Many people underestimate the security risks associated with public Wi-Fi. They are usually unencrypted, leaving your devices vulnerable to all kinds of cyber threats. If you often use public Wi-Fi, here are some steps you should always take to keep your PC safe.

1 Protect your connection with a VPN

Using a VPN is one of the most effective ways to secure my data on public Wi-Fi. By creating an encrypted tunnel between my device and the VPN server, no one can monitor my internet activities. Plus, it hides my IP address, keeping my real location safe from prying eyes.

To set up a VPN, you can either download the VPN provider's app or set it up manually. When setting it up manually, you'll need to gather details like server address, account name, password, and VPN type from your provider and add them manually. Once added, you can easily activate the VPN from the system tray like any other network settings.

2 Connect to Wi-Fi using WPA3 encryption

Avoid connecting to public Wi-Fi networks that use weak encryption protocols. Ideally, look for encryption WPA3, which is the strongest available. If that's not possible, make sure at least WPA2 encryption is enabled, even though it could be compromised. Beyond network encryption, your device should also support these protocols.

To check if your computer supports WPA3, press Win+R, type cmd and press Enter. Then, type netsh wlan show drivers and look for WPA3 under supported protocols. To check the encryption type of a Wi-Fi network, connect to it, go to Settings > Network & Internet > Wi-Fi, right-click on the network, select “Properties” and confirm the security type.

3 Use a standard (non-administrator) user account

Connecting to public Wi-Fi with an administrator account can expose your device to more serious risks, as attackers could make changes to the system if they gain access. I use a standard user account on public networks to minimize this risk. With limited privileges, it prevents hackers from making changes to the system, even if it is compromised.

To check your account type, go to Settings > Accounts. Under your email address, you can check whether you're logged in as an Administrator or Standard user.

If you don't have a standard account yet, create one in Settings > Accounts > Family & other users. You can also change the account type from there.

4 Disable public network detection

Network discovery allows your device to detect other devices on the same network you're connected to and allows them to see yours. While this feature is useful for sharing files on a trusted network, leaving it enabled on public Wi-Fi poses a security risk. That's why I always disable it before connecting my computer to a public network.

To disable it, right-click the Start button and open “Settings.” Go to Network & Internet > Advanced network settings > Advanced sharing settings. Under the Public and Private networks sections, turn off the switch next to “Network discovery.” This will keep your device hidden from other network users.

5 Improve security with Windows Defender

Windows Security offers useful tools to protect your device from malicious threats. Turn on real-time protection so that Windows can actively scan and block malware. To turn it on, go to Settings > Privacy & security > Windows Security > Virus & threat protection. Then, block all incoming connections in Firewall & Network protection settings.

Next, turn on Controlled Folder Access in Virus & Threat Protection settings to protect your device from ransomware.

Additionally, turn on Microsoft Defender SmartScreen to identify and block phishing websites and suspicious apps by accessing the Application & browser control settings. Make sure all of these security features are enabled before connecting to public Wi-Fi.

6 Adopt multi-layered security

While I have great confidence in Microsoft Defender, the built-in Windows security software, for its reliable real-time protection, I also use third-party software like Malwarebytes to add an extra layer against advanced malware. This way, the additional software can detect any threats that might bypass a Defender scan, although such occurrences are fairly rare.

I suggest choosing a reputable third-party antivirus software that complements Microsoft Defender to avoid potential conflicts. Make sure to turn on real-time protection and always run both the Microsoft Defender full scan and the other antivirus scan before connecting to public Wi-Fi and after you've used it.

7 Forget the network after using it

One habit I always follow is to forget the network when I finish my session or no longer need internet access. This prevents my device from automatically reconnecting to an unsecured network without my knowledge, reducing the risk of man-in-the-middle attacks, where attackers could intercept data.

To forget a saved Wi-Fi network, right-click on the Start menu, open “Settings,” then go to “Network & Internet.” Go to Wi-Fi > Manage known networks. Find the public Wi-Fi network you’re connected to in the list, click on it, and press the “Forget” button. This will remove the network from your device’s memory, preventing it from connecting again.

8 Other tips to secure your device on public Wi-Fi

In addition to the steps above, here are some general tips to keep your Windows PC safe on public Wi-Fi:

• Encrypt and password protect highly sensitive data before sharing it over a public network. This keeps your information safe, even if it is intercepted by someone.
• Avoid accessing sensitive accounts and banking or shopping apps when connected to public Wi-Fi, as these networks are inherently insecure.
• Periodically disconnect from Wi-Fi and perform quick scans during your session to ensure your device has not been infected.
• Keep security features, such as phishing protection, enabled in all applications, especially web browsers, to protect your online activity from prying eyes.
• Beware of fake networks that imitate the name of a legitimate public Wi-Fi service; if you see duplicate names, avoid connecting to them.
• Check for Windows updates before connecting to public Wi-Fi and install any pending updates. A fully updated system is better protected against new security threats.

Here's how I keep my Windows PC safe when using public Wi-Fi. While these tips can help protect your PC, avoid connecting to any public Wi-Fi. Stick to trusted networks, like those found at a university or library, rather than random places. Also, limit your use of public Wi-Fi to essential situations, treating it as a last resort.

Whenever possible, I use mobile data via a hotspot to have a more secure connection in public areas. You should consider this option more often instead of relying on public Wi-Fi.