Wi-Fi VPN: Security tips for free public networks
Public Wi-Fi at hotels, airports, and cafes exposes you to real privacy and security risks. Learn how ExpressVPN keeps you safe, even on unsecured Wi-Fi networks.
6 types of public Wi-Fi security risks
Using the internet over unsecured, public Wi-Fi networks puts you at risk of specific types of cyberattacks and other criminal acts.
Packet sniffing
A hacker records all the data that passes between you and the unsecured Wi-Fi router by examining data packets. Generally, network administrators use packet sniffing tools to monitor and protect network traffic. However, hackers use these tools to steal information.
Rogue Wi-Fi networks
A hacker sets up a fake network that masquerades as a legitimate one to steal information from unsuspecting users who connect to it. This method may also be used to infect a user’s device with malware and viruses.
Man-in-the-middle attacks
A hacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other. There are several types of man-in-the-middle (MITM) attacks. The most commonly used MITM attack is IP spoofing, where a hacker tricks unsuspecting users into thinking they're interacting with a website, hoping they'll give up personal information that could be stolen.
Identity theft
Using man-in-the-middle attacks, hackers can steal personal information found on a device connected to public Wi-Fi. Identity theft usually involves stolen information that hackers can then use to impersonate a victim. With enough financial information, a hacker could withdraw money and make purchases in their victim's name.
Data breach
A hacker uses an unsecured Wi-Fi router to illegally access personal information from unsuspecting users. Personal data like photos, videos, and credit card information might be at risk during a data breach.
Malware infection
A hacker could distribute malware or viruses to unsuspecting users on any device connected to an unsecured router through Wi-Fi. If on public Wi-Fi, avoid clicking on pop-up ads or videos as they might harbor dangerous viruses that could infect your devices.
How a VPN stops hacking through Wi-Fi
Let’s suppose someone is trying to hack your phone through Wi-Fi with a packet sniffing program. If the Wi-Fi is unsecured, this public Wi-Fi hacker may be able to read your traffic directly. A VPN can help secure an unsecured Wi-Fi.
ExpressVPN prevents this kind of Wi-Fi hacking by creating an encrypted tunnel between your device and a secure VPN server:
Is it safe to use public Wi-Fi with a VPN?
Public Wi-Fi hackers will be unable to read any data inside this encrypted tunnel.
Now let’s say you’re trying to connect to hotel Wi-Fi, but you accidentally connect to a hacker’s rogue Wi-Fi network instead. Without any additional security, the hacker can read and alter any unencrypted communication, or even inject malicious code onto your device.
With ExpressVPN, however, the encrypted tunnel prevents hackers from reading, injecting, or altering any data.
Wi-Fi hackers can also use a man-in-the-middle (MITM) attack to break encryption and impersonate sites you are visiting so they can intercept your traffic without your knowledge.
FAQ: About public Wi-Fi security
How do I know if my public Wi-Fi is secure?
You can never assume a public Wi-Fi network is secure; in fact, it’s almost impossible for a user in a cafe or hotel to know for sure how secure the Wi-Fi is. However, requiring a password does indicate a most basic level of security.
How do I secure my public Wi-Fi?
For public Wi-Fi users, the easiest way to ensure a secure connection is by turning on a VPN app. This encrypts your internet connection and protects you from cyberattacks.
For business owners who operate a public Wi-Fi network, always change your Wi-Fi’s name (SSID) and password from the default, and keep your router up to date with the latest software to ensure you have the latest security patches.
Can public Wi-Fi spy on you?
Wi-Fi admins could potentially see what you’re doing if your connection is unencrypted. While they probably won’t be able to read your messages, they might be able to know the sites you visit and how much time you spend on them.
If your connection is encrypted, such as with a VPN turned on, admins will only be able to see packets of encrypted data being sent to the server from a device, but not what the packets contain.
What is Wi-Fi?
Wi-Fi (a play on “Hi-Fi”) is a local area wireless technology that lets devices network with each other over radio frequencies. Those frequencies are the 2.4 GHz UHF band and the 5 GHz SHF band.
How does Wi-Fi work?
A Wi-Fi network is broadcast by a Wi-Fi router, which allows multiple devices to connect to a wireless local area network (WLAN) at once. The router subsequently connects each of those devices to the internet. Most Wi-Fi networks are password-protected.
The distance and strength of a Wi-Fi signal depend on the environment and the router, but a single home router can generally cover an entire household.
What is a Wi-Fi hotspot?
A Wi-Fi hotspot is a physical location where you can connect a Wi-Fi-enabled device to the internet over a public wireless network. Wi-Fi hotspots are common in retail businesses and transportation hubs, such as cafes, hotels, and airports. These organizations and businesses install Wi-Fi routers for customers and the public to use.
How does a Wi-Fi hotspot work?
While many Wi-Fi hotspots use WEP or WPA security protocols to encrypt your connection, others have no such security features, leaving you and your data vulnerable to malicious third parties. Whether a hotspot is password-protected or not, it’s a good idea to connect to a VPN when using it, which will encrypt all traffic before it leaves the device.
Hotspots can also be set up on smartphones, known as mobile hotspots. The smartphone uses a 3G or 4G connection to provide internet through its Wi-Fi chip to nearby devices.
Is it safe to use hotel Wi-Fi?
Like with other public Wi-Fi networks, hotel Wi-Fi comes with security risks including the ability for hackers to abuse open, unsecured networks.
Connecting to a VPN while using your hotel’s Wi-Fi will encrypt your internet connection, securing all your information from snoops.
What can unsecured Wi-Fi see?
Wi-Fi admins could potentially see what you’re doing if your connection is unencrypted. While they probably won’t be able to read your messages, they might be able to know the sites you visit and how much time you spend on them.
If your connection is encrypted, such as with a VPN turned on, admins will only be able to see packets of encrypted data being sent to the server from a device, but not what the packets contain.
Ready to try the best VPN for public Wi-Fi?
A VPN is essential protection when using public Wi-Fi. Give ExpressVPN a try. You’re 100% covered by our 30-day money-back guarantee.