Why open networks get a bad reputation
Free Wi-Fi at cafes, airports, hotels and coworking spaces is convenient, which is exactly why remote workers use it. It also means you are sharing a network with strangers and relying on equipment run by someone you do not know.
In the past, the main worry was that other people on the same network could read what you sent. Today much of that risk has shrunk because most websites and services encrypt their connections. Still, some risks remain, and a few habits reduce them further.
What the real risks are
Fake networks. An attacker, or even a careless person, can set up a network with a name that looks like the venue’s, such as a slight variation on the cafe’s name. If you connect to it, the operator controls the path your traffic takes. Encryption on the sites you visit still protects the contents in most cases, but you lose the benefit of a trustworthy connection.
Unencrypted traffic. Some older apps, internal tools and websites still send data without proper encryption. On a shared network, anyone nearby with the right software may be able to read that traffic. A browser warning about an insecure connection is the signal to stop.
Deceptive sign-in pages. Many public networks show a page asking you to accept terms or enter an email address. That page can be faked, or it can be used to ask for more than it needs. Never enter a work password or payment details on a network sign-in page.
Other devices on the same network. On a poorly configured network, devices may be able to see and probe each other. If file sharing is switched on, your folders could be visible.
Shoulder surfing and theft. Not every risk is digital. People can read your screen, watch you type a password, or walk off with a laptop or phone you leave on the table. This is one of the more common problems, and it is easy to forget.
What is overstated
It is easy to be too alarmed. Using a modern browser to visit a site that shows a secure connection generally keeps the contents of your session private from the other people on the network, even if the network itself is not trusted. That is thanks to everyday encryption, which works largely in the background. Public Wi-Fi is not a place where everything you do is automatically exposed.
It is also true that you cannot rule out risk entirely. Outcomes depend on the network, your device settings and the sites you use, so treat the following as sensible precautions rather than a guarantee.
Practical precautions
Before connecting
- Confirm the exact network name and password with staff instead of picking the closest match.
- Turn off automatic joining of open networks. Phones and laptops that auto-connect can end up on a fake network without you noticing.
- Consider using your phone as a personal hotspot for sensitive work. Mobile data is often a better choice than a network you do not know.
On your device
- Keep the operating system, browser and apps updated.
- Set the network type to “public” if your system offers it, and turn off file sharing and similar features.
- Leave the firewall on.
- Use a browser that warns about insecure sites, and do not click through those warnings.
With your accounts
- Use two-factor authentication on your important accounts so that a stolen password is not enough.
- Use password managers to fill logins; they usually only offer to fill on the genuine address, which helps against lookalike pages.
- Avoid handling especially sensitive things, such as banking or customer records, on a network you do not trust, if you can wait.
- Sign out of services when you are finished, especially on shared computers.
Consider a VPN, with realistic expectations
Virtual private networks encrypt your traffic between your device and the VPN server, so the local network cannot read it. They are a reasonable extra layer on open networks, though they shift trust to the provider and do not stop phishing or protect a compromised device.
Handling the physical side
- Keep your laptop and phone with you. Do not leave them to “save a table.”
- Use a screen filter or sit with your back to a wall if you are handling private information.
- Lock your screen whenever you step away, even for a minute.
- Be careful with calls. People nearby can hear customer names, numbers and plans.
If a device does go missing, having a plan for lost devices, along with backup basics for your files, keeps a bad moment from becoming a disaster.
Remote work at home counts too
A home network is also a network. Change the default router password, use modern encryption settings on the Wi-Fi, keep the router firmware updated if the manufacturer provides updates, and avoid sharing your network password freely. Keeping work and personal equipment apart where possible, in line with sensible device boundaries, also limits what a problem on one can reach on the other.
A short checklist
- Verify the network name with staff.
- Prefer your phone’s hotspot for sensitive work.
- Update your device and keep the firewall on.
- Heed browser warnings and avoid unknown sign-in pages.
- Use a second login step and a password manager.
- Watch your screen, your surroundings and your belongings.
Used with care, public Wi-Fi is usually fine for everyday tasks. The point is not to avoid it but to know what it can and cannot do.