Public Wi-Fi
Is a VPN worth it on public Wi-Fi?
Short answer: it helps, but it’s not magic, and it’s not the only thing that matters. Here is where the real risk is and what a VPN adds.
What the real risk is
Years ago, public Wi-Fi was dangerous mostly because websites sent data in the clear. Today most sites use HTTPS, which encrypts what you send and receive even on an open network. That is a big improvement, and it means the old “anyone can read your password” warning is mostly out of date.
The remaining risks are subtler: the network operator can still see which domains you visit; some apps and background services are less careful than browsers; and a fake hotspot with a familiar name (an “evil twin”) can sit between you and the internet and try to trick you into fake sign-in pages.
What a VPN adds
- It hides your traffic from the local network. The Wi-Fi operator and other users see an encrypted tunnel, not your browsing.
- It covers the whole device. Every app’s traffic goes through the tunnel, including apps that don’t use HTTPS properly.
- It protects DNS lookups from the local network. Name lookups travel inside the tunnel instead of being visible to the hotspot.
What it doesn’t fix
A VPN doesn’t help if you type your password into a fake page, install a malicious app, or reuse a weak password. It also doesn’t make the VPN provider invisible: the provider carries your traffic, so choose one whose privacy policy you have read and are comfortable with.
Treat a VPN as one layer. Updates, unique passwords and two-factor authentication matter just as much.
Habits that matter as much as the VPN
- Check the network name. Ask staff for the exact Wi-Fi name instead of picking the closest match.
- Be wary of sign-in pages. Captive portals that ask for more than an email address or a room number deserve suspicion.
- Turn the VPN on before you open anything else. Connect first, then check email or banking.
- Keep your phone updated. Software updates fix the weaknesses that attackers rely on.
- Use two-factor authentication. It limits the damage if a password is ever exposed.
Common questions
Is public Wi-Fi safe without a VPN?
It is safer than it used to be, because most websites use HTTPS. The network can still see which domains you visit, and some apps are less careful than browsers, so a VPN adds a useful layer.
Can a VPN protect me from a fake hotspot?
A VPN encrypts your traffic, which limits what a fake hotspot can read. It can’t stop you from entering a password on a fake sign-in page, so check the network name and be careful with sign-in pages.
Should I use a VPN on mobile data too?
You don’t need it for the same reason, since mobile networks are not shared the way a café’s Wi-Fi is, but a VPN still hides the sites you visit from your mobile carrier’s network.
Does a VPN make me anonymous?
No. A VPN hides your traffic from the local network and shows websites the VPN server’s address, but accounts you sign in to still know who you are.
Protect the next network you connect to.
Tap to connect, choose a country, and carry on. Passes start at $6.99.