Is Inflight WiFi Safe? What Happens to Your Data at 35,000 Feet

The short answer is that inflight WiFi carries the same risks as any other public network, and a few that are specific to the aircraft environment. Starlink Aviation changes some of those risks compared to older inflight systems, but not all of them.

How the Connection Works

On a Starlink-equipped aircraft, a phased-array antenna mounted on the fuselage maintains a link to one or more low-earth orbit satellites at roughly 550 kilometres altitude. The satellite relays traffic to a Starlink ground station, which connects to the broader internet.

Every passenger on that aircraft shares the same satellite uplink. A full A350 with 300 passengers might have 200 devices connected simultaneously, all drawing from the same bandwidth pool. Starlink Aviation's uplink capacity is substantial by inflight standards, with SpaceX citing typical speeds of 40 to 220 Mbps per aircraft depending on load and satellite geometry. It is still a shared resource.

Shared bandwidth is not the same as a shared local network. Whether passengers can see each other's traffic depends on how the airline has configured its onboard network. Most carriers use network isolation to prevent device-to-device traffic, but the configuration varies by airline and is not always publicly documented.

What Starlink Changes Versus Older Systems

The previous generation of inflight connectivity, systems like Gogo ATG and ViaSat, used geostationary satellites at roughly 35,000 kilometres altitude or ground-based air-to-ground towers. Geostationary latency is typically 600 to 700 milliseconds, high enough to make real-time communication difficult and VPNs noticeably slow. The practical effect was that most passengers did not run sensitive connections over inflight WiFi because the experience was poor enough to discourage it.

Starlink Aviation latency at cruise altitude typically ranges between 40 and 80 milliseconds, fast enough to run video calls, cloud applications, and VPN tunnels without friction. The better performance means passengers are more likely to use inflight WiFi for work tasks they might previously have deferred to the ground, and those tasks carry more sensitive data than casual browsing.

Faster connectivity does not make the network more secure. It makes it more used.

The Practical Risks

Unencrypted traffic is the primary concern on any public network. HTTPS encrypts the connection between your browser and a web server, so casual browsing, email in a browser, and most modern apps carry reasonable baseline protection. Older applications or services that use HTTP rather than HTTPS send data in plaintext that anyone on the same network with the right tools can read.

Captive portal spoofing is less common on aircraft than in airports but worth understanding. A rogue access point with a name similar to the airline's official network can capture credentials entered during the login process. On most Starlink flights this risk is lower because several carriers, airBaltic, Qatar Airways, and Virgin Atlantic among them, offer connectivity without a login step. No login means no credentials to capture.

VPN performance on Starlink Aviation is usable in a way older inflight systems never were. If your work requires a VPN connection, you can maintain it through most of a Starlink-equipped flight. Low-earth orbit satellites hand off connections between ground stations periodically during a flight, which can produce brief latency spikes of a second or two, but these do not typically drop a VPN connection.

What to Be Cautious About

Avoid logging into financial services or entering payment details on any network you do not control, inflight included. This is not specific to aircraft; it applies to coffee shops, hotel WiFi, and conference centre networks equally.

If you work with sensitive data and your organisation mandates a VPN, use it. Starlink Aviation is fast enough that the VPN overhead will not make the connection unusable.

For most passengers on most flights, the realistic risk is low. The network is shared, HTTPS handles the majority of modern web traffic, and the airline's network isolation prevents direct device-to-device attacks. The threat model for a typical passenger checking email or joining a video call is not meaningfully different from using airport WiFi, which most people do without hesitation.

The difference with Starlink is that the connection is fast enough to make you forget you are on a public network. That is worth keeping in mind.