How Do I Protect My Computer When Using Public Wi-Fi?
To protect a computer on public Wi-Fi, connect only to the network you can verify, keep the firewall and security updates active, turn off network discovery and file sharing, use HTTPS, and avoid sensitive activity when the situation is uncertain. A VPN can add encryption between your device and the VPN service, but it does not stop phishing, malware, or a compromised website.
Published: 2026-08-31 · Updated: 2026-08-31 · Published by IZenica Technologies LLC
A laptop connects to a public Wi-Fi signal while a security shield represents safer travel connectivity.Verify the hotspot, limit device sharing, and use a VPN as an additional layer—not a complete solution.
Is public Wi-Fi safe?
Public Wi-Fi at an airport, hotel, cafe, restaurant, library, or coworking space can be useful, but you do not control the network or know who else is connected. Risks include fake hotspots with a familiar name, weak router administration, traffic interception, malicious redirects, and other users trying to reach exposed devices.
Public Wi-Fi is not automatically dangerous and a VPN does not make it completely safe. Current websites commonly use HTTPS, and device protections can block many threats. The safer approach is to verify the network, limit what your computer exposes, use secure connections, and postpone high-impact actions when a private connection is available.
What should I do before connecting?
Prepare your computer before you arrive. Security settings are easier to check at home than while rushing through an airport or hotel lobby.
Install updates and use a firewall
Install operating-system, browser, and security-software updates before travel. Keep the device firewall enabled. Updates help close known weaknesses, while a firewall can reduce unsolicited connections from other devices on the network. Do not disable the firewall because a public network is inconvenient.
Turn off sharing and network discovery
Set unfamiliar networks to Public in Windows when prompted, and turn off network discovery, printer sharing, and file sharing unless you have a specific trusted need. On macOS and other systems, review sharing settings before travel and disable services you will not use.
Stop automatic connections
Turn off automatic connection to open networks and forget public networks after use. A device that reconnects automatically may join a fake hotspot with the same name as a network you used previously. Confirm the network name and any required sign-in page with staff or posted instructions.
How do I know whether a public Wi-Fi network is real?
Ask an employee for the exact network name and sign-in method, especially at airports, hotels, cafes, and coworking spaces. A fake hotspot may use a small spelling change, an extra word, or a name such as “Free Guest Wi-Fi.” Do not trust a network just because its signal is strong.
A captive portal may ask you to accept terms or enter a room number, but it should not ask for your email password, banking password, or one-time security code. If a page asks for sensitive information to provide ordinary Wi-Fi access, disconnect and verify the offer independently.
- Confirm the network name with the venue.
- Avoid open networks that redirect repeatedly or show unusual certificate warnings.
- Do not ignore browser warnings about a connection or certificate.
- Use your phone’s hotspot when the network cannot be verified.
Use HTTPS and a VPN correctly
HTTPS encrypts the connection between your browser and a website when the site is configured correctly. Look for the browser’s normal secure-connection indicator, but remember that HTTPS does not prove the website is honest. A phishing website can also use HTTPS.
A VPN can encrypt traffic between your computer and the VPN service, which can reduce exposure on an untrusted local network. It does not protect you from phishing, malware, a compromised website, stolen credentials, unsafe downloads, or an account that is already taken over. Use a reputable VPN, keep its app current, and do not treat its connection as permission to ignore other warnings.
What should I avoid on public Wi-Fi?
Avoid banking, large purchases, sensitive work, or account recovery when you cannot verify the network or device. If the task cannot wait, use a trusted mobile hotspot, confirm HTTPS, enable MFA, and double-check the website address. Never enter a password into a page reached through an unexpected pop-up or message.
Do not download pirated software, browser extensions, “required” updates, or security tools offered by a public Wi-Fi sign-in page. Do not accept remote-control requests from strangers and do not leave the computer unlocked. A local attacker may not need to break strong encryption if you hand over credentials or install a malicious file yourself.
Use a mobile hotspot when it makes sense
A personal mobile hotspot can be a practical alternative when the venue network is unverified, unavailable, or asking for more information than expected. Use a strong hotspot password, keep the phone and computer updated, and watch your data allowance. A hotspot still does not replace phishing protection, safe downloads, or account security.
If you use a public network briefly, disconnect when finished and choose “forget” for the network afterward. Close sensitive sessions, sign out of shared services, and check that no sharing setting or temporary proxy remains enabled. These steps reduce the chance of automatic reconnection later.
Public Wi-Fi safety checklist
Use this quick checklist before doing anything sensitive on a hotel, airport, cafe, restaurant, library, or coworking-space network.
- The network name and sign-in process were verified with the venue.
- Windows or macOS is set to a public/untrusted network profile.
- The firewall, security product, browser, and operating system are current.
- File sharing, printer sharing, and network discovery are disabled.
- Automatic connection to open networks is off.
- Sensitive transactions are postponed or performed through a trusted hotspot.
- HTTPS is used, and a VPN is treated as an extra layer—not a complete solution.
- The network is forgotten and important sessions are closed afterward.
Final takeaway
Public Wi-Fi can be used more safely when you verify the hotspot, keep the firewall and updates active, expose fewer services, and protect each account separately. HTTPS and a reputable VPN can help, but neither makes phishing or malware harmless. When the stakes are high, a trusted mobile hotspot or private network is the better choice.
Questions customers often ask
- Can someone steal my information over public Wi-Fi?
- It is possible, especially when a network is fake, poorly secured, or your device connects to unsafe services. Use HTTPS, keep sharing disabled, use a trusted VPN as an added layer, and postpone sensitive activity when possible.
- Does a VPN make public Wi-Fi completely safe?
- No. A VPN can encrypt traffic between your device and the VPN service, but it does not prevent phishing, malware, compromised websites, unsafe downloads, or stolen passwords.
- Should I use public Wi-Fi for online banking?
- Use a trusted mobile hotspot or private connection for banking when possible. If you must connect, verify the network, use the official banking app or typed website address, confirm HTTPS, and never ignore security warnings.
- Should I forget a public Wi-Fi network afterward?
- Yes. Forget networks you do not use regularly and turn off automatic connection to open networks. This reduces the chance of connecting to a fake hotspot with a familiar name later.
View all Bitdefender guides · Review Bitdefender VPN protection · Understand VPN and Password Manager features · Respond after a phishing link · Learn how to recognize phishing attempts · Contact security support