VPN for public Wi-Fi: what changes on shared networks

What the person running the network sees, and what disappears from view.

The short answer

On shared Wi-Fi, a VPN stops the router and anyone else on that network from reading which pages you open. The network owner still sees that you are online and that you talk to one server. A tunnel does not defend you from a fake login page or a malicious app.

Who sits on a public network

An open cafe or hostel network is run by someone you do not know, and it is shared with strangers. The owner can see the destination of unencrypted requests and often keeps connection records. Another guest can sometimes try to read traffic when the network has no password or a widely known one.

Most sites now use TLS, which already hides page content. What remains visible without a tunnel is which sites you contact. With the tunnel on, that list becomes a single connection to our server.

What the tunnel handles on a shared network

  • It hides which sites and apps you contact from the router and from other guests.
  • It makes the connection one steady stream, so odd network-level tricks have less to work with.
  • It does not stop a "free Wi-Fi" login page from collecting what you type.
  • It does not protect a device that already has a malicious app on it.
  • It does not remove the need to confirm you joined the real network and not a lookalike with a similar name.

A short routine before you use any public network

  1. Ask the staff for the exact network name and join that one, not a similar one.

  2. Connect the tunnel before you open mail, banking or work accounts.

  3. Load a what-is-my-address page and look for the server's address rather than the cafe's.

  4. Skip any page that asks you to install something to get online.

  5. Turn the tunnel off only when you leave, and forget the network in your phone settings.

Campus, office and mobile networks

College and office networks are not strangers' networks, but they are still managed by someone who can see traffic and who sets rules. A tunnel hides the detail from the network, yet it does not cancel the policy you agreed to. Mobile data is run by your operator and works similarly: the operator sees that you connect to a server, not the pages inside. This section goes through each of those cases separately: Jio and Airtel, college Wi-Fi, Vi, BSNL and office Wi-Fi.

Where this service fits

If you would rather not take a seller's word, run the checks above yourself. Our servers are in Stockholm, Zurich, Osaka, Rotterdam and Singapore, India is not on our server list, and payment in the bot is in crypto only. We keep no logs.

Rules on VPN use differ between countries and keep changing; following them, and the terms of the network you join, is up to you. Editors read this page against the service's settings after a language tool helped prepare it.

Questions

Is a password-protected cafe network safe?

It is better than an open one, but everyone who knows the password shares it. The tunnel still helps because other guests cannot see your destinations.

Should I use mobile data instead of cafe Wi-Fi?

Mobile data avoids strangers on the same network. Your operator still sees where you connect, so the tunnel adds privacy there as well.

Will the tunnel make airport Wi-Fi slower?

It can add delay, since traffic takes an extra hop. Speed numbers are not something we print here.

What is a captive portal?

It is the login page that appears when you join a network. Pass it first, then start the tunnel, since many portals block outside connections until you sign in.

Does the tunnel work at my hostel if they block some sites?

It may, but rules on a managed network still apply to you. Read them first.

Can staff see I use a tunnel?

They can see a steady connection to one address. They cannot read what goes through it.

The bot hands you the link

Free to try and no sign-up. Try it on the network you really use.