Working Safely on Shared Wi-Fi

What can a stranger on the same Wi-Fi network actually see? Less than many people fear, and more than many people assume. Most websites and apps now encrypt what you send, so someone on the café network cannot simply read your email. But shared networks still create openings: fake networks with convincing names, laptops that share files with everyone nearby, devices that have not been updated in months, and screens that half the room can read.

The good news is that a short one-time setup and a handful of habits deal with most of it. This guide explains the risks in plain language and what to do about each. If you work for a company, check its security policy too; it may require specific tools.

What the real risks are

Forget the movie version of hacking. On shared networks, problems tend to come from a few ordinary places.

• Fake networks. Someone sets up a hotspot with a name like the café's or the coworking space's. If you connect to it, your traffic passes through their device.
• Open sharing settings. Laptops set up for a home network may share folders, printers or media with anyone on the same network.
• Outdated software. Known security holes in old operating systems and browsers are the easiest way in.
• Weak or reused passwords. If one account is compromised elsewhere, reused passwords let someone into others.
• The physical room. Someone reading your screen, overhearing a call, or walking off with a laptop left on a table.

A one-time setup

Do this once on your laptop and phone, and you are protected from most of the above wherever you work.

1. Turn on automatic updates for your operating system and browser, and install pending ones before you travel.
2. Make sure the firewall is on. Both major desktop operating systems include one; check it is enabled in settings.
3. Mark shared networks as public. When your laptop asks what kind of network it is, choose public. This usually turns off discovery and sharing automatically.
4. Turn off file and printer sharing and set nearby-sharing features to contacts only or off.
5. Turn on multi-factor authentication for email, cloud storage, banking and anything with client data. An authenticator app is generally stronger than text messages.
6. Use a password manager so every account has its own long, unique password.
7. Encrypt your disk using the built-in option on your laptop, so a stolen device does not mean stolen data.

Habits for every session

Once the setup is done, these take seconds each day.

• Confirm the exact network name. Ask staff or check the sign on the wall rather than picking the most likely-looking name from the list. Be wary of open networks with no password that appear next to the real one.
• Never click through certificate warnings. If your browser says a connection is not secure on a site you use every day, stop. Something may be wrong with the network.
• Turn off auto-join for networks you will not use again, and remove old ones from your saved list.
• Lock your screen every time you stand up, even for a minute. Set a short automatic lock as a backup.
• Use your phone's hotspot for the sensitive stuff. Banking, admin panels, or anything you would rather not run over a shared network can wait for your own connection. Our guide to internet in Tirana covers setting up a reliable mobile backup.

What a VPN does and does not do

A VPN is often presented as the answer to everything. It is a useful tool, but it helps to know its limits.

If your employer gives you a VPN, use it as instructed. If you are choosing your own, pick a reputable provider and remember that all your traffic now passes through them, so trust matters.

Protecting the physical side

In a café or coworking space, the person most likely to see your data is sitting behind you, not on the network.

• Mind your screen. Sit with your back to a wall when you work with client data, or use a privacy filter that makes the screen hard to read from an angle.
• Watch what you say. Client names, figures and personal details carry across an open room. Take sensitive calls in a phone booth or meeting room; our guide to taking video calls from a shared space has more on that.
• Never leave devices alone in public places. In a café, take your laptop with you. In a coworking space, use a locker for anything you leave overnight.
• Be careful with USB sticks and chargers you did not bring. Use your own cables and plug into a wall socket rather than an unknown USB port where possible.

Cafés versus coworking spaces

Both are shared networks, but they are not the same. A coworking space usually has a network set up and managed for members, often with a password that is not posted for passers-by, and staff you can ask. A café network is shared with every customer and anyone close enough to pick up the signal. Your habits should be the same in both places, but if your work regularly involves sensitive data, a managed network and a private room for calls make life easier. Our comparison of coworking and cafés looks at the wider trade-offs, and the directory of spaces lists which ones offer phone booths and lockers.