Public Wi-Fi is safer than it used to be because most websites now use HTTPS, which encrypts page content. But the network operator, and anyone running a fake hotspot, can still see which sites and apps you connect to, tamper with unencrypted traffic, and push fake login pages. A VPN encrypts everything between your device and the VPN server, which closes those gaps. Use one on any network you don't control: cafés, hotels, airports, campuses, conferences.
By Team Boycat
"Never use public Wi-Fi" is outdated advice. Encryption on the web has improved a lot. But "it's fine now" isn't quite right either. Here's what's actually exposed on a shared network, and what a VPN does about it.
When a site uses HTTPS (the padlock), the content of pages, your passwords and form data are encrypted between your browser and the site. Google reports that the large majority of pages loaded in Chrome now use HTTPS (Google Transparency Report). In 2023, Google said only 5-10% of Chrome traffic was still plain HTTP (9to5Google).
So on café Wi-Fi, a snoop generally can't read your banking password. That's real progress.
A VPN creates an encrypted tunnel from your device to the VPN server. On a café network that means:
What it doesn't do: protect you from phishing emails, malware you install, or tracking by accounts you're logged into. And you're now trusting the VPN provider instead of the café, so pick one with a clear logging policy and known owner.
The most common mistake is forgetting to turn the VPN on. Most VPN apps can connect automatically when you join a Wi-Fi network you haven't marked as trusted.
| Network | Use a VPN? | Why |
|---|---|---|
| Café, restaurant, mall | Yes | Open or shared password, anyone can join |
| Hotel | Yes | Shared by hundreds of guests, common phishing portals |
| Airport, train, plane | Yes | Easy to spoof, high-value targets |
| Campus, coworking, conference | Yes | Large shared networks, often monitored |
| Friend's home | Optional | Lower risk, but you don't control it |
| Your home Wi-Fi (WPA2/WPA3) | Optional | Use it to hide activity from your ISP or change location |
| Mobile data |
Sharing your phone's mobile data as a hotspot is usually safer than public Wi-Fi, because you control the network and it's password-protected. Use a strong hotspot password, and turn the hotspot off when you're done. Your mobile carrier still sees your traffic, so the VPN is still worth running if you want privacy from the carrier too.
A bit, usually. Public Wi-Fi is often the bottleneck anyway. Choose a nearby VPN location and the WireGuard protocol for the best speed.
Look for: auto-connect on untrusted networks, WireGuard, apps on every device you carry, and a clear no-logs policy. Buycat VPN covers 3, 5 or 10 devices across iPhone, Android, Mac, Windows and Linux, connects in one tap, and web plans start at $37.69 a year with a 30-day money-back guarantee.
For HTTPS sites, your passwords and page content are encrypted. But the network can still see which sites you visit, and fake hotspots can redirect you. A VPN closes those gaps.
They can usually see which sites and apps you connect to, but not the content of HTTPS pages. With a VPN on, they only see that you're connected to a VPN.
Yes. Hotel networks are shared by many guests and often use login portals that are easy to fake.
It protects your traffic on the network. It doesn't protect against phishing, malware or weak passwords.
Yes, on any Wi-Fi you don't control. Turn on auto-connect so you don't have to remember.
BuycatVPN
A no-logs VPN built around your privacy.
AES-256 encryption on iOS, Android, Mac, Windows and Linux. 30-day money-back guarantee.
Get BuycatVPN| Optional |
| Harder to intercept; carrier still sees your traffic |
