VPN for coffee shops?

Bubble1971

Hi there, when I go into coffee shops, pubs etc I like to browse the web but should I have a VPN? I don’t want anyone to get the account details or anything else from the sites I’m using. If I’m using Amazon, eBay via the apps, can anyone steal my info? I always use Safari if I’m browsing so would I be better to use a different browser instead? Thanks in advance. Sam ☺️

Neil_Jones

To be honest if you're that paranoid don't log into websites on public Wifi.  VPN doesn't protect you from viruses or malware

Note that sitting on an open public WiFi network does not (generally) mean they can hack into your computer and steal stuff you have saved there. In order for it to be "visible" to the random Joe sitting observing everything, it needs to be sent or received while you're sitting there. Exceptions to this are if you haven't applied the updates to your computer on time, and other such things... but that's a different discussion.

The browser of choice is pretty much irrelevant to the entire argument.

Bubble1971

I just want to be safe, I’m not particularly paranoid but I don’t know if it’s possible for anyone to get my personal details when it pops up on my screen that I’m joining an unsecured network. Thanks 

[Deleted User]

A VPN is one of the many tools that can make public wifi more secure, but if you are going to that level of security (I do) then you should already be well protected in other ways before entering the top levels of security. 

Most people don't do the basics for security that are totally free before spending money on a VPN because of the glossy VPN adverts. Security doesn't need to cost. In fact the majority of the websites and apps you use will probably be using HTTPS which is already encrypted.

Before considering a VPN you should do some free things that improve security: (it is MSE after all)

1. Ensure your device and all apps are up to date with all the latest updates and security patches.

2. Use 2 factor authentication on any online account that allows it - so even if somebody does sniff your account details - they aren't going to get far. Especially your email account as this is the gateway to password resets.

3. Use different passwords for every single account you access - so if somebody does steal a password, it will only be one account compromised. Ensure all passwords are long and complex, use a password manager if it helps.

4. Only browse websites with HTTPS - this will be on be default for the majority, it encrypts traffic and basically does the same as a VPN.

5. Enforce SSL as mandatory for you email clients to ensure any communications are end to end encrypted.

6. Select randomised MAC address when using public wifi (more for privacy than security)

7. For non-mobile devices, ensure your firewall is on and select "public network" in your windows settings if using a PC.

8. Don't use public wifi if you can avoid it - your device is on an unknown network and can be discovered and probed by any other device on that network, even if you are not transmitting or receiving data at the time. You can probably buy 4G/5G data allowance to serve you needs cheaper than a VPN.

If you haven't done all of the above, put your bank card away and don't even bother with a VPN until you have.

If you have done all the above and still want that extra level of security then it doesn't need to cost a penny to get a VPN to use on public wifi if you have the right equipment already.

Some decent home routers from Netgear, Asus, Linksys and TP Link can run a VPN server so whenever you are away from home you can use that as a VPN for free - I do. Basically it connects my phone securely to my home router fully encrypted and all my internet traffic is dealt with by my home broadband. 

I'm not even going to go into recommending a paid VPN provider although I do have a personal favourite that I use for specific purposes. With all due respect, I doubt that you have done all the free things above which will provide a good level of protection for free and provide good all round security protection whether or not on public wifi. 

IvanOpinion

I remember many a happy evening sitting in a coffee shop piggy backing on somebody else's wifi so that I didn't have to pay for it then all those darn security rules came about and spoiled it.

The one thing I would add to Talmansix's post is that if you use a password manager DO NOT leave it logged in.  Nearly every personal PC I get in for a bit of work seems to have the password manager set to auto log in - that gives me immediate access to all passwords. Fortunately our company policy automatically logs users out of the password manager each time they close all browser windows.

Bubble1971

[Deleted User] said:

A VPN is one of the many tools that can make public wifi more secure, but if you are going to that level of security (I do) then you should already be well protected in other ways before entering the top levels of security. 

Most people don't do the basics for security that are totally free before spending money on a VPN because of the glossy VPN adverts. Security doesn't need to cost. In fact the majority of the websites and apps you use will probably be using HTTPS which is already encrypted.

