Public Wi‑Fi safety: what can go wrong and how a VPN helps
Short answer
On public Wi‑Fi, the hotspot owner and others on the network can often see which sites you look up and your IP address, and fake hotspots can impersonate real ones. HTTPS protects the content of most websites, but not everything. A VPN encrypts all of your phone’s traffic, DNS included, before it reaches the hotspot — so the network sees only an encrypted stream to the VPN server.
The real risks
- Snooping on metadata. Even with HTTPS, the network can usually see your DNS lookups — the names of the sites you visit — unless encrypted DNS is turned on.
- Fake hotspots (“evil twins”). A network named like the café’s can be run by someone else, who then sees and can redirect your traffic.
- Unencrypted apps. Some apps and older sites still send data without encryption.
- Your IP address. Sites and services you use can see the hotspot’s public IP and link your activity to that location.
What HTTPS already protects — and what it doesn’t
HTTPS encrypts the content of a page: passwords, messages and card numbers on secure sites can’t be read by the network. But HTTPS doesn’t hide which sites you visit, doesn’t hide your IP address, and doesn’t protect apps that don’t use encryption. That gap is what a VPN closes.
Try it with VPN Tube
Free on Google Play, no registration · 4.2★ · 1M+ installs
What a VPN adds
- All traffic is encrypted on the way to the VPN server — every app, not only the browser.
- DNS goes through the tunnel. In VPN Tube all DNS requests are sent inside the tunnel, so the hotspot can’t see your lookups.
- No IPv6 side door. VPN Tube sends all IPv6 traffic into the tunnel too, so your real address doesn’t leak around the VPN.
- Your IP is replaced by the VPN server’s address for the sites you visit.
A 7-step checklist for public Wi‑Fi
- Check the network name with staff before joining.
- Sign in to the captive portal first (the “accept terms” page), then start the VPN — portals often don’t load through a VPN.
- Turn on VPN Tube and wait for the key icon.
- Prefer mobile data for banking if you can.
- Turn off auto-join for open networks in Wi‑Fi settings.
- Keep Android and your apps updated.
- “Forget” the network when you leave.
Questions about this topic
Is hotel or airport Wi‑Fi with a password safe?
A shared password only keeps out people who don’t have it. Everyone who has it — often every guest — is on the same network, so the same precautions apply.
Does a VPN protect me from fake hotspots?
It greatly reduces the risk: even on a fake hotspot, your traffic is encrypted to the VPN server, so it can’t be read or redirected. Still, avoid networks you can’t verify.