How to keep your Windows PC safe on public Wi-Fi

Many people underestimate the security risks associated with public Wi-Fi. These are usually unencrypted and leave your devices vulnerable to all kinds of cyber threats. If you often use public Wi-Fi, here are some steps you should always take to keep your computer safe.

Protect your connection with a VPN

Using a VPN is one of the most effective ways I protect my data on public Wi-Fi. By creating an encrypted tunnel between my device and the VPN server, no one can monitor my internet activities. It also masks my IP address, which keeps my real location hidden from prying eyes.

Manually adding VPN details in Windows settings.

To set up a VPN, you can either download the VPN providers app or set it up manually. When setting it manuallyyou need to collect details like server address, account name, password and VPN type from your provider and add them manually. Once added, you can easily enable the VPN from the system tray like any other network setting.

Connect to Wi-Fi using WPA3 encryption

Avoid connecting to weak public Wi-Fi networks encryption protocols. Ideally, look for WPA3 encryption, which is the strongest available. If that’s not an option, make sure there’s at least WPA2 encryption, even if it could be compromised. Beyond encrypting networks, your device must also be compatible with these protocols.

To check if your computer supports WPA3, press Win+R, type cmdand press Enter. Then type netsh wlan show drivers and look for WPA3 in supported protocols. To check a Wi-Fi network’s encryption type, connect to it, then go to Settings > Network & Internet > Wi-Fi, right-click the network, select “Properties” and confirm the security type.

Checking the encryption type in the Settnigs app on Windows.

Use a standard (non-administrator) user account.

Connecting to public Wi-Fi with an administrator account can expose your device to more serious risks, as attackers could make system changes if they gain access. I use a standard user account on public networks to minimize this risk. With limited privileges, it prevents hackers from making system-wide changes even if it is compromised.

To check your account type, go to Settings > Accounts. Under your email address, you can check if you are logged in as an administrator or a standard user.

Checking the account type in the Windows Settings app.

If you don’t already have a standard user account, create one in Settings > Accounts > Family & other users. You can also change the account type there.

Turn off Public Network Discovery

Network discovery allows your device to detect other devices on the same network you’re connected to and allows them to see yours. While this feature is useful for sharing files on a trusted network, leaving it enabled on public Wi-Fi represents a security risk. That’s why I always disable it before connecting my computer to a public network.

To disable it, right-click the Start button and open “Settings.” Go to Network and Internet > Advanced network settings > Advanced sharing settings. In the Public Networks and Private Networks sections, turn off the switch next to Network Discovery. This will keep your device hidden from other network users.

Turn off network discovery in the Windows Settings app.

Improve your security with Windows Defender

Windows Security provides useful tools to protect your device from malicious threats. Enable real-time protection so Windows can actively scan and block malware. To enable it, go to Settings > Privacy & security > Windows security > Virus & threat protection. Next, block all incoming connections in the Firewall & Network Protection settings.

Enable real-time protection in the Windows Settings app.

Next, enable Controlled access to folders in the Virus and threat protection settings protect your device against ransomware.

Enable controlled folder access in the Windows Settings app.

Also, turn on Microsoft Defender SmartScreen to identify and block phishing websites and suspicious apps by accessing your app and browser control settings. Make sure all these security features are enabled before connecting to public Wi-Fi.

Adopt multi-layer security

Although I have a lot of faith in Microsoft Defender, Windows’ built-in security software, for this one reliable protection in real timethey also use third-party software like Malwarebytes for an extra layer against advanced malware. This way, the additional software can catch any threat that might bypass a Defender scan, although such occurrences are quite rare.

I suggest you choose a third-party antivirus software that complements Microsoft Defender to avoid potential conflicts. Make sure you enable real-time protection and always run both Microsoft Defenders Full Scan and the other antivirus scan before you connect to public Wi-Fi and after you’re done using it.

Forget the network after use

A habit I always follow is to forget about the network when I end the session or I no longer need internet access. This prevents my device from automatically reconnecting to an unsecured network without my knowledge, reducing the risk of man-in-the-middle attacks where attackers could intercept data.

to forget a saved Wi-Fi networkright-click the Start menu, open “Settings,” then go to “Network and Internet.” Go to Wi-Fi > Manage known networks. Find the public Wi-Fi network you are connected to in the list, click on it and click the “Forget” button. This removes the network from your device’s memory, preventing it from connecting again.

Forgetting a network in Windows Wi-Fi network settings.

Other tips for securing your device on public Wi-Fi

Along with the steps above, here are some general tips to keep your Windows PC safe on public Wi-Fi:

Encrypt and password protect highly sensitive data before sharing it on a public network. This keeps your information safe even if it is intercepted by someone.
Avoid accessing sensitive accounts and banking or shopping apps when connected to public Wi-Fi, as these networks are inherently insecure.
Disconnect from Wi-Fi periodically and run quick scans during your session to make sure your device hasn’t been infected.
Keep security features such as anti-phishing enabled in all applications, especially web browsers, to protect your online activity from snoopers.
Beware of fake networks that mimic the name of a legitimate public Wi-Fi service; if you see duplicate names, avoid connecting to them.
Check for Windows updates before connecting to public Wi-Fi and install all pending updates. A fully updated system is better protected against new security threats.

This is how I protect my Windows PC when using public Wi-Fi. While these tips can help protect your computer, avoid connecting to any public Wi-Fi. Stick to trusted networks, such as those at a college or library, rather than random places. Also, limit your use of public Wi-Fi to essential situations, treating it as a last resort.

Whenever I can, I do use mobile data through a hotspot for a more secure connection in public areas. You should consider this option more often than relying on public Wi-Fi.