Using a VPN on Hotel and Airport Wi-Fi: A Practical Checklist

Public Wi-Fi is convenient and usually works fine, but you share it with strangers and you rarely know who runs it. This checklist covers what to do before you travel, when you connect, and while you are online.

Before you travel

• Install and sign in to your VPN on every device you are taking, while you are still at home. Downloading apps over unknown Wi-Fi is exactly what you want to avoid.
• Turn on auto-connect for untrusted networks. Most VPN apps can connect automatically whenever you join a Wi-Fi network you have not marked as trusted.
• Enable the kill switch. It stops your device from sending data if the VPN drops. See our kill switch guide.
• Update your devices. Security updates fix the weaknesses that attackers on public networks look for.
• Download entertainment in advance. Hotel Wi-Fi is often slow; our guide to offline downloads for travel helps you prepare.

When you connect

1. Check the network name with staff

Attackers sometimes create a hotspot with a convincing name such as "Airport_Free_WiFi" near the real one. Ask staff or check signs for the exact network name before joining.

2. Deal with the login page first

Many hotels and airports show a login or "accept terms" page (a captive portal). Most VPNs cannot connect until you complete it.

1. Connect to the Wi-Fi.
2. Complete the login page in your browser.
3. Then connect the VPN.

If the login page will not load, briefly pause the VPN, complete the page, and reconnect straight away.

3. Confirm the VPN is connected

Look for the VPN icon or the "Connected" message before you open email, banking or messaging apps.

While you are online

• Look for HTTPS (the padlock) on every site where you type anything.
• Avoid logging in to important accounts if the VPN will not connect. Use your phone's mobile data instead.
• Turn off file sharing and AirDrop "Everyone" mode so strangers on the network cannot see your device.
• Do not install updates or apps that pop up unexpectedly while on public Wi-Fi.
• Use two-factor authentication on email and banking, so a stolen password alone is not enough.

After you leave

• Forget the network in your Wi-Fi settings, so your device does not reconnect automatically next time.
• Turn off "auto-join" for public networks you will not use again.

Is a VPN enough on its own?

A VPN encrypts the connection between your device and the VPN server, which protects you from other people on the same Wi-Fi and from the hotspot owner. It does not protect you from phishing pages or weak passwords. Combine it with HTTPS, two-factor authentication and a password manager, and public Wi-Fi becomes a low-risk place to work.

Quick checklist to save

1. VPN installed and signed in before travelling
2. Auto-connect and kill switch on
3. Network name confirmed with staff
4. Login page first, then VPN
5. Padlock on every site
6. Forget the network when you leave

Need a VPN that works on your phone, laptop and tablet at once? Nova VPN Premium covers up to five devices.