How to use public Wi-Fi safely (and when a VPN actually helps)

A few years ago, joining a café's free Wi-Fi was genuinely risky: many sites didn't encrypt connections, and anyone on the same network could intercept what you sent. Things have changed a lot. Most websites and apps now use HTTPS, which encrypts traffic between your device and the service. Some real risks remain, though — worth knowing without overstating them.

#What HTTPS protects (and what it doesn't)

When a site uses HTTPS — shown by a padlock or similar next to the address — people sharing the network can't read what you type or receive: passwords, messages or card details. The US Federal Trade Commission notes that most websites now encrypt information, which makes public Wi-Fi generally much safer than it used to be.

What HTTPS doesn't hide from the network:

• Which domains you visit, in many cases — though not the specific pages or their content.
• That you're connected, or how much traffic you generate.

#The risks that remain

#1. Fake networks

An attacker can set up a network with a believable name — "Airport_Free_WiFi" — hoping you'll join it, and then try to show you fake sign-in pages.

What to do: check the exact network name with staff and be wary of open networks with generic names.

#2. Captive portals that ask for too much

Many public networks show a page where you accept terms. If it asks for your email password or bank details "to connect", that's a red flag.

#3. Pages without HTTPS

They're a minority, but some older sites and apps still don't encrypt. Avoid entering data into them, especially on public Wi-Fi. Modern browsers warn you when a page isn't secure.

#4. Your device, visible on the network

If file or printer sharing is on, other devices on the network may see it.

#Recommended settings

• On Windows, mark the network as Public when you connect. This turns off network discovery and file sharing.
• Turn off auto-join for open networks. A fake network can reuse the name of one you trusted before.
• Forget the network when you're done, if you won't be back.
• Keep your system and browser updated.
• Use two-factor authentication: even if someone stole a password, it wouldn't be enough to get in.

#Do I need a VPN?

A VPN creates an encrypted tunnel between your device and the VPN's server. On public Wi-Fi:

What it adds:

• Hides which domains you visit from the local network.
• Protects traffic from apps that don't encrypt.
• Reduces risk on networks you don't trust.

What it doesn't do:

• Make you anonymous — the VPN provider can see your traffic much as your ISP would.
• Protect you from phishing, malware or fake websites.
• Replace HTTPS or two-factor authentication.

In practice: for most things — reading news, email, social media — HTTPS already gives reasonable protection. A trustworthy VPN is a useful extra layer if you use public networks often, handle sensitive information, or your employer requires it. Choose providers with a clear privacy policy and avoid dubious free VPNs, which may sell your data.

#Quick checklist before you connect

• I've confirmed the exact network name.
• The network is set to Public on my computer.
• I won't enter data on sites without HTTPS.
• The sign-in page isn't asking for passwords to other services.
• Two-factor authentication is on for my important accounts.

#The bottom line

Thanks to HTTPS, public Wi-Fi is far safer than it was a few years ago. The main risks are fake networks, portals that ask for too much and the few unencrypted sites left. Confirm the network, mark it as public, turn off auto-join and add a trustworthy VPN if you're a frequent user. To improve your Wi-Fi at home, see how to boost your Wi-Fi signal.