Free WiFi is convenient, but strangers on the same network can snoop on your data. Follow these eight rules and use it without the risk. None of them require technical skill.
Turn On a VPN First
A VPN is the single most important protection on public WiFi. It encrypts everything between your device and the internet. Anyone watching the network sees only scrambled data.
Install a trusted VPN app before you need it. Turn it on before connecting to anything important. As a result, even a hacked hotspot cannot read your traffic.
Note that a VPN hides your activity, not your mistakes. It does not block phishing pages or bad downloads. Stay alert even with the VPN running.
Verify the Network and Lock Your Settings
Hackers set up fake hotspots with believable names. “Airport_WiFi” and “Airport_Wi-Fi” look identical at a glance. Always confirm the exact network name with staff before connecting.
Stop your phone from joining networks on its own. On iPhone, turn on Ask to Join Networks in WiFi settings. On Android, turn off automatic reconnection to open networks.
Forget the network when you are done. Your phone remembers every network it joins. In addition, it silently reconnects to any network with a matching name later.
Open WiFi settings, tap the network name, and choose Forget. This one tap closes a door most people leave open forever.
Meanwhile, turn off file sharing and AirDrop on public networks. These features open your device to nearby strangers. Switch them off until you are home again.
Protect Your Accounts While Connected
Check for the padlock in your browser’s address bar. It means the site uses HTTPS encryption. For example, never type a password on a page that shows a security warning.
Use your mobile data for banking instead. Mobile networks are far harder to intercept than public WiFi. However, most banking apps also use extra encryption, so short checks are fine.
Turn on two-factor authentication for important accounts. Even a stolen password fails without the second step. Authenticator apps work well for this.
Log out of accounts when you finish, rather than just closing the tab. Keep your phone and laptop updated too. Indeed, updates fix the security holes attackers exploit on open networks.
