Key points in a minute
- Confirm the exact network name with a staff member and turn off auto-connect.
- HTTPS protects the content of a specific site, while a VPN protects your device’s network connection up to the VPN server.
- It’s safer to get through the captive portal before you enter any sensitive data, and then turn on the VPN.
- A VPN doesn’t protect you from phishing or malicious attachments.
The risks of an open network
An open network requires no password and lets any device sit right next to other visitors’ devices. Modern HTTPS already encrypts the content of most websites, but the local network can still be a source of DNS spoofing, intrusive redirects, and attacks on vulnerable services on your device.
A separate problem is a hotspot with a look-alike name. A network called Airport_Free_WiFi may have nothing to do with the airport. You willingly connect to an attacker’s infrastructure and then see a convincing login page.
What exactly a VPN protects
Once the tunnel is up, data between your device and the VPN server travels inside a secure connection. The operator of the local hotspot sees a connection to the server and how much data is exchanged, but shouldn’t be able to see the content of the traffic inside a properly configured tunnel.
From there, your traffic goes out to the internet from the VPN server. Websites can still recognize you by your account login, cookies, and browser characteristics. A VPN changes your network exit point, but it doesn’t turn a regular browser into a tool for absolute anonymity.
If a site uses HTTPS, do you need a VPN?
HTTPS protects the connection between your browser and a specific site, and it’s still essential even with a VPN on. A VPN adds a single secure segment from your device to the VPN server, including app traffic that’s properly routed into the tunnel.
These technologies complement each other. Don’t ignore a browser certificate warning just because the VPN is connected. A warning like that may mean spoofing or a serious error on the site.
How to handle a captive portal
In hotels and airports, the network often opens a page with terms of use or a room number field before it gives you internet access. A VPN can keep that page from loading. Temporarily turn off the tunnel, open only the login page, don’t enter anything you don’t have to, and turn the VPN back on as soon as you have access.
If the portal asks you to install a certificate, a device management profile, or an unknown app, it’s better to decline and use mobile data. Regular guest Wi‑Fi almost never needs permissions like these.
Checklist for cafes, hotels, and airports
Before your trip, update your system and VPN client, save the instructions for offline use, and make sure the profile works. Once you’re on the network, follow these steps in order.
- Double-check the Wi‑Fi name, and don’t connect to an open SSID with a similar name.
- Turn off file sharing, AirDrop for everyone, and network discovery.
- Get through the captive portal, then turn on the VPN and check its status.
- Don’t open banking or work systems if your browser shows a certificate error.
- When you leave, forget the network and turn off auto-connect to open hotspots.
What a VPN doesn’t protect against
A VPN doesn’t check whether a link in an email is legitimate, doesn’t remove a malicious file, and doesn’t make up for a weak password. If you enter your details on a fake site through a secure tunnel, the scammer still gets them.
Use a password manager, multi-factor authentication, and keep your software up to date. For a particularly sensitive task, mobile data may be a smarter choice than unfamiliar Wi‑Fi, even with a VPN.
FAQ
FAQ
Is it safe to use cafe Wi‑Fi with a VPN?
A VPN noticeably reduces network risks if the profile is set up correctly, but you still need to check the network name, HTTPS, and your device’s warnings. For critical tasks, a trusted mobile network is safer.
Should I turn on the VPN before connecting to Wi‑Fi?
Usually you need to connect to the network first. If there’s a captive portal, complete only that step, then turn on the VPN right away before using any other services.
Does a VPN hide my passwords from the hotspot owner?
A properly configured VPN protects your traffic up to the VPN server. But your password will still end up with a scammer if you type it into a phishing page.
Byte VPN
