A practical checklist for public Wi-Fi

Identify the network before joining

At a café, hotel, or station, ask staff for the intended network name when you are unsure. Similar names are not proof that two networks have the same operator. Avoid choosing a network simply because it has the strongest signal or includes the word free. A quick question is often more useful than trying to interpret a long list of unfamiliar hotspots.

Decide whether you need the hotspot at all. If you only need to send one important message and mobile data is available, that may be the simpler choice. This is a convenience decision as well as a privacy decision: a crowded hotspot can be unreliable even when no one is trying to misuse it.

Treat the sign-in page as a separate step

Some networks open a captive portal before allowing general internet access. Read what it asks for. A hotel room number or acceptance of network terms is different from a request to install a certificate, download a configuration profile, or supply an unrelated account password. Stop if the request seems excessive for basic access.

If the portal does not appear, use the device’s network sign-in notification or ask the operator for instructions. Do not search for random certificate downloads to make the connection work. When troubleshooting requires temporarily disconnecting a VPN, avoid opening sensitive services during that interval and reconnect before continuing the activity you intended to protect.

Check where your browser is going

The FTC explains that widespread website encryption has made public Wi-Fi generally safer than older blanket warnings suggest. Look for HTTPS and take browser security warnings seriously. The important point is not that shared networks are risk-free; it is that the destination and its encrypted connection matter alongside the wireless network you joined.

For a payment or sign-in, use a saved bookmark or type the known address rather than following an unexpected portal promotion. Read the domain before entering information. A padlock or HTTPS connection does not tell you whether an offer is genuine, and a VPN cannot make an imitation website trustworthy.

Leave with a clean exit

After using the hotspot, disconnect and consider forgetting the network so your device does not reconnect unexpectedly on a later visit. Review any permissions or configuration changes you made while getting connected. If you temporarily changed a VPN setting, restore the intended setting instead of leaving the troubleshooting configuration in place.

A useful routine takes less thought when you repeat it: identify the network, complete only the necessary access step, verify the destination, and tidy up afterward. Keep your operating system and browser updated as part of your normal maintenance. If the network behaves strangely, stop using it rather than experimenting with sensitive accounts. Report the problem to the operator with the time and visible error, but avoid sharing account passwords or screenshots containing personal messages. The aim is a controlled connection, not a long list of security tools you cannot explain.

For frequent travel, save your provider’s support address before leaving home. Having a known contact available makes it easier to pause when a hotspot asks for an unfamiliar setup change.