Why this matters for Indian laptop users
Short answer: Public WiFi — at hotels, airports, cafes, and railway stations — is fundamentally different from your home network. On a home network, you are the only user; on a public WiFi, hundreds of other devices share the same network, and a malicious user can intercept unencrypted traffic, conduct a man-in-the-middle attack (positioning themselves between your device and the internet), or attempt to connect to your laptop’s shared folders. These are not hypothetical threats in India — Indian IT security teams consistently flag public WiFi as a top attack vector for business data theft.
Step 1: Use a VPN for all sensitive traffic
A VPN (Virtual Private Network) encrypts all traffic between your laptop and the internet, making it unreadable to anyone on the same public WiFi network. Reputable VPN services for Indian travellers: ProtonVPN (free tier available), NordVPN, Mullvad, or your company-provided VPN. Cost: ₹200–₹600/month for individual plans. Connect the VPN before doing any banking, email, or work-related activity on hotel WiFi. Do not use free VPN apps — free VPNs frequently sell your traffic data. Note: your corporate network VPN is the best option if your employer provides one.
Step 2: Turn off network discovery and file sharing
When connecting to an untrusted network in Windows: Settings › Network & Internet › WiFi › click the connected network › Network profile type: set to Public (not Private). This automatically disables network discovery (making your laptop invisible to other devices on the same network) and file sharing. On Mac: System Settings › General › Sharing › ensure all sharing options are off. These settings should be your default for any non-home network. Never set a hotel or airport WiFi to “Private” — that setting is designed for trusted home networks and opens your laptop to the entire hotel WiFi network.
Step 3: Check for HTTPS and avoid sensitive banking
Any website you visit should use HTTPS (look for the padlock icon in the browser address bar). Modern browsers flag HTTP sites as “Not Secure” in red. On hotel WiFi, some implementations use HTTP captive portals (the login page you see when first connecting) — these are safe for the login step but do not enter passwords on any non-HTTPS site beyond that. For banking or financial activity while travelling: use your mobile phone’s cellular data (Jio/Airtel 4G/5G) as a personal hotspot instead of hotel WiFi. Mobile data is significantly more secure than shared public WiFi for financial transactions.
Step 4: The India angle — fake hotel WiFi networks
A specific threat increasingly reported in India: fake WiFi networks with names similar to the hotel (e.g., “HotelGrand_Free” when the real network is “HotelGrand_WiFi”). Connecting to the fake network routes all your traffic through the attacker’s device. Prevention: confirm the exact WiFi network name at the hotel front desk before connecting. If two networks with similar names appear, ask the hotel which is theirs. When in doubt, use your mobile hotspot. The 10 seconds it takes to verify the network name can prevent data theft that takes months to remediate.