Module 08 / 15
πŸ“‘

Securing Your Wi-Fi, VPN and Network ConnectionsUpdated: 2026

Adopt the right habits on public networks, at home, or on the road β€” and understand what a VPN really protects.

⏱️ ~25 min
πŸ“š 9 lessons
🎯 Beginner
🎯 Module objective

By the end of this module, you'll be able to…

  • Identify the specific risks of public Wi-Fi
  • Recognize an evil twin attack
  • Configure your home Wi-Fi securely
  • Understand what a VPN protects β€” and what it doesn't
  • Choose the right connection behavior for each context
1

Why network connections are a target

Your network connection is the channel through which all your data travels β€” emails, passwords, documents, conversations. An attacker positioned between you and the internet (a "man in the middle" attack) can intercept and modify this data.

Wi-Fi is especially vulnerable because the radio signal travels through the air β€” anyone within range can receive the same data packets.

2

The dangers of public Wi-Fi

Scenario

Isabelle is working in a coffee shop with her client file open. She connects to the "CafeExpress_FREE" Wi-Fi. She doesn't know the person at the next table created that network with their phone to intercept the cafe's traffic. Within 20 minutes, they've captured her email credentials and excerpts from her client file.

βœ— Risks of public Wi-Fi

  • Sniffing: an attacker intercepts unencrypted traffic on the shared network
  • Evil twin: a fake Wi-Fi network with the same name as the legitimate one (see lesson 3)
  • Unsecured network: no password or WEP encryption β€” crackable in minutes
  • Malicious captive portal: a fake login page stealing your credentials
3

Evil twin and fake hotspots

The "evil twin" attack creates a fake Wi-Fi access point with the same name (SSID) as a legitimate network. Your device connects to it automatically if it has seen it before, or you connect to it believing it's the real one.

βœ“ Protecting yourself from evil twins

  • Verify the exact network name with staff (not a sign that could be tampered with)
  • Disable automatic Wi-Fi connection to open networks in your settings
  • Avoid connecting to password-free networks in public places
  • If you must connect, always use a VPN
4

Securing your home Wi-Fi

βœ“ Secure configuration for your home Wi-Fi

  • Change the router's default password β€” admin/admin is known to every hacker
  • Use WPA3 or WPA2 β€” never WEP or WPA alone
  • Create a strong Wi-Fi password β€” at least 16 characters, not your address or birth date
  • Create a separate guest network β€” for visitors and IoT devices (TV, smart bulbs)
  • Disable WPS β€” a known vulnerability that can be used to crack the password
  • Update your router's firmware β€” check the manufacturer's site
5

Basic router and modem settings

Your router is the gateway to your home network. Securing it is fundamental.

βœ“ Essential checks

  • Access the admin interface (usually 192.168.1.1 or 192.168.0.1) and change the default credentials
  • Check the list of connected devices β€” spot any unknown device
  • Disable admin interface access from outside your network (remote management)
  • Enable the router's built-in firewall if it isn't already
6

Understanding what a VPN actually does

A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a VPN server. All your traffic travels through this tunnel before reaching the internet.

βœ… What a VPN protects
  • β€’ Your traffic on public Wi-Fi (encrypted)
  • β€’ Your real IP address (masked)
  • β€’ Your browsing history from your ISP
❌ What a VPN does NOT protect
  • β€’ Malware already installed on your device
  • β€’ Cookies and fingerprinting
  • β€’ The sites you visit (the VPN provider sees everything)
  • β€’ Phishing and social engineering
7

VPN limits and common misconceptions

βœ— VPN myths

  • "A VPN makes me anonymous" β€” False: your VPN provider sees all your traffic. Choose a trustworthy one with a "no logs" policy.
  • "A VPN protects me from hackers" β€” False: it encrypts your connection, but doesn't protect against malware, phishing, or weak passwords.
  • "Free VPNs are enough" β€” Beware: many free VPNs resell your data. They do exactly what you're trying to protect against.
  • "I only need a VPN abroad" β€” False: any public Wi-Fi (cafe, hotel, airport, library) deserves the use of a VPN.

βœ“ Recommended VPNs (verified no-logs policy)

  • Mullvad β€” strongly privacy-focused, anonymous payment possible
  • ProtonVPN β€” freemium, based in Switzerland, open source
  • ExpressVPN / NordVPN β€” popular and reliable but pricier
8

Best practices while traveling and working remotely

βœ“ While traveling

  • Enable your VPN before connecting to any public Wi-Fi
  • Use your smartphone's hotspot instead of hotel Wi-Fi for sensitive data
  • Disable Bluetooth and Wi-Fi when you're not using them
  • Be wary of public USB charging stations β€” prefer your own wall charger (risk of "juice jacking")
  • Avoid accessing sensitive data from a public computer (library, hotel)
9

Choosing your behavior based on context

The main rule: match your level of caution to the risk of the context.

β˜•
Coffee shop Wi-Fi

VPN mandatory. No sensitive data, no banking. Prefer a mobile hotspot.

🏨
Hotel Wi-Fi

VPN recommended. Reliability varies. For confidential data: mobile hotspot.

🏠
Home network

Secure if well configured. VPN optional. Make sure your router is up to date and the password is strong.

Key takeaway"Public Wi-Fi = VPN or hotspot. No sensitive data without protection. It's that simple."
Interactive demo

Which network do you choose?

3 connection scenarios. For each situation, choose the safest behavior.

πŸ“ Scenario 1 β€” Starbucks: you need to access your work email

πŸ“ Scenario 2 β€” Airport: you need to review client data before a meeting

πŸ“ Scenario 3 β€” Your home: you've set up your Wi-Fi with WPA2 and a strong password

Module quiz

Test what you've learned with 4 questions.

See also