Imagine you are sitting in a cafΓ© with your laptop open, and a sign reads “Free Wi-Fi β No Password.” You connect and open your banking app. That is exactly where the danger begins β and most people aren’t even aware of it. Securing your connection on public Wi-Fi is just as important these days as locking your front door. In India, free public Wi-Fi is available everywhere β at railway stations, airports, coffee shops, malls, and university campuses. And everywhere, hackers are looking for people who connect without a second thought.
This guide is for anyone who uses public networks on a Windows PC or Android phone and wants to keep their privacy and data safe. No technical jargon β everything is explained in simple language, step-by-step.

What is the real danger of public Wi-Fi?
First, it is important to understand why public networks are dangerous. When you connect to an open Wi-Fi network, anyone on the same network can intercept your data.
The most common attacks that occur on public Wi-Fi are:
- Man-in-the-Middle (MITM) Attack β A hacker positions themselves between you and the website to read all the data β passwords, OTPs, banking details, and everything else.
- Evil Twin Attack β A hacker creates a fake Wi-Fi hotspot with a name that closely resembles a legitimate one (e.g., “CCD_Free_Wi-Fi” instead of “CCD Free Wi-Fi”), and you connect to it.
- Packet Sniffing β Data being transmitted over the network is intercepted and read.
- Session Hijacking β Your active website sessions are hijacked.
- Malware Distribution β Certain networks attempt to install malware on your device.
Railway Wi-Fi, Airport Wi-Fi, and Jio-BSNL hotspots are very popular in India, yet very few people connecting to them know how to secure public Wi-Fi.
Ways to secure public Wi-Fi on a Windows PC
Step 1: Set the Network Type to “Public”.
This is the first and most important step. When you connect to a new Wi-Fi network for the first time, Windows asks, “Is this a public or private network?”
Always select “Public Network”.
This causes Windows to automatically:
- It turns off file and printer sharing.
- Network discovery is disabled β meaning other devices cannot see your PC.
- Windows Firewall switches to strict mode.
Change this if ‘Private’ was selected previously:
- Open Settings (Win + I).
- Go to Network & Internet > Wi-Fi.
- Click on the name of the connected network.
- Select ‘Public’ under Network profile type.
Step 2: Keep Windows Firewall turned on
Windows Firewall is your first layer of protection. Never turn it off β especially on public networks.
Check this:
- Settings > Windows Security > Firewall & network protection.
- Check if the Firewall is turned on for the Public network.
- If it is off, turn it on immediately.
Step 3: Turn off Network Discovery and File Sharing
Go to Control Panel > Network and Sharing Center > Advanced sharing settings.
In the Public section:
- Turn off network discovery β β
- Turn off file and printer sharing β β
Save the changes. Now, no other user can see your PC on the network.
Step 4: Use only HTTPS websites.
Whenever you are on public Wi-Fi, make sure to check for “https://” in the browser’s URL bar. HTTPS provides an encrypted connection that prevents data from being intercepted.
Install the HTTPS Everywhere extension:
- Available on Chrome, Firefox, and Edge.
- Created by the EFF (Electronic Frontier Foundation).
- Download: eff.org/https-everywhere β completely free.
- It automatically redirects HTTP to HTTPS.
Step 5: Turn off Auto-Connect Wi-Fi
Windows automatically connects to any known or open network. This can be very dangerous.
Steps to turn off auto-connect:
- Click the Wi-Fi icon in the taskbar.
- Click the > arrow next to the connected network.
- Uncheck the “Connect automatically” checkbox.
Alternatively, go to Settings > Network & Internet > Wi-Fi > Manage known networks and ‘Forget’ old public networks.
Step 6: Keep Windows Update enabled.
It may seem tedious, but it is essential. It is easy to be attacked via unpatched vulnerabilities on public networks.
- Settings > Windows Update > Check for updates.
- If there are pending updates, install them before using public Wi-Fi.
- Always keep Windows Defender updated β this free antivirus provides real-time protection.
Step 7: Turn off Shared Folders and Remote Access
If you ever enabled folder sharing on your home network, disconnect it on a public network.
Quick check:
- Control Panel > Programs > Turn Windows features on or off.
