Every guide about public Wi-Fi opens with the same warning: hackers are watching. It's a bit dramatic, and it makes people tune out. The real picture is calmer and more useful. A handful of specific things can go wrong on an open network, and once you know them, protecting yourself takes about a minute.
What's actually exposed on open Wi-Fi
When you join the Wi-Fi at an airport, hotel or cafe, you're sharing a network with strangers and trusting whoever set it up. Two things change compared to your home connection.
First, other people on the same network are closer to your traffic than they'd otherwise be. Most of the web uses HTTPS now, which scrambles the contents of what you send. But the encryption isn't total. The domains you visit can still be visible, some apps are sloppier than browsers, and anything still served over plain HTTP is wide open. None of that is the movie version of hacking. It's mostly passive, and it's more about the metadata of what you do than the content.
Second, you're trusting the network itself not to interfere. A badly run or deliberately malicious hotspot can redirect you to fake pages or inject content. This is rarer than the scare stories suggest, but it's the more serious category when it does happen.
The trick that's easy to fall for
The one really worth knowing about is the lookalike network. Anyone can name a hotspot "Airport_Free_WiFi" or "Hotel Guest." Your phone, trying to be helpful, may even reconnect to a name it's seen before. So you can join what looks like the official network and actually be on someone's laptop.
You usually can't tell by looking. That's the whole point of it.
What a VPN does here, and what it doesn't
This is the situation a VPN is genuinely built for. Once it's on, everything leaving your phone is wrapped in encryption before it touches the local network. The cafe's router, the person two tables over, the fake hotspot: they see one encrypted stream to a VPN server and nothing about where it's really going. The metadata stops leaking. The lookalike network can't read what it's carrying.
What it won't do is save you from yourself. If you type your bank password into a fake site you reached by clicking a link, encryption doesn't help, because you handed over the information directly. A VPN protects the pipe, not your judgement.
A short, realistic checklist
- Turn on a VPN before you use Wi-Fi you don't control. This is the big one.
- Switch off "auto-join" for open networks, so your phone stops connecting to familiar-looking names on its own.
- Keep your phone and apps updated. A lot of the scary scenarios rely on old, unpatched software.
- For anything genuinely sensitive, your mobile data is usually safer than open Wi-Fi anyway.
That's the whole defence. It isn't paranoia, and it isn't much effort.
Why we bother
We see the fallout from weak device habits all the time through our IMEI and device checks: phones bought second-hand with surprises attached, accounts that followed the previous owner home. Network privacy is the same idea from the other direction. Small, boring steps that save you a real headache later.
DeviceDecoded VPN covers your phone, laptop and tablet on one plan for $10 a month, with no activity logs. So the open-network problem is handled on every device you carry, not just the one you remembered to protect.