Great question. Public Wi-Fi really is a double-edged sword. Super convenient, but risky if you treat it casually.
One thing that's worked well for me is thinking about public Wi-Fi the way people in China think about the internet behind the GFW. You don't walk onto an open network raw. You bring a ladder
miǎn fèi VPN 梯子 with you. In practice, that ladder is a solid VPN.
When I connect to café or airport Wi-Fi, the VPN goes on first, before email, before social media, before anything sensitive. It creates an encrypted tunnel, so even if someone is sniffing traffic on the same network, they’re basically staring at noise. That one habit alone turns public Wi-Fi from “high risk" into “manageable.”
A few other practical habits that helped me:
- Avoid logging into banks or work dashboards unless the VPN is active.
- Disable auto-connect to open networks so your device doesn't jump onto sketchy hotspots.
- Use HTTPS-only mode in the browser and keep OS updates current.
- Log out of accounts when you're done, especially on shared networks.
- Public Wi-Fi isn't the enemy. Blind trust is. Treat it like crossing a river. With the right ladder and a bit of awareness, you get across safely instead of getting swept away.