- Disable “SMB 1.0/CIFS File Sharing Support”.
- This old protocol is a favorite among hackers.
Ways to secure public Wi-Fi on an Android phone
Step 1: Verify First β Connect to the Genuine Network
“Evil Twin” attacks are very common in India. Before connecting to McDonald’s Wi-Fi, ask the staff for the exact network name.
Red flags that indicate a fake network:
- It does not ask for a password (whereas a real network requires one).
- There is an extra space or a spelling mistake in the network name.
- The signal is very strong, but no device is visible nearby.
Step 2: Check Network Type and Privacy Settings on Android
Android 10+ includes a hidden feature: Randomized MAC Address. It displays a fake MAC address for your device on every Wi-Fi network, making tracking difficult.
To enable it:
- Tap on Settings > Wi-Fi > Connected network name.
- Look for the Advanced or Privacy section.
- Keep the ‘Use randomized MAC’ option enabled β it is on by default in Android 10+.
Step 3: Turn off Auto-Join / Auto-Connect
Go to Settings > Wi-Fi and tap on the network name. Turn off the Auto-connect or Auto-join toggle.
Alternatively, go to the list of known networks and ‘Forget’ old public networks.
Step 4: Do not open sensitive apps on public Wi-Fi at all.
This is the most practical advice. Never do these things on public Wi-Fi:
- Net Banking app login.
- UPI transactions (PhonePe, GPay, Paytm).
- Social media password change.
- Sensitive attachments in email.
- Government portals (DigiLocker, Income Tax).
Use mobile data for these tasks β it is more secure.
Step 5: HTTPS Check Browser Extension
Look for the padlock (π) icon in the address bar on Android Chrome. If it says “Not Secure,” do not enter any personal information on that site.
Firefox Focus (free) is a privacy-focused browser that automatically prefers HTTPS.
- Download: Google Play β Firefox Focus
The most important security β use a VPN.
A discussion on securing public Wi-Fi is incomplete without mentioning VPNs. A VPN (Virtual Private Network) encrypts your entire internet traffic.
When you turn on a VPN:
- Your data passes through an encrypted tunnel.
- Hackers see only encrypted gibberish in the intercepted data.
- Your real location and IP address are hidden.
- Even your ISP and network admin cannot see what you are doing.
Best Free and Paid VPN Options:
Proton VPN (Free + Paid)
- No-logs policy.
- Based in Switzerland β strong privacy laws.
- Unlimited data on the free plan β this is rare.
- Available on both Windows and Android.
- Website: protonvpn.com β Free; plus $4.99/month.
Windscribe VPN (Free + Paid)
- 10GB/month in the free plan.
- Ad and tracker blocking built-in.
- Windows, Android, Browser extension.
- Website: windscribe.com β Free; Pro $9/month.
Mullvad VPN (Paid but best for privacy)
- Account number-based β no email required.
- Flat pricing of β¬5/month.
- Website: mullvad.net
NordVPN (Paid β most popular)
- Double VPN, Threat Protection.
- The most widely used in India.
- Website: nordvpn.com β $3.39/month (2-year plan).
Note: Some free VPNs sell your data themselves. Use only trusted VPNs β Proton VPN and Windscribe are the safest free options.
For Advanced Users β Enable DNS-over-HTTPS
DNS tells your browser the IP address of a website. On public Wi-Fi, DNS requests are unencrypted β meaning the network administrator can see which websites you are visiting.
DNS-over-HTTPS in Windows 11:
- Settings > Network & Internet > Wi-Fi > Hardware properties.
- DNS server assignment > Edit.
- Select Manual.
- Preferred DNS in IPv4: 1.1.1.1 (Cloudflare), Alternate: 8.8.8.8 (Google).
- DNS over HTTPS: On (Automatic template).
On Android:
- Settings > Network & Internet > Advanced > Private DNS.
- Hostname: Type dns.cloudflare.com or dns.google.
- Save.
This is a small but effective step.
