Using a VPN on Public Wi-Fi
Connect on cafés and shared Wi-Fi without confusing a VPN tunnel, HTTPS, and the trustworthiness of the site you visit.
Check that you joined the intended network before signing in. A convincing network name or a password at the café counter does not establish that every website you open is trustworthy.
Keep HTTPS in perspective
Modern HTTPS already encrypts the connection to a website. A VPN adds a separate tunnel between your device and the VPN server; it does not repair a fraudulent website or a certificate warning.
Use the correct app or website address, keep your software current, and leave browser security warnings intact. Do not enter a banking password into a hotspot’s sign-in form.
Complete the network sign-in
Some public networks require a captive portal before internet access works. If your VPN or kill switch prevents that portal from opening, follow the app’s instructions for temporarily allowing network sign-in. Avoid unrelated browsing during that gap, then reconnect and check the VPN state.
Check your actual device
Read the kill-switch settings for your operating system and review any split-tunnel exclusions. A protected browser does not establish that all other apps use the same route.
If the connection repeatedly fails, a trusted mobile connection may be the simpler alternative when available. A VPN still needs a working internet connection underneath it.
Before leaving the hotspot
Confirm that the VPN recovers after a network change. Turn off automatic joining for networks you do not intend to reuse, and review sharing or local-discovery settings appropriate to your device.