The short answer

At home, update the router, change its administrator password, use WPA2 or WPA3 encryption, turn off unnecessary remote administration, and put guests and smart devices on a separate network when possible. In public, confirm the network name, disable automatic joining and file sharing, prefer your phone's hotspot for sensitive work, and use encrypted websites and strongly protected accounts.

Public Wi-Fi is not automatically dangerous, but a familiar network name does not prove who operates it. Your device, accounts, and habits still need protection.

Secure the home router once, then review it

Open the router's official app or type its known local address. Do not follow an unexpected “router update” link in an email. Then:

1. Install current router firmware.
2. Replace the default administrator password with a unique one.
3. Use WPA3 when all essential devices support it. Otherwise use WPA2.
4. Choose a separate strong Wi-Fi password.
5. Disable remote administration, WPS, and features you do not use.
6. Create a guest network for visitors and, if practical, smart-home devices.
7. Remove devices you no longer recognize or own.
8. Save the recovery steps and review settings twice a year.

The FTC recommends changing default router credentials, using WPA2 or WPA3, limiting which devices join the business network, and separating guest access. See its current small-business cybersecurity guidance.

If your router no longer receives security updates, replacement may be a better use of money than adding another security subscription around obsolete equipment.

Make public work less sensitive

Use a personal hotspot or wait for a trusted connection before banking, changing passwords, accessing payroll, moving customer records, or administering your website. A hotspot is not magic, but it removes the uncertainty about who runs the café or airport network.

When public Wi-Fi is necessary:

• ask staff for the exact network name rather than choosing the strongest signal.
• turn off automatic connection to open networks.
• set the network profile to public.
• disable local file, printer, and device sharing.
• keep the firewall and full-disk encryption on.
• check for https and the lock symbol in the browser.
• reject unexpected certificate or security warnings.
• forget the network when you leave.
• avoid leaving the laptop unattended, even for a minute.

The FTC explains that widespread website encryption makes public Wi-Fi usually safe for ordinary browsing when the connection to the site is encrypted. It still recommends current software, strong passwords, and two-factor authentication. Read the FTC's public Wi-Fi explanation.

Know what a VPN does and does not do

A trustworthy VPN can encrypt traffic between your device and the VPN service, which is useful when your business or client requires it. It does not make a fake login page legitimate, repair an infected computer, protect an unlocked screen, or prevent you from sending a file to the wrong person.

Use a VPN selected through your business or a provider you have properly reviewed, not a random free app found after you arrive at the airport. If a client gives you a required secure-access method, follow that process exactly.

Carry a five-minute travel routine

Before leaving home, install updates, test your hotspot, charge the device, confirm backup status, and download only the files you genuinely need. During the trip, use a privacy screen when appropriate and keep the device with you. When you return, review login alerts and remove temporary downloads.

Sensitive or regulated work may have stricter network, device, VPN, or location rules. Check your client agreement, insurer requirements, industry standards, and local law, and ask a qualified security professional when the consequences of exposure are serious.

Sources and further reading

• Federal Trade Commission: Cybersecurity for Small Business
• Federal Trade Commission: Are Public Wi-Fi Networks Safe?

A free next step

You don't have to build this alone

Bring your questions, share what you're working on, and meet other women building businesses from home. It is free to join.

Join Our Community Free

Related Questions

• What should I do immediately after clicking a phishing link or entering my password on a suspicious site?
• What should I do if a business account or business email is hacked?
• When does a business computer need antivirus or endpoint-protection software?
• What business information should I avoid sending through ordinary email?