The internet has a major advantage if you’re looking to connect from anywhere in the world. Thanks to an abundance of public Wi-Fi networks, it’s possible to do so without spending a great deal.
But if you want to make use of these networks, then there are a few simple precautions worth bearing in mind. Let’s take a look at a few of the more important ones.
Know the Threats: Snooping, Evil‑Twin Hotspots and Captive Portals
It’s possible for a malicious person to exploit an unsuspecting target through a public WiFi network. They can do this by interposing themselves between the person looking to send and receive data, and the router through which they’re sending it. This might occur when the user first connects: The attacker might send spoof credentials, claiming to be the router. In some cases, an attacker might simply set up a false SSID with a convincing name, in the hope that an unsuspecting person will connect to it.
If you’re using a Bluetooth radio, or some other gadget, the potential attack surface is expanded. Try to avoid them.
You might also consider the security of the “captive portal” – this being the page you’re presented with when you first attempt to log into a network. If you’re being asked to enter data on trust, then it’s worth exercising extreme caution.
Protect the Connection: Prefer HTTPS, Use a VPN, and Limit Sensitive Actions
The good news is that all modern browsers will tend to encrypt your traffic by default. Some might even flag a site as unencrypted and flash red at the top of your window.
Check that the padlock icon is present in the URL bar and try to avoid high-risk transactions entirely.
If you want an additional layer of security, then a good VPN might be worthwhile. It’s worth educating yourself on how this works, and what is proxy vs VPN?
Safer Alternatives on the Road: Personal Hotspots and Roaming
If you know that your phone’s cellular connection is reliable and trustworthy, then why not set up a hotspot and use it, rather than relying on an unfamiliar network?
For the same reason, you might turn off auto-join, and check the exact SSID of the real network before you connect. If you’re sharing a machine, then don’t input anything that’s sensitive.
Operational Hygiene: Harden Devices Before You Fly
Some of the most worthwhile measures are to be taken before you depart. Make sure that multi-factor authentication is active on essential services, and that you’ve set your devices to forget login details, and to disable file sharing on public networks. Change all your passwords, back everything up, and, where possible, turn on device tracking and remote wipe.
