Use a VPN. It's the only single step that hides every site you visit from the person running the network. The other steps below reduce what leaks if you can't or don't want to use one.
Steps, most effective first
- Turn on a VPN before you browse. A VPN such as NordVPN encrypts all traffic between your device and its server, so the Wi-Fi owner sees one connection to a VPN address and nothing about the sites behind it. Enable the kill switch so nothing slips out if the tunnel drops.
- Switch on encrypted DNS. Without a VPN, your DNS lookups are the easiest way for a router to log sites. In Chrome, go to Settings, Privacy and security, and turn on Use secure DNS. On Android, set Private DNS. This hides lookups but not the site name sent during the HTTPS handshake, so it's partial cover.
- Use iCloud Private Relay on iPhone or Mac. If you pay for iCloud+, Private Relay encrypts Safari's DNS and routes browsing through two relays, so the network can't see which websites you open in Safari. Other apps aren't covered.
- Keep your private Wi-Fi address on. Apple's private Wi-Fi address and Android's randomized MAC stop the owner from linking your device across visits. Give your phone a generic name too.
- Stick to HTTPS sites. They keep page content and search terms private even without the steps above.
What this won't do
None of this hides activity from the sites themselves, from an employer who manages your device, or from anyone who picks up your phone while it's open. Private browsing handles that last one. On a workplace or school network, hiding traffic may also break their usage rules.