Using a VPN on public Wi-Fi is one of the best privacy decisions you can make. The key is doing it in the right order to avoid the captive portal problem where the VPN blocks the login page.
The Correct Order
- Connect to the public Wi-Fi.
- Complete captive portal authentication (if present). Open Safari, navigate to the portal, accept terms or log in. Do this BEFORE turning on your VPN.
- Confirm basic internet access. Load any web page to verify you are through the portal.
- Turn on your VPN. Open your VPN app, select a server, connect.
- Verify the VPN is working. Use our VPN Leak Test to confirm your real IP is hidden and no DNS leaks exist.
- Browse normally. All your traffic is now encrypted through the VPN.
Can You Connect to a VPN on Public Wi-Fi?
Yes, in most cases. Some hotels and airports block certain VPN protocols (usually UDP-based). If your VPN cannot connect:
- Switch to OpenVPN TCP on port 443 (mimics HTTPS, rarely blocked)
- Try a different VPN server
- Use a VPN with obfuscation/stealth mode designed to bypass port blocking
What the VPN Protects on Public Wi-Fi
| What VPN Protects | What VPN Does NOT Protect |
|---|---|
| DNS queries (what sites you visit) | Account credentials if you chose a weak password |
| Unencrypted HTTP traffic content | Malware already on your device |
| Your real IP address from websites | Activity from someone who stole your device |
| Network sniffing of your packets | Cookies already stolen before VPN was connected |
People Also Ask
- Can you connect to a VPN on a public Wi-Fi?
- Yes. Connect to Wi-Fi, complete the captive portal first, then connect your VPN. Most public Wi-Fi works fine with a VPN. If not, switch to TCP port 443 or a stealth protocol.
Related: VPN and captive portals | Public Wi-Fi risks | VPN Leak Test