Before connecting
Ask for the exact network name instead of selecting the first similar-looking one. Disable automatic connections to open networks, file sharing and device discovery if you do not need them.
Update the operating system, browser and applications before travelling. Enable multi-factor authentication on important accounts and use a screen lock.
Sources and references
While connected
Connect the VPN before opening a sensitive application, then check its status. On Android, blocking connections without the VPN requires system settings; on Windows, understand whether the kill switch intentionally maintains the block after a failure.
Continue using HTTPS and do not ignore certificate warnings. A captive portal may require a brief connection before the tunnel is active; in that case, limit activity to enabling network access.
What the tunnel reduces
The VPN makes direct observation of content carried between the device and the VPN server much more difficult. It also reduces opportunities to alter that traffic on the local network.
It does not protect against a malicious site, an infected attachment, a reused password or an account that is already compromised. The VPN provider also sees the information needed to provide its service.
After leaving the network
Forget the network if you do not want to reconnect to it automatically. Review downloaded files, close unnecessary sessions and monitor sign-in alerts for sensitive accounts.
If you bypassed a warning or entered credentials on a suspicious page, change the password from a trusted device and network.
Short checklist
- Network name confirmed.
- Sharing and automatic connection disabled.
- VPN connected with the right scope for the application in use.
- HTTPS active with no certificate warning.
- Multi-factor authentication enabled.
- Network forgotten after use if necessary.