Most people leave their phone’s wireless radios switched on around the clock without a second thought, keeping Wi-Fi, Bluetooth, and tap-to-pay chips constantly awake and searching for connections. The National Security Agency has long argued that this everyday habit carries a quiet cost, and its guidance continues to recommend that phone owners turn those features off when they are out in public and not actively using them.
The advice can sound surprising coming from a spy agency better known for its intelligence work, but the reasoning is defensive rather than exotic. Each radio a phone keeps active is another way for the device to be found, tracked, or probed by someone nearby, and the agency’s position is that switching them off shrinks that exposure without much inconvenience.
What the NSA’s public-settings guidance actually says
The recommendations come from the agency’s guidance on using mobile devices in public, a document aimed at ordinary users rather than specialists. Its central themes are straightforward: disable wireless features that are not in use, be wary of connecting to unfamiliar networks, and treat public spaces as places where a phone is more exposed than at home. Reporting on the NSA’s mobile-security recommendations highlights the call to turn off Wi-Fi, Bluetooth, and near-field communication when they are not needed.
Notably, the guidance is not a response to a single new threat but a standing set of best practices that the agency has maintained and updated over time. As one of the bodies that issues cybersecurity guidance for both government and the public, the NSA frames these steps as basic hygiene, comparable to locking a door, rather than an emergency measure prompted by a specific attack.
Why Wi-Fi left on is a tracking risk
A phone with Wi-Fi enabled does not sit passively. It periodically broadcasts signals as it looks for networks it recognizes, and those signals can be picked up by equipment designed to log nearby devices. In a public place, that means a phone can be detected and its movements potentially followed even if its owner never connects to anything.
The bigger danger arrives when a device does connect. Open or unfamiliar public networks can be run or impersonated by bad actors, who can then observe traffic or attempt to push malicious content to connected phones. Turning Wi-Fi off in public removes both problems at once, preventing the automatic reconnections that can expose a device to a hostile network without the owner realizing it.
The short range that makes Bluetooth and NFC exploitable
Bluetooth and near-field communication operate over short distances, which is often assumed to make them safe. The reality is more nuanced. Bluetooth reaches far enough that a device left discoverable can be spotted, probed, or targeted by someone within range, and flaws in the technology have periodically allowed attackers to interfere with nearby phones. Leaving it on continuously keeps that small window open all day.
Near-field communication, the technology behind tap-to-pay and quick device pairing, works only at very close range, but that does not make it risk-free in a crowd. The agency’s logic is consistent across all three radios: a feature that is switched off cannot be exploited, so anything not actively in use is better disabled when surrounded by strangers. The inconvenience of toggling a setting is weighed against the benefit of closing an avenue of attack.
How the advice fits everyday phone use
Following the guidance does not require abandoning modern conveniences. The recommendation is to disable the radios when they are genuinely idle, not to give up wireless features altogether. A person can switch Wi-Fi back on to use a trusted network, turn on Bluetooth to connect headphones, or enable tap-to-pay at the register, then shut them off again afterward.
The underlying principle is minimizing what security professionals call the attack surface, the total set of ways a device can be reached. Every active radio adds to that surface, and reducing it lowers the odds that a phone becomes an easy target in a public place. For most users, the practical cost is a few extra taps, while the payoff is fewer opportunities for tracking or intrusion.
Airplane mode as the blunt-force option
For anyone who finds toggling three separate settings tedious, there is a simpler shortcut that accomplishes much of the same goal. Switching a phone into airplane mode disables its wireless radios in one step, cutting off cellular, Wi-Fi, and Bluetooth transmissions at once. On many devices the individual radios can then be re-enabled selectively, allowing a person to keep Bluetooth headphones running while the rest stay dark.
That approach is especially useful in crowded venues, on public transit, or anywhere a phone would otherwise spend hours broadcasting to every network and device within range. It is not a perfect match for the agency’s guidance, since some users will still want cellular service active, but it captures the core idea of shutting down idle radios quickly. The point is not rigid adherence to a checklist but the underlying habit of not leaving every connection open by default.
None of this suggests that phones are inherently unsafe or that people should be alarmed about everyday use. The NSA’s stance is simply that a handful of small habits meaningfully reduce risk, and that they cost little to adopt. Turning off unused wireless features in public sits alongside familiar advice like keeping software updated and using strong passcodes, part of a routine that quietly hardens a device against the most opportunistic threats.
This article was researched and written with the assistance of AI and reviewed by an editor prior to publication.
More from Morning Overview
