To secure a phone hotspot, give it a long unique password, choose the strongest security mode the phone offers, use a neutral network name, turn it off when you finish, and keep the phone updated. Never switch the password off. Without one, the hotspot is an open network.
Definition
A hotspot, also called tethering, lets a phone share its mobile data connection with other devices over Wi-Fi. Android describes it as using the phone's mobile data to connect another phone, tablet or computer to the internet. The phone becomes a small router that you carry.
Steps
- Open the hotspot settings. On Android, swipe down from the top of the screen, then touch and hold the Hotspot tile. On other phones the option sits under network or connection settings.
- Set a long random password. A passphrase of several unrelated words works well and is easy to type once.
- Check the security mode. Android shows a Security setting. Pick the strongest option on the list and avoid None. If your phone and laptop both support WPA3, use it. The Wi-Fi Alliance says WPA3 gives WPA3-Personal users increased protection from password guessing attempts.
- Change the network name. Avoid your name, your employer or your phone model. A neutral name gives an observer less to work with.
- Limit the connected devices if the phone allows it. Android says a hotspot can share data with up to 10 other devices. Most developers need one.
- Join from the laptop once, save the network, and turn off automatic joining for any other networks you do not recognise.
- Turn the hotspot off when the job is done.
Mistakes people make
- Leaving the password at the factory value printed in a screenshot or shared in a group chat.
- Keeping the hotspot on all day so that a new device could attempt to join at any time.
- Using the same password as a home Wi-Fi network.
- Forgetting that the phone itself needs a screen lock and recent updates.
- Ignoring data limits, which can lead to throttling in the middle of a long pull request review.
What to check afterwards
Look at the connected devices list before you close the laptop. If an unfamiliar device appears, change the password and turn the hotspot off. Rotate the password after a trip where you shared it with colleagues.
For the choice between hotspot and shared Wi-Fi, see Phone hotspot or hotel Wi-Fi for work: which is safer?.
A note for teams
If your engineers travel often, say in the travel policy that hotspot passwords are personal, not shared in tickets or chat. The one page travel policy template has a line for it.
Safeguard works on the code side, with dependency scanning, SBOMs and policy gates, so a build started from a hotspot still passes the same checks. You can run a free scan on a repository.
Quick check
Does WPA3 on a hotspot hide my browsing from the sites I visit?
No. It protects the wireless link between devices. The sites you visit still see your connection, so HTTPS and good account hygiene still matter.
How often should I change the hotspot password?
Change it if you shared it, if an unknown device connected, or after a trip. Otherwise a long unique password does not need frequent changes.
Sources
- Share a mobile connection by hotspot or tethering on Android, Android Help
- Wi-Fi Alliance security overview
Last reviewed: 19 October 2026.