need you to accept terms, and the email field is optional.
- Untick marketing boxes if you do use your real address.
The bigger risk: the network itself
The email you type is a privacy issue. The network is a security issue. Public Wi-Fi is shared with strangers, and you can't verify who runs it. Keep these habits:
Check the network name
Attackers sometimes set up a hotspot with a convincing name, such as "Airport_Free_WiFi" next to the real "YYZ Free Wi-Fi". Ask staff or check signage for the exact name.
Be suspicious of portals asking for too much
A Wi-Fi sign-in page should never ask for your email password, your Google or Microsoft sign-in, or card details for a "free" network. A portal asking you to "sign in with your email account" on a page that isn't the real Google or Microsoft site is a phishing trap.
Stick to HTTPS
Almost all major websites now use HTTPS, which encrypts what you send even on an open network. Your browser shows a padlock or warns you when a site isn't secure. Don't ignore certificate warnings on public Wi-Fi.
Consider a VPN
A reputable VPN encrypts all your traffic between your device and the VPN provider, hiding it from the Wi-Fi operator and anyone else on the network. It's most useful when you can't avoid sensitive tasks on public Wi-Fi.
Save sensitive tasks for later
Banking, tax and work systems are better done on mobile data or a trusted network. If you must, use the official app rather than a browser.
Forget the network afterwards
Your device may reconnect automatically next time, or to a fake network with the same name. Remove public networks from your saved list once you leave.
Frequently asked questions
Is it legal to use a temporary email for Wi-Fi sign-up?
Generally yes. You're protecting your own contact details, not hiding wrongdoing. Follow the venue's acceptable-use rules for the network itself.
The portal didn't send any email. Why did it need one?
Many portals don't verify the address at all; they just collect it for marketing. That's exactly when a throwaway address makes most sense.
Does incognito mode protect me on public Wi-Fi?
No. Incognito only stops your browser from saving history on your device. The network can still see which sites you connect to.
