Laptop connected to public Wi-Fi in a café, highlighting secure browsing and network protection.
Photo Credit: AI-Generated
Public Wi-Fi is fine for everyday browsing and routine work when the laptop is properly secured.
Use HTTPS, a Public network profile, updated software, 2FA and sensible Wi-Fi settings to reduce common risks.
Keep banking, UPI payments and highly sensitive work on your phone's hotspot or another connection you trust.
Public Wi-Fi is convenient, but I would not treat it like my home network. A cafe, hotel or airport network is shared with other people, and I have no control over the router, its configuration or who else is connected to it.
Reading articles, checking email, working on a document or watching a video can be fine on a public network when the laptop is properly secured. Banking, UPI payments, important work systems and other sensitive tasks are better handled through my phone's hotspot or another connection I trust.
There is also a common misunderstanding that HTTPS or a VPN automatically makes public Wi-Fi safe. HTTPS protects the connection between the laptop and the website, while a VPN can add another layer of encryption between the laptop and the VPN server. Neither changes the fact that I am using a network I do not control. Basic settings such as using a Public network profile, keeping Windows updated, disabling network discovery and avoiding automatic connections still matter.
Most of these precautions take only a few minutes to set up. Here is what I would check before connecting and what I would avoid doing on public Wi-Fi.
| What to Check | What to Do | Why It Matters |
|---|---|---|
| Network name | Confirm the exact Wi-Fi name with the café, hotel, airport or coworking staff | Helps avoid connecting to a fake network with a similar name |
| HTTPS | Check for HTTPS before entering passwords or payment details | Encrypts the connection between your laptop and the website |
| Banking and payments | Use your phone's hotspot for banking, UPI and other sensitive tasks | Keeps sensitive activity off a shared public network |
| Automatic Wi-Fi | Turn off automatic connection to Wi-Fi networks | Prevents the laptop from joining a network without your approval |
| Software updates | Update Windows, your browser and security software before travelling | Keeps known security vulnerabilities patched |
| VPN | Use a reputable VPN you already trust, preferably with a kill switch | Adds another layer of protection on an untrusted network |
| Network profile | Set a café, hotel or airport connection to Public in Windows | Limits network discovery and sharing features |
| Network discovery and file sharing | Keep both turned off on public networks | Reduces the chance of exposing files or services to other devices |
| Two-factor authentication | Enable 2FA on email, banking and work accounts | Adds another verification step if a password is compromised |
| After leaving | Forget the public Wi-Fi network if you do not need it again | Prevents the laptop from automatically reconnecting later |
Network name: First, I would confirm the network name with the cafe, hotel, airport or coworking staff. A slightly altered name can be enough to trick someone into connecting to the wrong network, so I would not join one just because it looks familiar.
HTTPS: Before entering a password, card number or other sensitive information, I would check for HTTPS in the address bar. It encrypts the connection between the laptop and the website, but it does not make the public Wi-Fi network trustworthy. A certificate or security warning is also something I would not ignore.
Banking and payments: Banking, UPI and other sensitive tasks are better handled through my phone's hotspot. The laptop then connects through mobile data instead of directly to a shared public network.
Automatic connections: Automatic Wi-Fi connections should be turned off so the laptop does not join a nearby network without me choosing it. After leaving, I would also forget the public network, especially if it is somewhere I visit only occasionally.
Updates: Windows, the browser and security software should be updated before travelling. Installing those updates at home is preferable to starting a large download on an unfamiliar network.
VPN: A reputable VPN can add another layer of protection on an untrusted network. If I already have one, I would use it with a kill switch so traffic stops if the VPN connection drops. A random free VPN downloaded while connected to cafe Wi-Fi is something I would avoid.
Network profile: For a cafe, airport, hotel or other shared network, Windows should be set to Public. Private is better suited to a home network I trust. Network discovery and file sharing should also remain turned off on a public connection.
Two-factor authentication: 2FA adds another layer to email, banking and work accounts, so a password alone is not enough to access them. It can use a phone prompt, authentication code or another second verification method.