Checklist β Before and After Connecting to Public Wi-Fi
Before connecting:
- β Turn on VPN
- β Verify network name
- β Close sensitive apps
After connecting β Windows:
- β Set network type to “Public”
- β Check that the firewall is on
- β Network Discovery is off
- β Browse only HTTPS sites
After connecting β Android:
- β Do not use banking or UPI apps
- β Auto-join is turned off
- β Randomized MAC address is enabled
- β Use Firefox Focus or a secure browser
After disconnecting:
- β Forget the network (if it was public)
- β Turn off the VPN (to save battery)
- β Clear the browser cache
India-specific Tips β For Railway, Airport, and CafΓ© Wi-Fi
Certain public Wi-Fi situations in India require special attention:
Indian Railways Wi-Fi (RailTel):
- It uses OTP-based login β which is safe β but the connection is unencrypted.
- Perform sensitive tasks only while using a VPN.
- Speeds are slower, so avoid video streaming.
Airport Wi-Fi:
- Fake hotspots are most commonly found at airports.
- Check the official Wi-Fi name of the airport authority first.
- Always use a VPN.
CafΓ© and Restaurant Wi-Fi:
- It is password-protected β somewhat safe.
- However, there could be hundreds of users on the same network.
- Absolutely no banking.
College/University Wi-Fi:
- It is often monitored.
- Avoid piracy or illegal activity.
- A VPN is helpful here as well.
Be sure to check out fixtech.in for detailed guides on PC and Android security β there, you will find practical cybersecurity and privacy tips to protect your daily digital life.
A real-life example β the consequences of not paying attention:
A freelancer at a Delhi cafΓ© connected to the free Wi-Fi in Connaught Place and logged into net banking to receive a client payment. A Man-in-the-Middle (MITM) attack was underway on that same network. Their session cookies were stolen, and three days later, an unauthorized transaction was made from their account.
This isn’t a movie plot; thousands of such cases are registered on the India Cyber ββCrime Portal. Making public Wi-Fi secure isn’t a technical luxury β it is a necessity.
FAQs β About Securing Public Wi-Fi
Q1. Is it impossible to stay safe on public Wi-Fi without a VPN?
You can remain safe to some extent β provided you browse only HTTPS sites, avoid opening sensitive apps, and keep your firewall enabled. However, a VPN offers the most comprehensive protection; without it, a risk always remains.
Q2. Is an HTTPS connection safe on public Wi-Fi?
HTTPS encrypts the data exchanged between you and the website, providing a good layer of security. However, DNS requests β which reveal the sites you are visiting β can still be exposed. A VPN combined with HTTPS is the best combination.
Q3. Are there any limitations to the free version of Proton VPN?
Proton VPN Free offers unlimited data, but server options are limited (US, Netherlands, Japan) and speeds are somewhat slower. It is sufficient for basic protection.
Q4. Can I use Private DNS and a VPN simultaneously on Android?
When a VPN is active, it uses its own DNS; the two do not function effectively together. You do not need Private DNS when the VPN is on; Private DNS operates only when the VPN is turned off.
Q5. Is it safe to use WhatsApp or Instagram on airport Wi-Fi?
WhatsApp is end-to-end encrypted, so messages remain secure. While the specific risk associated with browsing Instagram is low, login credentials could potentially be exposed. Using both with a VPN is safer.
Q6. Why is mobile data better for net banking?
Mobile data (4G/5G) establishes a direct, encrypted connection between your phone and the telecom tower. No third party (such as a cafΓ© owner or a hacker) can intervene in this connection. Therefore, always prefer mobile data for banking activities.
Q7. Will these steps work on Windows 10 as well?
Yes, most steps apply to both Windows 10 and 11. Enabling DNS-over-HTTPS is easier in Windows 11; on Windows 10, you should change the DNS settings manually or use third-party tools like Simple DNSCrypt.
Final Thoughts
Public Wi-Fi has become an integral part of modern life β it is unavoidable, but you can stay safe while using it. Use a VPN, check for HTTPS, set your network to ‘Public,’ disable auto-connect, and never use public Wi-Fi for banking. Whether you use Windows or Android, these steps apply to both, and most of them are completely free. A little awareness and a few minutes spent adjusting settings can significantly secure your digital life. Making public Wi-Fi usage safe isn’t rocket science β itβs simply about adopting the right habits, and this guide helps you do exactly that.
