Public Wi-Fi Safety Guide for Remote and Hybrid Workers
TL;DR: Public Wi-Fi can expose work data if you connect to the wrong network or use unencrypted services. HTTPS, updates, account protection, and your employer's access policy are the basics; a VPN may add protection when required. You do not need to be a security expert. You just need to stop assuming the Starbucks network is safe.
What You Need
Before you start, gather these tools and bits of information. Most are free or already available to you.
- A VPN. Either a paid personal VPN (Mullvad, ProtonVPN, and IVPN are well-regarded options) or a business VPN provided by your employer. If your company uses Microsoft 365, ask your IT contact what remote-access tools and policies it provides.
- Your device's OS fully updated. Seriously. Unpatched devices are the low-hanging fruit on public networks.
- A cellular data plan as a backup. Your phone's hotspot is almost always safer than the coffee shop router. Keep it in your back pocket.
- HTTPS-everywhere awareness. Modern browsers do a decent job here, but you should know what to look for.
- A password manager. Use it to create unique passwords; it does not replace HTTPS or make a public network trustworthy.
- Two-factor authentication (2FA) enabled on every work account. If you have not done this yet, stop reading and do it now. Come back after.
Step 1: Verify the Network Before You Connect
This sounds obvious. People skip it every single day.
Rogue hotspots, sometimes called evil twin networks, are a real attack method. Someone sets up a hotspot named "Starbucks Free WiFi" right next to the real one. Your laptop connects automatically, and now a stranger is sitting between you and the internet.
What to do: Ask an employee for the exact network name and, if available, the password. A network with a password is slightly better than an open one, but not dramatically so. A shared password does not prove you joined the legitimate network or that your traffic is private from everyone else using it.
Also check your device's saved networks list. If your laptop has auto-connect enabled for networks it has seen before, it may quietly join a spoofed clone of a network you visited months ago. Disable auto-connect for any public network.
Step 2: Turn On Your VPN First, Then Open Your Browser
Order matters here. A VPN encrypts your traffic before it leaves your device. If your employer requires a VPN, connect it before opening company systems. HTTPS can encrypt web traffic even before a VPN connects, but other traffic and company policy may differ.
Make it a habit: connect to Wi-Fi, activate VPN, then open anything.
A VPN encrypts traffic between your device and the VPN server. It can reduce what a local network operator sees, but it does not replace HTTPS, protect against phishing, or make every destination trustworthy.
If your employer has not set up a business VPN and you handle sensitive client or company data remotely, that is worth flagging. Our team at Fix My PC Store helps South Florida businesses set up proper remote-access infrastructure through managed IT services. A business VPN configured correctly is a different animal from a personal one.
Step 3: Check That Every Site Uses HTTPS
Look at your browser's address bar. Check that the address starts with "https://", especially before logging in or submitting data. Browser security indicators vary; heed certificate warnings.
HTTPS means the connection between your browser and that website is encrypted, even if the Wi-Fi network itself is not. An attacker on the same network can see that you are visiting a site, but they cannot read what you are sending or receiving.
An HTTP connection is not encrypted by HTTPS, so do not enter passwords or sensitive information on that page. In 2025, most major sites have moved to HTTPS, but not all. If you land on an HTTP page and need to log in, do not. Either wait until you are on a trusted network or use your phone's hotspot.
Use your browser's built-in HTTPS-only mode when available. EFF retired the HTTPS Everywhere extension in 2023.
Worried your business is one click from a breach? Get a security review
Step 4: Use Your Phone's Hotspot for Anything Sensitive
Not everything needs to go through the coffee shop router. A phone hotspot avoids the coffee shop's shared Wi-Fi network, though your mobile carrier and the websites you use still matter. Keep HTTPS and account protections on.
For anything involving:
- Client contracts or proposals
- Financial accounts or payroll
- HR systems or employee records
- Your company's internal tools or admin panels
...just use your hotspot. It takes three seconds to switch. The slight data usage is worth it.
Android and iOS both make hotspot setup straightforward. Android gives you a bit more control over the connection type and band, if you want to optimize it. iOS just works, no configuration required. (Yes, that was a compliment to iOS. Mark your calendars.)
Step 5: Disable File Sharing and AirDrop/Nearby Share
When you are on a trusted home or office network, file sharing features are convenient. On a public network, they are an open door.
On Windows: Go to Settings, then Network and Internet, then the properties of the current connection. Set the network profile to "Public." This tells Windows to lock down sharing automatically.
On Mac: Go to System Settings, then General, then Sharing. Turn off everything you do not actively need.
AirDrop (Mac/iPhone/iPad): Set it to "Contacts Only" or "No One" when in public. "Everyone" mode has been used in real-world attacks, including on airplanes and in busy public spaces.
Android's Nearby Share: Same principle. Restrict it when you are out.
This step takes two minutes and people almost never do it.
Step 6: Log Out and Forget the Network When You Leave
When you pack up and leave, do two things.
First, log out of sensitive accounts rather than just closing the tab. Especially on shared or borrowed devices, but honestly as a general habit.
Second, tell your device to forget the public network. Otherwise, if you walk past that location again, your device may reconnect automatically before you even notice, and sit there chatting with the network while your screen is locked.
On both Windows and Mac, you can right-click or select a saved network and choose to forget it. On iOS and Android, tap the network in your Wi-Fi settings and select "Forget."
Common Mistakes
Assuming a password means it is safe. A coffee shop Wi-Fi password just means you have to ask for it. Every other customer has it too. The network is still shared.
Turning on the VPN after starting work. See Step 2. The order matters.
Trusting "Secure" badges on networks. The network name or a sign saying "Secure Wi-Fi" means nothing technically. It is marketing, not a security configuration.
Ignoring certificate warnings. If your browser shows a certificate error, do not click through. It may signal a misconfiguration or an attack; use another connection and verify the site. Close the tab.
Not having 2FA on work accounts. Multi-factor authentication adds a valuable layer if a password is compromised, though it does not stop every account attack. Enable it everywhere.
Working on confidential stuff in plain view. This is a physical security issue, not a network one, but it belongs here. A privacy screen filter for your laptop is cheap and useful in open spaces like airport terminals or co-working lobbies. Someone photographing your screen over your shoulder is not a movie plot.
Skipping updates because it is inconvenient. Outdated operating systems and browsers have known vulnerabilities that attackers on shared networks can sometimes exploit directly. If your laptop is overdue for an update or running into performance issues, our laptop repair and tune-up service can get it sorted fast.
If you manage a team of remote or hybrid workers and want a consistent policy for all of this, that is exactly the kind of thing our business cybersecurity work covers. One person doing it right is good. A whole team doing it consistently is what actually reduces your risk.
And if something goes sideways on a public network, whether it is a suspicious login, a strange redirect, or a device acting oddly after a cafe session, do not wait. Our remote support team can dig into it quickly without you having to bring anything in.
Bottom Line
Public Wi-Fi in South Florida is not going away. Boca co-working spaces, West Palm Beach cafes, Palm Beach Gardens hotel lobbies. Remote and hybrid workers live in these places.
The risks are real but manageable. HTTPS, software updates, strong account protection, a verified network, and your employer's remote-access rules reduce common risks. A hotspot or VPN may help in specific situations. None of it requires technical expertise. It just requires doing it consistently.
If you want a more structured approach for your business, whether that means a properly deployed VPN, endpoint policies, or ongoing monitoring, reach out to us. That is what we do for small and mid-sized businesses across Palm Beach and the Treasure Coast.
Worried your business is one click from a breach?
Get a straight-talk security review from a local team that has cleaned up the aftermath more times than we'd like.
