Free Wi-Fi is less risky than it used to be, because most websites and apps now encrypt what they send. The real risks today are fake hotspots set up to look genuine, and Wi-Fi sign-in pages that ask for your work email login so they can steal it.
Cyber Essentials also expects laptops used on networks you do not control, such as cafe or hotel Wi-Fi, to have their own firewall switched on.
How to check your own setup
- Is the firewall on? Windows. Settings, then Privacy and security, then Windows Security, then Firewall and network protection. Mac. System Settings, then Network, then Firewall.
- Are laptops set to join open Wi-Fi networks automatically?
- Do staff know how to use their phone as a hotspot?
How to fix it
- Use your phone's hotspot or mobile data instead of free Wi-Fi where you can.
- If your business provides a VPN, turn it on before doing any work on public Wi-Fi.
- Never type your work email password into a Wi-Fi sign-in page. A genuine hotspot does not need it.
- Check the network name with staff at the venue before connecting.
- Turn off automatic joining of open networks on laptops and phones.
- Keep the firewall switched on for every network.
The mistakes people make
- Connecting to the strongest signal with a familiar sounding name.
- Treating the padlock in the browser as proof a site is genuine. It shows the connection is encrypted, not who is on the other end.
- Switching the firewall off to fix a problem and forgetting to turn it back on.
Got a question about this?
Ask me about your own setup and I'll give you a plain English answer, usually within one working day.