If it’s open Wi-Fi, where you don’t need a password at all, then anyone close by, including hackers can eavesdrop everything you send and receive.
Sticking to HTTPS websites will help, because your browsing will be encrypted; and using a Virtual Private Network (VPN) is even better, because almost all of your traffic will be encrypted, not just your browsing.
Advent tip brought to you by Sophos