Use public Wi-Fi safely

Public Wi-Fi's real risks are impersonation (a hostile network named

like the venue's) and nosy neighbors on the same network. Modern

encryption protects most traffic — the rules below cover the rest.

The rules

1. Confirm the network name with the venue. "Airport_Free_WiFi"

and "Airport Free WiFi" may be different networks with different

owners. Ask, or read the posted sign — joining the attacker's

lookalike is the classic trap.

1. Prefer your phone's hotspot for anything sensitive. Banking,

payments, work sign-ins — a personal hotspot is a private network

in your pocket, and mobile data is cheap insurance. This is the

single best habit on this page.

1. Watch for the padlock and for warnings. Sites should show the

browser's padlock; if a certificate warning appears on a public

network, stop — don't click through it there, ever.

1. No new sign-ins on sketchy portals. Venue portals asking to

"sign in with" your email account password are collecting

passwords. Portals legitimately ask for a room number or an email

address — never your email password.

1. Keep the machine buttoned up: screen locked when you step

away (KB-0009), file sharing off (Windows asks "make this device

discoverable?" on new networks — say no to public ones), and a

private browsing window for borrowed machines (KB-0089).

For work

If your organization provides a VPN or requires one for remote work,

use it on public networks — that's exactly what it's for. When in

doubt, hotspot first, ask questions later.

The one-line version

Public Wi-Fi for reading; hotspot (or VPN) for anything that matters.