Before joining the network
Ask the venue for the network name rather than guessing from a list of similar names. Avoid automatic joining when you do not need it. Keep the operating system and browser updated, and turn off sharing features you are not using.
A welcome page is not a reason to install an unexpected certificate, remote-control app or browser extension. If the login demands something unusual, stop and ask the venue.
Keep account security separate
Use a password manager and multi-factor authentication for important accounts. Check the website address before entering credentials and heed certificate warnings. HTTPS protects the connection to a legitimate site; it does not prove every site asking for your password deserves it.
Do not assume every public hotspot exposes all modern web traffic in plain text. Equally, do not assume an encrypted page makes phishing harmless. Look at what you are signing into and what the site is asking you to do.
Decide where a VPN fits
A VPN adds a tunnel to its operator’s server and changes who you trust with that part of the connection. Read the operator’s policies and use the official app. A VPN cannot repair malware already on the device or undo a password sent to the wrong website.
If the network seems suspicious, postpone sensitive tasks or use a connection you control. Our privacy basics covers account and device habits beyond VPN subscriptions.
