Quick answer
If you use public Wi-Fi in the UK, turn your VPN on before you sign into email, banking, work tools or shopping accounts. A VPN encrypts your traffic between your device and the VPN server, which makes local snooping much harder on open or badly managed networks. It does not make a fake login page safe, and it does not stop you handing data away to the wrong site, so basic caution still matters.
Why public Wi-Fi is still worth taking seriously
Most common risk
Open networks
Some venues still offer Wi-Fi with weak setup, old hardware, or shared passwords that travel far beyond the building.
- Other users can sit on the same network
- Captive portals are often poorly maintained
- Session hijack attempts still happen
Easy to forget
Auto-join behaviour
Your phone or laptop may reconnect to remembered networks automatically when you are distracted or in a rush.
- Common in stations, hotels and chain cafes
- Easy to miss if you are multitasking
- Creates risk before you even open a browser
False confidence
Normal-looking portals
People often trust a network because the login page looks polished, even when the setup behind it is weak.
- A branded splash page is not security
- HTTPS helps, but not with every threat
- Phishing still works on public Wi-Fi
In Britain, the risky moments are usually ordinary ones: station Wi-Fi, hotel logins, and quick coffee-shop work sessions.
What a VPN protects - and what it does not
A VPN creates an encrypted tunnel from your device to the VPN provider. On public Wi-Fi, that means someone else on the same local network should not be able to casually inspect the websites you open, the services you use, or the data moving between your device and the VPN server.
That matters most when the network itself is poor, badly segmented, or simply not trustworthy. Hotel Wi-Fi is the obvious UK travel example: useful, but not something to treat like home broadband.
Use the right mental model: a VPN protects the connection. It does not protect you from typing your password into a fake Microsoft 365 page, approving a scam banking prompt, or downloading a malicious attachment because you are tired and rushed.
- Good fit: banking, work dashboards, cloud storage, and account logins on networks you do not own.
- Still useful: general browsing in airports, stations, libraries and chain coffee shops.
- Not enough on its own: phishing, fake QR codes, scam sign-in pages, and weak passwords.
The cleanest setup for most UK users
You do not need a complicated routine. The best setup is the one you will actually keep using when you are busy.
1
Pick a VPN with a reliable kill switch
If the connection drops for a moment, a kill switch helps stop traffic falling back onto the raw public network without you noticing.
2
Disable auto-join for networks you do not trust
That one setting removes a surprising amount of background risk, especially on iPhone, Android and laptops that move between stations, hotels and cafés.
3
Connect to Wi-Fi, then launch the VPN immediately
Do it before opening email or work apps. If the Wi-Fi needs a splash page, finish that step first and then reconnect the VPN straight away.
4
Prefer local or nearby servers unless you need a specific region
For ordinary security use, a nearby UK or Western Europe server is usually the best balance of speed and stability.
5
Use biometrics and two-factor authentication anyway
A VPN is strongest when it sits alongside sensible account hygiene. Treat it as one protective layer, not the whole plan.
Common mistake: people connect to public Wi-Fi, open a few apps, and only turn the VPN on later. By that point some traffic, tracking requests, or sign-in attempts may already have gone over the network unprotected.
Where a public Wi-Fi VPN matters most
Hotels are the clearest case because the network is shared across lots of guests and devices. Trains, stations, airports and cafés matter too because people reconnect quickly and open work or finance apps while distracted.
Cafe work sessions
Turn the VPN on before Slack, email, Notion, password managers or client dashboards. These are the sessions where small mistakes add up.
Hotels and holiday lets
Assume the network is convenient, not trustworthy. A VPN is especially useful when you are logging into banking, travel accounts or work systems.
Stations and airports
These environments are full of distraction. The risk is not only the network itself, but how quickly people click through prompts and login pages.
Shared conference Wi-Fi
Good for a VPN because there are many unknown devices nearby and lots of short-lived connections happening at once.
Three mistakes that still catch people out
Three traps still catch people: trusting the venue instead of the network, assuming HTTPS solves everything, and treating a VPN like a substitute for judgement.
- Do not scan random QR codes for Wi-Fi unless you trust the venue.
- Do not ignore certificate warnings because you are in a hurry.
- Do not leave file sharing or AirDrop-style discovery wider open than necessary on public networks.
If privacy is your main priority, read our best VPN for privacy in the UK guide next. If you travel often, the travel VPN guide is the better follow-on.
Public Wi-Fi VPN FAQ
Should I use a VPN on every public Wi-Fi network?
Yes, if you have one. It is a low-friction habit that makes the most sense when you are signing into accounts, handling work documents, or using networks you did not set up yourself.
Is mobile data safer than public Wi-Fi?
In general, yes. If you only need a quick secure connection, tethering from your phone can be simpler than trusting a public hotspot. Many people still keep a VPN on for privacy and consistency either way.
Can a VPN stop phishing on public Wi-Fi?
No. A VPN protects the connection, not your decision-making. If the page is fake, the VPN does not magically make it legitimate.
What is the best server location for public Wi-Fi use?
Usually a nearby UK server, unless you need another region for access reasons. Closer servers tend to feel faster and more stable for ordinary browsing, work and banking.
Need help choosing the right VPN first?
If your main goal is safer everyday browsing on public networks, start with privacy-first picks and then compare the shortlist.