Stay Connected in Surabaya

Surabaya's connectivity holds up where it matters, which is across most of the city. Indonesia's second-largest metropolis pushed aggressive 4G rollout years ago. 5G is creeping into business districts and Tunjungan Plaza-area malls, though coverage maps oversell what's there. Signal stays reliable across central Surabaya, Gubeng, and the Pakuwon corridor. The airport, Juanda International (technically in Sidoarjo), is covered by all major carriers. Some areas are weaker. Signal can dip noticeably in older kampung neighborhoods and on the Suramadu Bridge crossing to Madura. Hotel WiFi quality also varies wildly between four-star chains and the cheaper guesthouses near the train stations. Registration paperwork for local SIMs is the frustrating part, since Indonesia takes the process seriously. The upside: data runs cheap once you're set up, and most cafes and malls offer functional free WiFi if you need a stopgap. Worth knowing.

Three carriers dominate Indonesia, and all three have decent Surabaya coverage. Telkomsel is the incumbent. It tends to win on rural reach, which matters if you're heading to Mount Bromo or out to Madura. In Surabaya proper, Telkomsel speeds are reliable but not the fastest, typically landing in the 20-40 Mbps range on 4G. Indosat Ooredoo Hutchison (the merged IM3) has invested heavily in urban East Java and often clocks faster speeds in central Surabaya, sometimes pushing past 60 Mbps where the towers are dense. XL Axiata is the third major option, generally competitive on price and adequate on coverage, though a step behind in the further suburbs. 5G exists in Surabaya. Mostly Telkomsel and Indosat. Coverage is patchy. It concentrates around malls, business hotels, and the city center. For most travelers, 4G is what you'll use day to day. It's good enough for video calls, maps, and ride-hailing apps like Gojek and Grab, which you'll lean on heavily here.

Public WiFi in Surabaya is convenient. Hotels, cafes, malls. Don't bank on it for sensitive work. Travelers are targeted on public networks, because they tend to log into banking apps, work email, and booking sites from unfamiliar connections. Unencrypted hotspots make that traffic readable to anyone with basic tools and bad intentions. The risk isn't dramatic. But it's real. A VPN encrypts your traffic between your device and the VPN server, so even if someone is snooping the cafe WiFi, they see scrambled data. NordVPN is one option that works reliably in Indonesia and has servers nearby in Singapore, which keeps speeds usable. The practical rule: use VPN whenever you're on hotel, airport, or cafe WiFi for anything involving login credentials or payment info. For casually browsing Surabaya restaurant reviews, you're probably fine without it.