Skip to content
VPNmine
VPN QUESTION

Does a VPN protect me on public Wi-Fi?

Also asked as: Is a VPN needed on public Wi-Fi? · Is hotel Wi-Fi safe with a VPN?

Direct answer

Yes, against the threats public Wi-Fi actually poses. Anyone on the same network can watch unencrypted traffic and can run a fake access point with the venue's name; a VPN encrypts everything to one server before it leaves your device, so both see only ciphertext. It does not protect you from a malicious site you then visit.

What goes wrong on public Wi-Fi

Three things. Other devices on the network can see unencrypted traffic and the domains you resolve. A fake access point — an evil twin — with the café's name can sit between you and the internet and read or alter what passes. And the network's own DNS can be hijacked to send you to the wrong server. HTTPS covers a lot of this for websites; it does not cover DNS, apps that still use plain HTTP, or the metadata of where you connect.

What the VPN does about it

With the tunnel up before you open anything, every packet is encrypted to the VPN server, including DNS. The network, the evil twin and the hijacked resolver all see one encrypted stream to one address. The tunnel's own keys are authenticated, so a fake access point cannot impersonate the server.

What it does not do

It does not vet the sites you visit, stop phishing, or block malware. And it only helps if it is on: connect first, then browse. VPNmine's apps can connect in one tap on a phone, a laptop or a TV, and the account is optional, so there is nothing to set up at the gate.