Before considering a VPN you should do some free things that improve security: (it is MSE after all)

1. Ensure your device and all apps are up to date with all the latest updates and security patches.

2. Use 2 factor authentication on any online account that allows it - so even if somebody does sniff your account details - they aren't going to get far. Especially your email account as this is the gateway to password resets.

3. Use different passwords for every single account you access - so if somebody does steal a password, it will only be one account compromised. Ensure all passwords are long and complex, use a password manager if it helps.

4. Only browse websites with HTTPS - this will be on be default for the majority, it encrypts traffic and basically does the same as a VPN.

5. Enforce SSL as mandatory for you email clients to ensure any communications are end to end encrypted.

6. Select randomised MAC address when using public wifi (more for privacy than security)

7. For non-mobile devices, ensure your firewall is on and select "public network" in your windows settings if using a PC.

8. Don't use public wifi if you can avoid it - your device is on an unknown network and can be discovered and probed by any other device on that network, even if you are not transmitting or receiving data at the time. You can probably buy 4G/5G data allowance to serve you needs cheaper than a VPN.

If you haven't done all of the above, put your bank card away and don't even bother with a VPN until you have.

If you have done all the above and still want that extra level of security then it doesn't need to cost a penny to get a VPN to use on public wifi if you have the right equipment already.

Some decent home routers from Netgear, Asus, Linksys and TP Link can run a VPN server so whenever you are away from home you can use that as a VPN for free - I do. Basically it connects my phone securely to my home router fully encrypted and all my internet traffic is dealt with by my home broadband. 

I'm not even going to go into recommending a paid VPN provider although I do have a personal favourite that I use for specific purposes. With all due respect, I doubt that you have done all the free things above which will provide a good level of protection for free and provide good all round security protection whether or not on public wifi. 

Thank you for that, it was really helpful. I had a lot of them covered but have looked at and updated some things I didn't know about. I use safari as a browser as I have all apple products, so it's easier. 

I have sky broadband, with their standard router, at home and it doesn't seem to have a VPN that I can use away from home. I have health issues and I'm trying to get out and about more so coffee shops are where I go. So I'd really appreciate any advice on a free or paid VPN so that doesn't have to be a concern too. 

forgotmyname

With new exploits being found all the time if your worried you should not do it.

I will only use my home wifi or the phones data plan.  I would not do banking or anything money related
on a public network with or without a VPN.

JJ_Egan

Free VPN no not really .

Personally i would never ever use coffee shops wifi for banking or shopping , VPN or not .

Quite happy to use coffee shops wifi for general browsing without my VPN turned on .

[Deleted User]

Bubble1971 said:

Deleted_User said:

A VPN is one of the many tools that can make public wifi more secure, but if you are going to that level of security (I do) then you should already be well protected in other ways before entering the top levels of security. 

Most people don't do the basics for security that are totally free before spending money on a VPN because of the glossy VPN adverts. Security doesn't need to cost. In fact the majority of the websites and apps you use will probably be using HTTPS which is already encrypted.

Before considering a VPN you should do some free things that improve security: (it is MSE after all)

1. Ensure your device and all apps are up to date with all the latest updates and security patches.

2. Use 2 factor authentication on any online account that allows it - so even if somebody does sniff your account details - they aren't going to get far. Especially your email account as this is the gateway to password resets.

3. Use different passwords for every single account you access - so if somebody does steal a password, it will only be one account compromised. Ensure all passwords are long and complex, use a password manager if it helps.

4. Only browse websites with HTTPS - this will be on be default for the majority, it encrypts traffic and basically does the same as a VPN.

5. Enforce SSL as mandatory for you email clients to ensure any communications are end to end encrypted.

6. Select randomised MAC address when using public wifi (more for privacy than security)

7. For non-mobile devices, ensure your firewall is on and select "public network" in your windows settings if using a PC.

