Is public WiFi safe? How to protect your laptop

Cafés, hotels, trains and airports all offer free Wi-Fi. Is using public WiFi safe? For everyday browsing it is much safer than it was ten years ago, because almost every website is now encrypted. But you share the network with strangers, and a few settings on your laptop decide how much they can see of it. Here is what to check, in plain words.

1. What can actually go wrong?

No need to panic. These are the real risks, from most to least likely:

• Your laptop is visible to other guests. On a shared Wi-Fi, everyone is on the same local network. If Windows treats it like your home network, others can see your computer's name and maybe shared folders or a printer.
• A fake hotspot. Someone sets up a network called “Cafe_Free_WiFi” next to the real “Cafe Guest”. Whoever runs it sees where your laptop connects and can show you fake login pages.
• Unencrypted connections. A website or app without HTTPS sends what you type as plain text, which others on the network may be able to read.
• Open doors on the laptop. Remote access or other programs that accept connections can be reached by everyone on the same Wi-Fi, without the protection your home router gives you.

The good news: Windows has settings for all of this. They just need to be right.

2. How to safely use public WiFi: six steps

Step 1: Set the network profile to Public

Windows gives every network a profile (a set of rules): Private for networks you trust, like your home, and Public for everything else. On Public, Windows hides your laptop from other devices and the firewall is stricter.

• Windows 11: Settings › Network & internet › Wi-Fi › the name of the network › Network profile type › Public network.
• Windows 10: Settings › Network & Internet › Wi-Fi › click the network › Network profile › Public.

When Windows asks “Do you want to allow your PC to be discoverable by other PCs and devices on this network?” on a public network, answer No.

To check from PowerShell: Get-NetConnectionProfile shows the NetworkCategory of each connection (Public or Private).

Step 2: Make sure file sharing is off

Windows 11: Settings › Network & internet › Advanced network settings › Advanced sharing settings. Windows 10: Control Panel › Network and Sharing Center › Change advanced sharing settings. Under Public networks, switch Network discovery and File and printer sharing to Off. These are the Windows defaults, but some programs and old settings change them.

Step 3: Check the firewall is on

Windows Security › Firewall & network protection › Public network should say Firewall is on. If a program asks “Allow access?” while you are on a public network, you can usually say no: few home programs need to accept connections from strangers. Why the firewall and your antivirus are two different things: Firewall vs antivirus.

Step 4: Connect to the right network

• Ask the staff for the exact network name, or read it from a sign.
• Be careful with open networks that have a very similar name.
• Many hotspots first show a login page (a “captive portal”). Give it only what it really needs. It should not ask for your e-mail password or card details just to get online.
• Afterwards, untick Connect automatically for that network, or choose Forget, so your laptop doesn't join a look-alike later.

Step 5: Use HTTPS and take warnings seriously

Look for the padlock and an address starting with https://. Then the content of what you send is encrypted between your laptop and the website, even on an open Wi-Fi. The network can still see which websites you visit, but not what you read or type there.

If the browser shows a warning like “Your connection is not private”, don't click past it on a public network. Close the page and try again later, or use mobile data.

Step 6: Consider a VPN, or your phone

A VPN (virtual private network) puts all your traffic in an encrypted tunnel to the VPN provider or your company. The hotspot then sees only that tunnel. It helps on networks you don't trust, but it moves your trust to the VPN provider, so pick a well-known one. It does not protect against everything (for example, it does not make a fake login page real).

Simpler for many people: share your phone's mobile data (personal hotspot) for banking or anything sensitive. Keep Windows and your browser up to date, too: updates close the holes attackers use.

3. Why your laptop may still be on “Private”

Windows decides the profile when you first join a network, and it can change it later: after a restart, after a network change, or when a program or a setting switches it. You may have chosen Private once by accident, or answered “Yes” to the discoverable question. It is worth looking again whenever you travel. And it is only one of several things: open ports and programs that accept connections matter just as much.

4. Coinetic: your laptop stays locked down, wherever you are

Doing this by hand means: checking the network profile every time you connect, looking at sharing settings now and then, and having no idea whether anyone on the café Wi-Fi tried to reach your laptop, or which programs connected while you were there. Windows does not tell you when it quietly switches a network back to Private.

Coinetic works through the Windows Firewall that is already there, with a protection service that runs in the background. No tool can make public WiFi 100% safe, but these gaps close:

• Network profile lock: Coinetic shows the profile of each network adapter (Domain, Private or Public). Lock it, so Windows cannot quietly switch it: if the profile changes, for example after a restart or a network change, the protection service puts it back.
• See who connects: the live log shows every allowed and blocked connection, in and out, with the rule that decided it. The Connections page shows every live connection with the program, the remote address, who owns it and the country.
• A one-click security check: it checks the firewall profiles, open file sharing, open ports and risky settings, explains each finding and fixes what it can with one click. Every fix can be undone.
• Programs only go online when you said so: switch on outbound control for the network profiles you choose, for example Public. Every new program then asks once, with who signed it and where it wants to go.
• Scanners and password guessers banned: an internet address that probes many ports, touches a trap port, or keeps guessing your Windows / Remote Desktop password is banned automatically. Devices on the same Wi-Fi count as your local network: Coinetic shows them, but never bans local addresses. There, the Public profile and the firewall keep them out.
• Open ports under control: the Open Ports page lists every program that listens on the network. If a risky port is open to the internet, Coinetic closes it, or makes it invisible forever or until you unlock it from your phone. At home, the free open port check shows what your own internet connection exposes.
• At any time, not once: all of this is inside Coinetic whenever you open it, at home, in the hotel or on the train. The protection service keeps working while the window is closed.
• Your AI security analyst (Pro + AI): right-click any line, program or connection and choose Ask AI, e.g. “Did anything try to connect to this laptop while I was on the hotel Wi-Fi?”. It looks up this computer's Coinetic data itself and answers in plain words, with what to do on this machine.

Coinetic is not an antivirus and not a VPN: it works next to Microsoft Defender or your antivirus, and next to any VPN you use.

More guides: all Coinetic guides.

Frequently asked

Is it safe to do online banking on public WiFi?

Banking websites and apps use strong encryption, so it is generally fine on a network you checked. If you want to be on the safe side, use your phone's mobile data for banking, and never click past a certificate warning.

Do I need a VPN on public WiFi?

Not always. With HTTPS, the Public profile and file sharing off, everyday use is reasonably safe. A VPN adds privacy on networks you don't trust, and your company may require one for work.

Should I choose Public or Private at home?

Private, if you want to share files or a printer with your own devices. Public is fine at home too; it is simply stricter. Away from home, always Public.

Can people on the same WiFi see my files?

Only if file sharing is on for that network and a folder is shared. With the Public profile and File and printer sharing off, they cannot browse your computer.