While traveling, it may be unavoidable to use insecure networks occasionally. Even paid, password-protected networks run by established businesses can be risky. Here are some quick dos and don’ts on how to use a public Wi-Fi network safely when in a different country.
Table of Contents
- 1. DO: Check Your Public Wi-Fi’s Security Type
- 2. DON’T: Connect to Suspicious Networks
- 3. DO: Enable a Firewall
- 4. DON’T: Use Slow Wi-Fi Networks
- 5. DO: Have Strong Passwords and Diversify Them
- 6. DON’T: Use Unencrypted Sites
- 7. DO: Use a Virtual Private Network (VPN)
- 8. DON’T: Leave Your Devices Connected
1. DO: Check Your Public Wi-Fi’s Security Type
Most public Wi-Fi venues nowadays should be using encryption by default, ensuring your devices are generally safe for routine browsing. However, checking the security protocol of public Wi-Fi on any device you connect to is a more reliable indicator of security.
- Android: first, connect to the Wi-Fi network you want to test. Then, go to Settings -> Connections -> Current network, and click the Settings icon. Look under Security for the current security protocol.
- iOS: on an iPhone, open Settings from your home screen. Scroll down to the Wi-Fi option and select your connected network. Tap the “i” icon and go to the DHCP tab.
- Mac: on Mac devices, press and hold the Option key, and tap the Wi-Fi icon. From the list of available Wi-Fi networks, choose your connected network, and look for its Security type.
- Windows: on a Windows device, go to Settings -> Network & internet -> Wi-Fi. Go deep inside your Wi-Fi connection Properties, and scroll all the way down to check Wi-Fi Protocol and Security type.
If your Wi-Fi security type is listed as “WEP” or “WPA,” it’s definitely an unsafe network. Anything including and above “WPA-2” or the latest “WPA-3” boasts robust encryption and is safe for most practical purposes. However, with WPA-2, there are some caveats.
For example, the above network I’m connected to on my Windows laptop uses WPA-2 Personal, which is strong but not entirely safe. It has known vulnerabilities to KRACK (Key Reinstallation Attack) and brute force attacks, especially if it uses the weaker TKIP protocol instead of AES. I will use the above Wi-Fi network for normal browsing, but not for financial transactions.
Related: is your Wi-Fi network operator using the latest Wi-Fi 7 protocol? If so, you’ll be entirely safe, as it’s the current gold standard of Wi-Fi security.
2. DON’T: Connect to Suspicious Networks
Hackers often establish networks that resemble legitimate ones provided by companies. These false networks can function just like normal networks but may steal your information. To stay safe, ask a hotel employee to write down the business’s full network name (SSID) before connecting to a public hotspot, and ensure it matches exactly.
It can be tempting to connect to hidden Wi-Fi networks that sometimes don’t require a password, especially when you need quick access – resist the urge!
3. DO: Enable a Firewall
On a desktop device, firewalls act as barriers to potentially destructive elements and prevent others from gaining access to your computer without authorization. Even with a weak Wi-Fi network, keeping the firewall enabled will give you a warning during outside intrusion attempts.
Turn on a firewall before connecting to any public network. If you’re not a fan of the Windows Defender firewall, there are some other options which give you additional features. Mac users can refer this firewall configuration guide.
Also read: travel can be a very exciting thing. Before you pack your bags, don’t forget to check this essential list of tech tools for digital nomads which are a lifesaver in a foreign country.
4. DON’T: Use Slow Wi-Fi Networks
As recently as December 2024, I found myself forced to check into a shady hotel in a bad location. Apart from the bedbugs, what really got to me were the snail-paced Internet speeds of only 0.8 to 1 Mbps. I checked the calendar to remind myself I was in the correct decade – slow network speeds are a reality even today!
You can always use Speedtest and other sites to measure your location Wi-Fi speed. Anything below 8~10 Mbps should be highly suspect.
It’s not the slow speed itself that is a problem. But, slow Wi-Fi networks are almost synonymous with outdated hardware or weaker encryption. Additionally, lengthy security updates create opportunities for hackers to use packet sniffing tools and impersonations (you may have seen multiple SSIDs with suffixes like “2” or “3”). If you find yourself in a poor Wi-Fi location, it’s better to use mobile data networks.
5. DO: Have Strong Passwords and Diversify Them
Having the same password for most of your online accounts may be convenient, but it also leaves you more vulnerable to attacks. People spying on public networks can learn your password and gain access to several of your accounts, so mix up your passwords a bit before you visit another country. Your passwords are most secure when they are long and contain a variety of characters.
For those of us struggling to create strong passwords, online password generation tools can be a lifesaver. Sites like Bitwarden and KeePass offer high cryptographic strength and securely store all your passwords, so you don’t have to remember them.
6. DON’T: Use Unencrypted Sites
When we think of ways on how to use a public Wi-Fi network safely, this one is an obvious miss, as many users continue to browse unsafe sites without a concern. This might be ok when you’re at home, but the same habits can be detrimental in a shady foreign hotspot.
To be clear, sites with “HTTPS” at the beginning of the URL encode your information and are therefore less interesting to hackers. If it doesn’t have the “S” at the end, it’s not secure – so avoid using it as much as possible. Stick with encrypted HTTPS sites only.
One thing to note is that not every website comes with HTTPS encryption, so you might want to use an extension like HTTPS Everywhere to make sure you are redirected to the HTTPS site whenever possible. If you see a “Not secure” page warning, quit the browser immediately.
7. DO: Use a Virtual Private Network (VPN)
VPNs give you the security benefits of a private network while you’re connected to a public network. They mask your IP address and DNS data with encryption, making it harder for phishers to access your information. To know how good your VPN’s encryption is, use one of our tried and tested methods. This will guide you to the best VPN product for your needs.
One of the reasons you can no longer do without the anonymity of VPNs is because a good VPN with no DNS leakage is a sure way to protect your confidential user input data such as passwords, PIN, credit card details, and personal information. Just make sure to avoid the “free VPNs,” which create more problems than not having a VPN in the first place.
8. DON’T: Leave Your Devices Connected
Just because you’re not using your device doesn’t mean it’s safe from hackers. Immediately disconnect devices from public Wi-Fi networks when they aren’t in use to prevent others from accessing your connection and data. It’s also a good idea to disconnect all of your devices even when you temporarily stop using a network. For example, if you’re at an airport and you take a break from Web surfing to grab a coffee, disconnect your phone from the Wi-Fi.
In this guide, we saw the best ways to use a public Wi-Fi network safely. Other additional tips to deal with unsecured Wi-Fi networks is to always keep your device software updated. The Windows devices, despite their frequent update problems for which we provide fixes every month, have personally helped me navigate the challenges of a poor Wi-Fi connection. Many websites nowadays also give you the option to enable two-step authentication which you should use.
Featured Image by DALL-E 3. All screenshots by Sayak Boral.
