Public Wi-Fi is everywhere now. Airports, cafes, hotels, everywhere. Some people connect without thinking about what that actually means. The truth is, public networks are open to anyone, meaning some folks may be able to see what internet-enabled apps you use or websites you visit. The person running that Wi-Fi network can monitor traffic, as can the internet provider. If you’re worried about using a compromised public Wi-Fi network, a virtual private network, or VPN, could protect you against certain threats, like an adversary-in-the-middle attack.

VPNs keep your web traffic private and can make it look like you’re in another geographical location. But VPNs don’t make you anonymous, and they don’t erase your digital footprint entirely.

Let’s explore whether you really need a VPN on public Wi-Fi.

You may not need a VPN on public Wi-Fi, but it helps with privacy and access

When you use public Wi-Fi, the person or company running the network can see the domains you visit and how long you stay connected. Your traffic also moves through an internet provider, which can log your activity and share it with advertisers or partners. Meanwhile, your browser may continue to feed data to ad networks and trackers that operate on nearly every site you visit. Those ad networks and data trackers build profiles, track clicks and connect the dots between your browsing sessions, whether you’re at home or sitting in a cafe.

Many websites use secure connections, like Secure Sockets Layer or Transport Layer Security. But if a wireless network is compromised by a threat like an adversary-in-the-middle attack, a VPN could provide some protection by encrypting online data traveling between your device and a remote server to prevent snooping.

In addition to privacy and security benefits, VPNs let you make it look like you’re in another location. So if you need to access region-restricted content, like foreign Netflix libraries, a VPN could be helpful while on open Wi-Fi networks.

A VPN can boost your privacy by encrypting your traffic before it leaves your device. It keeps your connection private from anyone sharing the network or operating it. Websites you log in to may still know who you are because you’re using account credentials, and the trackers built into your browser still follow you around, so it’s not a cure for everything that tracks you online, but on public Wi-Fi, using a VPN certainly helps.

Privacy vs. anonymity (people get this wrong)

Privacy and anonymity aren’t the same thing, even though some folks tend to use them interchangeably. Privacy means others can’t see what you’re doing. Anonymity means being unidentifiable.

A VPN provides privacy by encrypting your connection and hiding your public IP address from apps and websites. But a VPN doesn’t make you anonymous. The moment you log in to a site, pay for something or accept cookies, your identity can be connected to your activity. Your browser setup, your phone and the apps you use all leave digital footprints that point back to you. Governments and large companies have all the tools necessary to connect those dots whenever they want.

Yes, a VPN does keep your browsing safe from snooping, but real anonymity online doesn’t exist.

What a VPN can’t hide, even on public Wi-Fi

A VPN keeps your connection private, but it doesn’t make you invisible, no matter how much we’d like that. In fact, there are still a lot of things people can see even if you’re using a VPN.

• Websites and apps you log in to: The moment you sign in, you’re identified. Google, Instagram, your bank and every other company knows exactly who you are when you log in with account credentials, VPN or not. A VPN only conceals where you’re logging in from in these situations.
• Cookies, trackers and browser fingerprints: A VPN hides your IP, but it doesn’t touch the data inside your browser. Cookies, scripts and fingerprints still track what you do and where you go. Some VPNs, including ExpressVPN, NordVPN and Surfshark, offer ad blockers and cookie pop-up blockers. But VPNs don’t protect against trackers and cookies by default.
• Your VPN provider: Your internet provider can’t see inside the encrypted tunnel that a VPN creates, but your VPN provider can -- even if it chooses not to. A reliable VPN company should have a no-logs policy and outside audits to back up claims that your browsing history isn’t being recorded. It's crucial to trust your VPN provider to not monitor or log your web traffic -- all of our top-rated VPNs have been fully vetted.
• Payment providers: Every purchase you make through a card or digital wallet may be linked directly to your identity. A VPN encrypts the connection but doesn’t hide the transaction.
• Big platforms: Companies like Google and Meta track users across their own ecosystems while you’re logged in. They don’t need your IP to know who you are.
• Governments: A VPN makes surveillance harder, but nowhere near impossible. Agencies with the right tools can still connect activity to individual users.

Make no mistake about it. A VPN is a good defense on public Wi-Fi and keeps your traffic private, while also letting you make it look like you’re in another location. But that’s about it.

When a VPN is enough

A VPN is enough for most daily use. If you’re on Wi-Fi in an airport, cafe, hotel or any place you’re connected to public Wi-Fi, it keeps the people running the network and internet providers from seeing what sites you visit. It’s also fine for checking email, using social media or getting light work done when you’re away from home.

A VPN helps cut down on basic tracking by making it harder for advertisers to link your activity to your home IP. On a phone, it gives you quick protection that works wherever you connect. For routine browsing, that’s usually all you need.

When a VPN is not enough

If you’re a journalist, activist or whistleblower with advanced privacy needs, a VPN alone won’t completely protect your identity. A VPN won’t stop companies like Google or Meta from tracking you through apps, cookies and logins. Using the same browser every day with the same data can give you away, regardless of your public IP address.

In countries that inspect or restrict VPNs, the limits are even clearer. You need stronger tools. Use Tor, a privacy-focused browser, tracker blockers, alternate email accounts and safer payment methods. If you want to really beef up your privacy, you can even use Tor in conjunction with a VPN, or a VPN with a proxy server to try masking the fact that you’re using a virtual private network.

Certain VPNs, including NordVPN and Proton VPN, offer Tor over VPN servers that enhance your privacy even more than a standard VPN connection. VPNs, Tor and proxies all have different capabilities, so which one makes sense to use depends on your needs. You may also want to take advantage of privacy- and security-focused apps or services, like encrypted messaging apps, secure file storage and pseudoanonymous payment methods like cryptocurrencies. It’s work, but that’s what it takes to bolster your privacy.

How to pick a VPN if you’re mainly using public Wi-Fi

If you mainly use a VPN to stay private on public Wi-Fi, focus on the basics. Pick a service that has been independently audited and has a proven no-logs policy. That means it’s likely not keeping records of what you do online. Governments in some countries can force VPN providers to hand over that data, so you may want to consider VPN company jurisdiction as well as local laws.

Make sure your VPN includes a kill switch and Domain Name System leak protection. Those features stop your data from slipping out if the connection drops or the network suddenly changes. A good VPN can also be configured to connect automatically when you join an unsecured Wi-Fi network, so you’re not depending on memory to stay protected.

Strong mobile apps matter too, since a lot of people connect on their phones as often, if not more often, as their laptops. If you’re seriously concerned about staying as private as possible, choose a provider that lets you pay without sharing unnecessary personal details, such as Mullvad.