How to use public Wi-Fi more safely
Practical steps for safer browsing at cafés, hotels, airports and other shared Wi-Fi hotspots.
Public Wi-Fi is convenient, but you rarely know who operates it, whether the hotspot name is genuine or how carefully the network is maintained. A few simple checks — including connecting a VPN before opening sensitive services — reduce the avoidable risk.
Key points
- Confirm the network name with the venue rather than trusting the strongest signal.
- Connect your VPN before opening email, banking or work systems.
- Disable automatic Wi-Fi connection and forget the network when finished.
Check that the hotspot is genuine
A hotspot can be given almost any name. A nearby device may imitate the café or hotel network in the hope that visitors connect to it. Ask staff for the exact network name and any sign-in instructions. A familiar-looking name alone is not proof that the network is legitimate.
Be cautious if a captive portal asks for unnecessary personal or payment information. A venue may need you to accept terms, enter a room number or use a password, but it should not normally need your email password or banking details.
Connect protection before sensitive activity
Turn on your VPN as soon as the device joins the hotspot. The VPN encrypts traffic between your device and the VPN server, reducing what the hotspot operator or another person on the local network can observe.
Look for HTTPS as well. The browser's secure-connection indicator and the VPN protect different parts of the journey, and using both is better than relying on either one alone.
Reduce what your device exposes
Set the connection profile to Public on Windows, turn off file sharing and decline unexpected requests to discover nearby devices. Keep the operating system and browser updated, because updates often close security weaknesses that attackers already know about.
- Disable automatic connection to open networks
- Use mobile data for unusually sensitive tasks when practical
- Do not install certificates or apps demanded by an unfamiliar portal
- Use multi-factor authentication on important accounts
Disconnect cleanly
When you have finished, sign out of important services, disconnect from the hotspot and tell the device to forget the network. That prevents it reconnecting automatically on a later visit — or to a different hotspot using the same name.
If you run a small business, include these steps in the guidance for staff who travel or work remotely. A short, repeatable checklist is more likely to be followed than a long policy nobody can remember.
Keep the protection in perspective. A VPN is one useful privacy and security layer. Keep devices updated, use unique passwords and multi-factor authentication, and remain cautious with unexpected messages.