Hi guys,

I had a client come to me for some tips on staying secure when using Airport/Cafe WiFi, which they use a lot.

What would be some pointers you guys have when it comes to using Public WiFi?

Here’s what I mentioned so far

  • Use a VPN (like PIA/Nord) to help encrypt traffic

  • Consider using a password protected hotspot instead

  • Make sure the SSID matches exactly and it’s a secure network (not a honeypot)

Any other tips / changes to my tips you guys would add?

8 Spice ups

It all depends on what you use it for ? The basic thing is not to use public Wifi if you need security.

It seems that a lot of people do not know how VPN works…and the word “encryption” seems to replace a security protocol like superman or spiderman.

The VPN tunnel creates a safe passage or tunnel from your lappy to the server in the office…just think of this as an underground (or undersea) tunnel between 2 islands…no water can penetrate the tunnel…but almost anything can enter from both sides (if there is no proper gates or controllers, in this case AV etc).

So while the VPN tunnel is active, the lappy can still access Internet via the public Wifi ? Means the user can download stuff from the Internet via public Wifi and transfer to the server ? In other words, if the lappy is compromised, things can go to the thru to the server via the VPN…eg a worm or ransomware or virus that affects only server OS is transmitted to the lappy then the server ?

Then after a while, the ransomeware explodes in the office and they cannot find the culprit when they can all the PCs and lappy in the office…this user is on vacation…

Always Check for HTTPS.
Use a VPN.
Check the authenticity.
Patch before you go.
Avoid accessing sensitive information.
Enable two-factor authentication where possible.
Logout when finished.
Make sure your laptop, tablet or smartphone are set to manually select a Wi-Fi network, rather than having it automatically connect.

Stay Secure On Public Wi-Fi When Traveling

Why Data Security Should Start from the Inside Out

1 Spice up

If it is a company based, or even personal based laptop at an internet cafe or place with free public wifi, you can make sure that definitely use VPN, even a proxy server you know and trust too. If your anti-virus or you have a 3rd party app that helps monitor the websites you are going to, it can also be set to ‘not load untrusted pages’ as well. If you go to them all the time, they should be in the trusted list, if you are on a public hotspot that’s redirecting to untrusted sites, it should flag them for you.

Make sure websites you are connecting to are valid, and then make sure it has a secure login and it’s not transmitting unencrypted.

If you are that paranoid, just enable the hotspot on their cell phone (or laptop with WWAN card) and then if they need to make/take calls, use a VoIP provider vs cell phone calls, this way it’s using just data and you don’t lose connection when you need to make calls.

@snowbsgallela

1 Spice up

Thank you all for your replies!

@rupesh-lepide

If you are connected to a public WiFi, will a VPN protect you from man in the middle type attacks?

Hi,

Generally, a VPN or Proxy would be the way to go. :slight_smile:

However, it could be possible that your Anti-Virus could provide additional protection.

Hope this helps!