Public Wi-Fi is less trustworthy than your home network, but modern HTTPS already protects much of your content. A VPN adds another layer by hiding more of your traffic from the network itself, especially on networks you do not control.
Does this affect you?
Use this on coffee shop, airport, hotel, school, library, or other shared Wi-Fi from iPhone, Android, Windows, or Mac.
What a VPN protects
It helps most when the network itself is untrusted.
- HTTPS encrypts the contents of most websites and apps, but the network may still see which services you connect to.
- A VPN encrypts traffic between your device and the VPN provider, making the local Wi-Fi operator or nearby snoopers see much less.
- It is most useful on hotel, airport, coffee shop, and other public networks, especially when the network name could be spoofed.
- A VPN does not stop phishing, fix malware, or hide your activity from the websites you log into.
- Use it for sensitive activity such as banking, passwords, work email, and personal records.
Turn on a VPN
The device steps differ slightly, but the idea is the same.
- Choose a reputable VPN with a clear privacy policy and history. Research free VPNs carefully because some make money from user data.
- On iPhone, install the VPN app from the App Store and approve the VPN configuration prompt.
- On Android, install from Google Play and approve the VPN permission.
- On Windows or Mac, install from the vendor’s official site or app store, sign in, choose a server, and click Connect.
- Confirm the app shows Connected before doing sensitive work.
- Enable a kill switch if the VPN offers one so traffic pauses if the VPN drops.
If you do not have a VPN handy
These steps still reduce risk.
- Confirm the official network name with staff before connecting.
- Check for HTTPS and the padlock before entering sensitive information in a browser.
- Use cellular data instead of public Wi-Fi for banking or other high-stakes tasks when possible.
- Turn off automatic Wi-Fi joining so the device does not connect to unknown networks silently.
- Keep the operating system, browser, and apps updated.
More control
Free VPNs need scrutiny
Free is not automatically unsafe, but the business model matters. A low-cost paid VPN with a clear no-logs policy is often a safer default.
Private Relay is not always a full VPN
Some devices include privacy relay or lightweight VPN-like features in subscriptions. They can help, but they may not cover every app or use case the way a full VPN does.
Sources
- FTC Consumer Advice – Public Wi-Fi networks (2025)
- CISA – Cybersecurity tips for traveling (2024)
- NIST – Guide to IPsec VPNs SP 800-77 (2020)