HTTPS protects the contents of your connection, but it does not make you invisible on the network. Someone operating or monitoring the network can still know that your laptop is connected and may be able to see the domains you are accessing. They should not be able to read the contents of a properly encrypted HTTPS connection.
That distinction is important. I would not take the old advice that public Wi-Fi automatically means someone can read everything I do. Most modern websites use HTTPS, and Reddit discussions around public Wi-Fi make the same point. Some users consider HTTPS sufficient for most everyday browsing, while others recommend a VPN or avoiding sensitive activity altogether.
The bigger issue is that I still do not control the network. A malicious access point, a poorly configured network or another device on the same network can create additional risks. That is why I would not use HTTPS as a reason to treat every public network as trustworthy.
There is also no universal agreement that everyone needs a VPN every time they connect to public Wi-Fi. Some Reddit users recommend one as an additional layer, while others point out that current HTTPS protection already covers much of the traffic people are concerned about.
My approach would be practical. For ordinary browsing, documents, email and other routine work, an updated laptop, HTTPS and sensible network settings provide useful protection. For banking, payments or highly sensitive work, I would switch to my phone's hotspot instead. Recent discussions also show people choosing cellular data specifically to avoid the uncertainty of public Wi-Fi.
Random VPN apps: A VPN can add another layer of protection, but I would not download a free VPN simply because a search result promises to make public Wi-Fi safe. If I need one, I would use a reputable service I already trust. A VPN also shifts some trust from the Wi-Fi provider to the VPN provider, so it is not a magic security layer.
Banking because HTTPS is enabled: HTTPS is important, but it would not change my decision to use public Wi-Fi for banking or payments. If mobile data is available, the phone hotspot is the simpler option.
Ignoring browser warnings: A certificate or security warning is not something I would click through simply because I need to access a website. If the browser says the connection is not secure, I would stop and check what is wrong.
Leaving the laptop unlocked: Public Wi-Fi is not the only security concern. If I step away from the table, I would lock the laptop. Someone getting physical access to an unlocked device can create a much more immediate problem.
Keeping every public network saved: There is little benefit in keeping a cafe or hotel network saved if I am unlikely to use it again. Forgetting it after leaving also reduces the chance of the laptop automatically reconnecting to it later.
I do not think using public Wi-Fi needs to become complicated. For a normal cafe or hotel work session, I would keep the routine simple:
Confirm the network name with the staff.
Set the Windows network profile to Public.
Keep network discovery and file sharing turned off.
Check for HTTPS and never ignore browser security warnings.
Keep banking, payments and highly sensitive work on my phone hotspot.
Use a reputable VPN for ordinary work if I already have one.
Lock the laptop whenever I step away.
Forget the public network when I leave.
Public Wi-Fi is not something I would avoid completely. The more useful approach is to understand what it can and cannot protect. For everyday work, basic security settings and HTTPS go a long way. For anything I would seriously worry about if someone else saw it, I would use a connection I control.
Is it safe to use public Wi-Fi on a laptop?
Public Wi-Fi can be used safely for everyday browsing and routine work if the laptop is properly secured. Use HTTPS, keep Windows and the browser updated, select the Public network profile and avoid sensitive tasks when possible.
Should I use public Wi-Fi for banking or UPI payments?
I would avoid using public Wi-Fi for banking, UPI payments and other highly sensitive tasks when a phone hotspot is available. Using mobile data gives you a connection you have more control over.
Does HTTPS make public Wi-Fi safe?
No. HTTPS encrypts the connection between your laptop and the website, but it does not make the Wi-Fi network itself trustworthy. The network may still be able to see that your laptop is connected and may be able to see the domains you access.
Should I use a VPN on public Wi-Fi?
A reputable VPN can add another layer of protection when using an untrusted network. However, a VPN does not make every public Wi-Fi network completely safe, and you should avoid downloading random free VPN apps while connected to that network.
What should I do after using public Wi-Fi?
After leaving, forget the public Wi-Fi network if you do not expect to use it again. This reduces the chance of your laptop automatically reconnecting to the network later.
Disclaimer: Public Wi-Fi security can vary depending on the network, device, operating system, browser and security settings. Always keep your laptop and software updated, and avoid accessing sensitive accounts on networks you do not trust.