{"id":4238,"date":"2022-01-19T13:10:07","date_gmt":"2022-01-19T13:10:07","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/01\/19\/do-you-still-need-a-vpn-for-public-wi-fi\/"},"modified":"2022-01-19T13:10:07","modified_gmt":"2022-01-19T13:10:07","slug":"do-you-still-need-a-vpn-for-public-wi-fi","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/01\/19\/do-you-still-need-a-vpn-for-public-wi-fi\/","title":{"rendered":"Do You Still Need a VPN for Public Wi-Fi?"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n
\"A
Igor Martis\/Shutterstock.com<\/a><\/span><\/figcaption><\/figure>\n

There are plenty of reasons to use a VPN, but one of the most important\u2014from a security standpoint, at least\u2014has been to protect yourself when using a public Wi-Fi network. But is this really necessary with modern internet security?<\/p>\n

Using a VPN for Wi-Fi Security<\/h2>\n

The short answer is that for most people, most of the time, VPNs are still a pretty good idea when using public Wi-Fi. While this type of network has indeed become a lot safer\u2014almost perfectly safe thanks to upgrading to HTTPS\u2014you need a certain level of awareness to tell if you\u2019ve accidentally wandered onto a site that doesn\u2019t use HTTPS. As such, it\u2019s better to be safe than sorry and we recommend you still have a VPN engaged when using public Wi-Fi.<\/p>\n

That said, we also want to emphasize that the chances of you falling prey to any kind of attack are pretty small, so it\u2019s not like you need to stress out if you ever use public Wi-Fi without a VPN. Think of it more as an extra layer of protection or insurance, even. Let\u2019s take a look at the kind of threats you may face.<\/p>\n

Is Public Wi-Fi Dangerous?<\/h2>\n

Until fairly recently, public Wi-Fi had the potential to be dangerous thanks to so-called man-in-the-middle (MitM) attacks<\/a>. Because most sites used unencrypted HTTP instead of the more secure HTTPS<\/a>, somebody with ill intent could set up on the same network and intercept data you were sending to and from the internet.<\/p>\n

A successful MitM attack could be pretty disastrous: perpetrators could gather up a lot of personal data. This could include your name and email address, but also more sensitive information, up to and including usernames and passwords you use for different sites.<\/p>\n

The best way to protect yourself against this risk was by using a VPN. Here\u2019s the short version of\u00a0how VPNs work<\/a>:\u00a0they reroute and encrypt your internet connection. This has many great benefits, such as allowing you to seem to be in a different country, but the main advantage in the case of MitM attacks is that all the hacker sees is a bunch of encrypted gibberish.<\/p>\n

All that said, though, it\u2019s possible that MitM attacks were never that big a risk. For one, MitM attacks were probably never that common to begin with according to Nicholas Weaver<\/a>, a professor at the University of California, Berkeley. Though much has been made of their dangers, the effort to set one up \u2014 you need to be in the same physical space as the network you\u2019re trying to infiltrate \u2014 is a big deterrent for criminals.<\/p>\n

Public Wi-Fi Is More Secure Than Ever<\/h2>\n

However, this point is somewhat moot as the main weakness that makes MitM attacks even possible has been removed. Before, you used to connect to the internet using a protocol \u2014\u00a0 a set of rules governing communication between devices \u2014 called HTTP. This has been phased out, though, and now most web communication runs over a protocol called HTTPS<\/a>.<\/p>\n

That added \u201cS\u201d stands for \u201csecure\u201d and means that your connection is encrypted. If a MitM attack managed to hijack a public Wi-Fi network, all the hacker would see is encrypted data, the gibberish we mentioned earlier.<\/p>\n

Because of the advent of HTTPS, plenty of people now assume that using public Wi-Fi is perfectly safe<\/a> and, well, it is. Many of the risks associated with using public Wi-Fi are simply gone, provided you\u2019re using a site that has HTTPS enabled.<\/p>\n

However, that\u2019s also where the remaining, minor risk comes in: though most browsers will warn you if you access a site that still uses HTTP, not all of them do. If you access an older site while somebody is camped out on the network you\u2019re using, then they could see what you\u2019re doing.<\/p>\n

Also, HTTPS doesn\u2019t solve another issue, namely that MitM attacks can still reveal your DNS requests<\/a>. Though generally speaking these rank fairly low on the threat meter as they reveal on the site you\u2019re visiting, not the specific page, they can be a threat to your privacy. That said, we doubt if getting their hands on your DNS requests is worth the trouble of setting up at your local Starbucks for most hackers. (DNS over HTTPS solves this problem<\/a>. You can enable it on Windows 11<\/a>, but it\u2019s not available on every device just yet.)<\/p>\n

The upshot is that while public Wi-Fi is mostly safe, there are still a few snakes in the grass that can bite the unwary. If you have the situational awareness to make sure that you don\u2019t accidentally wander onto a site still using HTTP\u2014or use a browser that warns you when you access HTTP sites<\/a>\u2014then using public networks isn\u2019t too much of a risk.<\/p>\n

That said, if you visit a lot of older sites or are worried about your DNS requests falling into the wrong hands, then having a VPN engaged while using public Wi-Fi is the best course of action. Switching one on takes all of two seconds, and can give you great peace of mind.<\/p>\n

Don\u2019t have a VPN yet? Here\u2019s our guide to the best VPNs you can buy<\/a>.<\/p>\n<\/div>\n