kemangVPNBlog · 18 Sept 2026
The Risks of Public WiFi and How to Protect Yourself
What can really happen on public WiFi, which risks are real and which are overstated, and the sensible steps you can take to protect yourself.
The advice "don't use public WiFi" gets repeated a lot, usually without any explanation. This article tries to be honest about it: which risks are real today, which have faded, and what you should actually do.
What has improved
Public WiFi used to be genuinely dangerous because most websites still used unencrypted connections. Anyone on the same network could read what you sent, passwords included.
Today almost every site uses HTTPS. Your communication with a site is already encrypted by the browser, even without a VPN. That is a big step forward and worth acknowledging: not all of the old advice still fully applies.
What is still a risk
Metadata is still visible
HTTPS hides the content, but not the destination. Whoever runs the network can still see which sites you visit and when. For some people that is fine; for others it is information they would rather not share.
Fake access points
Anyone can set up a WiFi network with a name similar to a cafe or hotel. If your device connects to it, all of your traffic passes through that person's device. HTTPS still protects the content, but that position gives them plenty of opportunities to interfere.
Other devices on the same network
On an open network, your device shares the same space as strangers' devices. If a service is exposed on your device (file sharing, a printer, something you forgot to turn off), other devices can try to reach it.
Devices that are not updated
Devices running old operating systems that no longer receive security updates are far more vulnerable, on any network.
Sensible protection steps
- Turn off auto-join for networks you have used before. This reduces the risk of connecting to a fake access point with the same name.
- Turn off file and printer sharing on public networks. On Windows and macOS, mark the network as public, not private.
- Keep your operating system and browser up to date. This is the most basic protection and the one most often neglected.
- Use a VPN. All of your traffic is wrapped in a single encrypted tunnel, including the metadata that remains visible with ordinary HTTPS. The network operator only sees an encrypted connection to the VPN server, not where you go from there.
So should you avoid public WiFi?
There is no need to be extreme. Public WiFi today is much safer than it was ten years ago thanks to HTTPS. But your metadata is still exposed, and fake access points are still possible.
If you often work from cafes, airports, or hotels, especially for work or financial matters, using a VPN is a reasonable step that takes little effort. The app can be set to turn on automatically when you join an unfamiliar network.
Haven't installed the app yet? There are guides for Android, iOS, Windows, and macOS.
About kemangVPN
kemangVPN is a subscription VPN service built for Indonesia: 84 servers in 45 countries including Jakarta, AES-256 encryption, no activity logging, and 10 devices on one account.
Plans start at US$3.99 a month, paid via PayPal; rupiah payments (QRIS, bank transfer) are available when you order in IDR. Activation is instant once payment is confirmed, with a 7-day money-back guarantee.