8. Don't use public wifi if you can avoid it - your device is on an unknown network and can be discovered and probed by any other device on that network, even if you are not transmitting or receiving data at the time. You can probably buy 4G/5G data allowance to serve you needs cheaper than a VPN.

If you haven't done all of the above, put your bank card away and don't even bother with a VPN until you have.

If you have done all the above and still want that extra level of security then it doesn't need to cost a penny to get a VPN to use on public wifi if you have the right equipment already.

Some decent home routers from Netgear, Asus, Linksys and TP Link can run a VPN server so whenever you are away from home you can use that as a VPN for free - I do. Basically it connects my phone securely to my home router fully encrypted and all my internet traffic is dealt with by my home broadband. 

I'm not even going to go into recommending a paid VPN provider although I do have a personal favourite that I use for specific purposes. With all due respect, I doubt that you have done all the free things above which will provide a good level of protection for free and provide good all round security protection whether or not on public wifi. 

Thank you for that, it was really helpful. I had a lot of them covered but have looked at and updated some things I didn't know about. I use safari as a browser as I have all apple products, so it's easier. 

I have sky broadband, with their standard router, at home and it doesn't seem to have a VPN that I can use away from home. I have health issues and I'm trying to get out and about more so coffee shops are where I go. So I'd really appreciate any advice on a free or paid VPN so that doesn't have to be a concern too. 

Bearing in mind all the above advice from other comments:

As an Apple user you could use the new "Private Relay" function which basically acts as a VPN for the Safari browser - it is only available on iOS 15 and is still in Beta. Is only available if you have an iCloud subscription - ie pay for more storage.

https://support.apple.com/en-gb/HT212614

I'm still a bit reluctant to name a VPN provider, sorry for being obtuse, I feel like it is recommending a used car salesman, some will have a great experience if they buy the right car but others won't and that's down to the choice of car, not the salesman. I despise the marketing and pricing around VPN's.

Any of the big names VPN's will be ok for your purposes - some reviews here from a website that I generally trust for reviews:

https://www.techradar.com/uk/vpn/best-vpn

They are so annoying though, can be like £10 for a month or equivalent to £3 a month if you buy 3 years worth.

My personal choice though is not mentioned in that review but it is very specific to my purposes because it allows the use of the very fast Wireguard protocol which can max out my 500mbps internet on a Raspberry PI unlike Open VPN and allows port forwarding - neither are relevant to coffee shop wifi though.

But what I do love is the nice flat pricing structure with no gimmicks or offers -  €5 per month (£4.45) regardless of how long you subscribe, does not ask for any personal details at all (not even your email address) can pay by crypto for 10% discount so totally anonymous. They also provide the VPN behind the Mozilla and Malwarebytes branded VPN's and are among the top 5 providers recommended by the not-for-profit Freedom Press for privacy.

Oh and they have the all important "killswitch" on the apps that prevents leakage outside the VPN - something to look for.

.....Mullvad

But still, this is MSE - and unless you have a very specific reason for a VPN, keep your money in your pocket and follow all the above advice in previous comments instead.

Myser

If you don't mind spending a little for the sake of security, as mentioned above an option is to use a MiFi device which will allow you to connect your phone/tablet/laptop to it and browse via the mobile network.  You can keep the device in your bag or pocket.

You may be able to pick up something like this cheaper if you search online:

https://www.argos.co.uk/product/9483116 

Then purchase a PAYG data loaded SIM every few months.

debitcardmayhem

Myser said:

If you don't mind spending a little for the sake of security, as mentioned above an option is to use a MiFi device which will allow you to connect your phone/tablet/laptop to it and browse via the mobile network.  You can keep the device in your bag or pocket.

You may be able to pick up something like this cheaper if you search online:

https://www.argos.co.uk/product/9483116 

Then purchase a PAYG data loaded SIM every few months.

yeah but for no cost just use a relevant sim in your phone assuming it has wifi or usb tethering , I use my phone for tethering on my giffgaff sim 15Gb / mth including free calls/texts £10/mth and I am sure there are other better deals out there but I  get a good signal (usually!! thx O2) where I need it.