How do I make my public WiFi private?

1 min read Updated

You can't make the network itself private, but you can make your connection private by encrypting your traffic with a VPN and locking down a few device settings. Do these in order.

  1. Set the network profile to Public on a laptop. In Windows 11, go to Settings, Network & internet, Wi-Fi, select the network and choose Public network (Recommended). That hides your PC and blocks file and printer sharing. On a Mac, turn off File Sharing in System Settings, General, Sharing. The counterintuitive naming trips people up: "Private" in Windows means trusted and discoverable, which is the opposite of what you want here.
  2. Keep private Wi-Fi addresses on. iPhones and recent Android phones use a randomized hardware address per network, which stops the hotspot from linking your visits over time. Make sure you haven't switched it off for that network.
  3. Encrypt your DNS. On Android, Private DNS in Network & internet encrypts the lookups that reveal which sites you're visiting. Apple's iCloud Private Relay does this for Safari if you pay for iCloud+.
  4. Turn on a VPN after the login page. Finish the captive portal first, then connect. A VPN such as NordVPN wraps all your traffic in an encrypted tunnel, so the hotspot sees only that you're connected to a VPN server. Turn on its kill switch so nothing leaks if the tunnel drops.

What this won't hide: the sites you log into still see your account activity, and a VPN can't protect you from a phishing page you choose to trust. If you're traveling somewhere VPNs are restricted, check local rules first. The UAE, for example, allows VPN apps but threatens fines of Dh500,000 to Dh2 million for using one to reach blocked services.