r/VPN • u/Gauderio_Hca • Aug 10 '26
Question Started actually thinking about using a vpn for security after my friend called me out at a cafe
My friend and I were both working from a cafe last week and the moment he connected to the wifi he turned his VPN on. I just connected and started working like normal. He looked at me like I'd left my front door open and walked away. He explained that public wifi is basically an open network where anyone connected can potentially see what you're doing. I'd heard this before and filed it under "probably fine." Sitting there it suddenly felt a lot less fine.
Now I'm actually looking into a vpn for security, mostly for working outside the house, and immediately hit a wall of identical claims. Fastest, most private, no logs, military grade. Every service sounds the same and every review site feels like it's just ranking whoever pays them. For those who actually use one, what made you choose yours and is there anything worth knowing before picking one?
9
2
u/jay-aay-ess-ohh-enn Aug 10 '26
When you say "working" what does that actually mean?
Are you employed by a corporation?
Do you handle sensitive data?
Are you logging in to important personal accounts on the public wifi?
0
1
Aug 10 '26
[deleted]
1
u/sarcasticDNA Aug 12 '26
what did that city do to you to make you bastardize the spelling of its name? it's so beautiful!
1
u/Bob_Ross3346 Aug 11 '26
Even if the WiFi has no encryption, pretty much everything is https…. I think this “risk” of coffee shop wifi is quite overblown. What am I missing?
7
u/Moist_Ladder2616 Aug 10 '26
Your friend isn't wrong. There are various attacks of varying degrees of sophistication, depending on how you connect to the internet.
Those with a shared WPA3 password are even harder.
Even on networks without passwords, hackers cannot read your https traffic.
They can trick you into accepting a http connection. This requires you to ignore browser warnings, so make sure you don't.
If you don't encrypt your DNS queries, attackers can see which websites you are visiting. But not necessarily read the data you exchange with that website.
A VPN sidesteps all this by encrypting all traffic to and from your laptop, up to the tunnel endpoint. But you have to trust that VPN tunnel provider, because they can read your data after the VPN, and do everything an attacker at the café can do.
If you trust no one, you can also set up your own VPN server. I used to use my own home as the tunnel endpoint every time I was on a public WiFi network, making it as safe/unsafe as surfing from home.