Stay Safe on Public Wi-Fi While Traveling

Overview

Airport lounges, coffee shops, and hotel lobbies all offer free Wi-Fi. They also offer attackers a front-row seat to whatever you do online. This article shows you how to keep working on the road without giving away company data.

Before You Begin

• Your work laptop, fully updated before you leave.
• Your company VPN client installed and tested.
• A personal mobile hotspot option (phone tethering or a hotspot device) for backup.
• A current understanding of your travel itinerary so you know which networks you will face.

Steps

1. Prefer your phone's hotspot over public Wi-Fi when possible. Cellular data is harder to attack than free airport Wi-Fi.
2. When you must use public Wi-Fi, connect to the VPN first thing, before opening any work apps or email.
3. Verify the network name with staff before joining. Attackers set up networks named like the venue ("Airport_Free_WiFi") and harvest credentials from anyone who joins.
4. Treat captive portal sign-in pages with suspicion. Give a throwaway email if the form demands one. Do not reuse your work credentials.
5. Avoid sensitive work in public spaces. Privacy screens help, but a shoulder surfer can still spot enough to phish you later.
6. Keep your screen locked when you step away, even for thirty seconds. Hotel lobbies are full of unattended laptops.
7. Disable file sharing and AirDrop while on public networks. Both can expose your machine to nearby strangers.
8. Avoid logging into financial or HR systems from a hotel computer or business-center kiosk. These are not your devices, and you cannot trust them.

Troubleshooting

• If the VPN will not connect: try a different network, then your phone hotspot. If it still fails, contact support before you proceed with any work.
• If a Wi-Fi network connects automatically without asking: your phone or laptop saved it from a prior trip. Forget the network in your settings to avoid attacks that spoof saved names.
• If a hotel asks for your work credentials to use Wi-Fi: decline. No legitimate hotel needs them.
• If you suspect you connected to a fake network: disconnect, run an antivirus scan, and notify your security team.

Related Articles

• Browse the Web Safely at Work
• Spot a Social Engineering Attempt
• Set Up a Home Office That Actually Works
• Report a Lost or Stolen Laptop or Phone

Need More Help?

Submit a ticket at support.bostonmit.com or email support@bostonmit.com.