Many people underestimate the security risks associated with public Wi-Fi. They are usually unencrypted and leave your devices vulnerable to all kinds of cyber threats. If you often use public Wi-Fi, here are some steps you should always take to keep your PC safe.
Protect your connection with a VPN
Using a VPN is one of the most effective ways to secure my data on public Wi-Fi. By creating an encrypted tunnel between my device and the VPN server, no one can track my internet activities. Additionally, it masks my IP address, keeping my actual location hidden from prying eyes.
Manually add a VPN details in the Windows settings.
To set up a VPN, you can download the VPN providers’ app or configure it manually. When set manuallyyou will need to collect details such as the server address, account name, password and VPN type from your provider and add them manually. Once added, you can easily enable the VPN from the system tray, just like any other network setting.
Connect to Wi-Fi using WPA3 encryption
Avoid connecting to public Wi-Fi networks that are weak encryption protocols. Ideally, look for WPA3 encryption, the strongest available. If that’s not an option, make sure there is at least WPA2 encryption in place, even though it may be compromised. In addition to network encryption, your device must also be compatible with these protocols.
To check if your computer supports WPA3, press Win+R and type cmdand press Enter. Then type netsh wlan show driver and look for WPA3 in the supported protocols. To check the encryption type of a Wi-Fi network, connect to it, then go to Settings > Network & Internet > Wi-Fi, right-click on the network, select “Properties” and confirm the security type.
Checking the encryption type in the Settnigs app on Windows.
Use a standard user account (non-administrator).
Connecting to public Wi-Fi with an administrator account can expose your device to more serious risks, as attackers can make system changes if they gain access. I use a standard user account on public networks to minimize this risk. With limited permissions, it prevents hackers from making system-wide changes even if the system is compromised.
To verify your account type, go to Settings > Accounts. Under your email address you can check whether you are logged in as an administrator or as a standard user.
Check the account type in the Windows Settings app.
If you don’t already have a standard user account, create one under Settings > Accounts > Family & other users. That’s also possible change the account type there.
Disable public network discovery
Network discovery allows your device to discover other devices on the same network you are connected to and allow them to see yours. While this feature is useful for sharing files on a trusted network, leaving public Wi-Fi enabled poses a security risk. That’s why I always disable it before connecting my computer to a public network.
To disable it, right-click the Start button and open “Settings.” Go to Network & Internet > Advanced network settings > Advanced sharing settings. In the Public Networks and Private Networks sections, turn off the switch next to Network Discovery. This keeps your device hidden from other network users.
Turn off network discovery in the Windows Settings app.
Improve security with Windows Defender
Windows Security provides useful tools to protect your device against malicious threats. Enable real-time protection so Windows can actively scan for and block malware. To enable this, go to Settings > Privacy & security > Windows security > Virus & threat protection. Then block all incoming connections in the Firewall and Network Security settings.
Enable real-time protection in the Windows Settings app.
Then enable controlled folder access in the Virus & threat protection settings protect your device from ransomware.
Enable controlled folder access in the Windows Settings app.
Also switch on Microsoft Defender SmartScreen to identify and block phishing websites and suspicious apps by going to the App & browser management settings. Make sure all these security features are enabled before connecting to public Wi-Fi.
Choose multi-layer security
Although I have a lot of confidence in Microsoft Defender, Windows’ built-in security software, because of its… reliable real-time protectionI also use third-party software like Malwarebytes for an extra layer against advanced malware. This way, the additional software can catch any threat that could bypass a Defender scan, although such occurrences are quite rare.
I suggest choosing a reputable third-party antivirus software that complements Microsoft Defender to avoid potential conflicts. Make sure you enable real-time protection and always run both Full scan of Microsoft Defenders and the other antivirus scan before connecting to public Wi-Fi and after you finish using it.
Forget the network after use
One habit I always follow is forgetting the network when I end my session or no longer need internet access. This prevents my device from automatically reconnecting to an unsecured network without my knowledge, reducing the risk of man-in-the-middle attacks where attackers can intercept data.
Nasty forget a saved Wi-Fi networkRight-click on the Start menu, open ‘Settings’ and then go to ‘Network & Internet’. Go to Wi-Fi > Manage known networks. Find the public Wi-Fi network you are connected to in the list, click on it and click the ‘Forget’ button. This will delete the network from your device’s memory, preventing a new connection from being made.
Forgot a network in the Wi-Fi network settings on Windows.
Other tips to secure your device on public Wi-Fi
In addition to the steps above, here are some general tips to keep your Windows PC safe on public Wi-Fi:
-
Encrypt and password protect highly sensitive data before sharing it over a public network. This keeps your data safe even if it is intercepted by someone.
-
Avoid accessing sensitive accounts and banking or shopping apps when connected to public Wi-Fi, as these networks are inherently insecure.
-
Disconnect from Wi-Fi regularly and run quick scans during your session to ensure your device isn’t infected.
-
Make sure security features, such as phishing protection, are enabled in all apps, especially web browsers, to protect your online activities from snoopers.
-
Be careful of fake networks that mimic the name of a legitimate public Wi-Fi service; if you see duplicate names, avoid connecting to these names.
-
Check for Windows Updates before connecting to public Wi-Fi and install any pending updates. A completely renewed system is better protected against new security threats.
This is how I secure my Windows PC when I use public WiFi. While these tips can help you protect your PC, you should avoid connecting to just any public Wi-Fi network. Stick to trusted networks, such as those at a university or library, rather than random places. Also, limit your use of public Wi-Fi to essential situations and consider it as a last resort.
Whenever I can, I use mobile data via a hotspot for a more secure connection in public areas. You should consider this option more often than relying on public Wi-Fi.