What can go wrong on public Wi-Fi
Whoever runs the network can see which sites you look up and read anything that is not encrypted. On open networks, other people nearby may be able to do the same.
Fake hotspots are another risk. Someone can set up a network with a familiar name and watch everything that connects to it.
How TVPN helps
Once TVPN is connected, all app traffic goes through an encrypted tunnel to a TVPN server. The Wi-Fi network sees encrypted data and the address of the server, and that is all.
DNS lookups go through the tunnel too, to TVPN's own DNS servers. The network cannot build a list of the sites you visit.
Settings to turn on
On public networks the connection drops more often. Keep the kill switch on so apps do not fall back to the open Wi-Fi.
On Plus and Pro, malicious site blocking adds a filter against known phishing pages, which often spread through fake Wi-Fi sign-in screens and messages.
- Settings > Connection > Kill switch: on
- Settings > Protection > Malicious site blocking: on (Plus and Pro)
- If the VPN will not connect, Settings > Connection > Protocol: OpenVPN TCP
Sign-in pages and good habits
Many public networks open a sign-in or terms page first. Complete that page, then connect to TVPN. The VPN cannot connect until the network lets you through.
A VPN protects the connection, not your accounts. Use different passwords for important accounts, turn on two-step sign-in where you can, and do not accept unexpected certificate warnings.