By Richard Jasinski·Updated 6 October 2026
To use NordVPN on hotel or airport Wi-Fi, turn on the Kill Switch and auto-connect before the trip, join the network, complete its sign-in page, then connect the VPN and check it is running before opening email, banking or work files. Public Wi-Fi is safer than its reputation: the US Federal Trade Commission says it is usually safe, because most sites and apps now encrypt their traffic. A VPN covers what that leaves open. This page sets out the risk as it stands, the settings to change, the order to connect in, and when mobile data is the better answer.
Verified 6 October 2026 · NordVPN's help centre and Kill Switch page read at source · US Federal Trade Commission guidance on public Wi-Fi · eSIM prices from our 6 October 2026 readings
Usually, for ordinary browsing: the US Federal Trade Commission says that because of the widespread use of encryption, connecting through a public Wi-Fi network is usually safe. Most websites and apps encrypt the connection between your device and their servers, so another guest on the same network cannot read it. Three gaps remain, and they are the reason to use a VPN.
| Risk | What happens | What covers it |
|---|---|---|
| A fake network | Someone sets up a hotspot with the hotel's or airport's name and you join it | Check the name with the front desk or on airport signs; a VPN keeps the traffic unreadable either way |
| A site or app without encryption | Anything sent to it can be read on the network | Look for https in the address bar; a VPN encrypts everything leaving the device |
| The network sees where you go | The operator can log which sites you visit, though not what you do there | A VPN hides the sites from the network |

A VPN does not protect against a fake website or a phishing email: if you type a password into the wrong page, encryption only delivers it safely to the wrong people. For the wider picture on travelling with valuable data, see personal security for high-net-worth travellers.
Install the app on every device you will carry, sign in, and turn on three settings at home: the Kill Switch, auto-connect on Wi-Fi, and Threat Protection. Do it before leaving, on a network you trust. NordVPN's help centre states that the Kill Switch is off by default, so an installed app is not yet a protected one.
| Setting | What it does | What NordVPN says about it |
|---|---|---|
| Kill Switch | Blocks internet access if the VPN connection drops, so nothing travels over the open network in the gap | Off by default; turned on in the app settings on Windows, macOS, Android, iOS and Linux |
| Kill Switch on Windows | Two kinds: Internet Kill Switch cuts all traffic; App Kill Switch closes only the programs you choose | Choose the Internet Kill Switch for travel |
| Kill Switch on Android | Works system-wide on Android 8 or later | Android's own Always-on VPN setting, under the phone's VPN settings, does a similar job |
| Auto-connect | Starts the VPN when the device joins a Wi-Fi network | Set it for all Wi-Fi except your home network |
| Threat Protection | Blocks known malicious sites, adverts and trackers | Found in the app settings; the plan decides which version you have |
Two cautions. Menu names move between app versions, so follow NordVPN's Kill Switch page for the current steps on your device. And test once at home: connect, load a page, then check the app shows a server name. Our NordVPN setup walkthrough covers installation from the start.
In this order: join the Wi-Fi, complete the sign-in page, connect the VPN, then check it before opening anything sensitive. Hotel and airport networks use a sign-in page that asks for a room number, a code or agreement to terms. That page often will not load through a VPN, which is why the VPN comes third and not first.
| Step | What to do | If it goes wrong |
|---|---|---|
| 1. Join the network | Choose the network named by the front desk or on airport signs | Two networks with near-identical names: ask which is the real one |
| 2. Complete the sign-in page | Enter the room number and surname, or accept the terms | Page does not appear: pause the VPN and its Kill Switch, open any website, sign in |
| 3. Connect the VPN | Use Quick Connect for the nearest server, or pick your home country for services that need it | Will not connect: change server or protocol in the app |
| 4. Check it | The app shows Connected and a server name; the VPN icon shows in the status bar | Not connected: do not open banking or work files until it is |
Two cautions. Between steps 2 and 3 the device is on the open network, so apps that sync in the background will do so; keep the gap short. And sign-in sessions expire, often after 24 hours, so expect to repeat the sequence each day of a longer stay.
Wi-Fi is enough inside the hotel and the terminal; it is not enough between them, where maps, ride apps, boarding changes and bank codes all need a connection on the move. A travel eSIM fills that gap, and 1 GB for 7 days cost $4 on the plans we read on 6 October 2026. Mobile data also removes the question this page starts with: banking on your own data connection never touches the hotel's network.
| Situation | Use | Why |
|---|---|---|
| In the room, streaming or browsing | Hotel Wi-Fi with the VPN on | No data allowance to use up |
| Banking, or a password change | Mobile data | Keeps it off the shared network altogether |
| Out in the city | Mobile data on a travel eSIM | Wi-Fi is not there when the map is needed |
| A short layover | Airport Wi-Fi for browsing; mobile data for anything sensitive | Not worth a long setup for an hour |
| Laptop work for several hours | Hotel Wi-Fi with the VPN, or the phone as a hotspot | A hotspot is private but uses data quickly |
The choices by destination are in our eSIM guides for Japan and the Middle East, and what happens if you do not use an eSIM abroad covers the cost of relying on roaming instead.
A VPN is not lawful for every use in every country. In the United Arab Emirates, VPNs are legal for legitimate purposes, but using one to reach blocked calling services is treated as an offence. Protecting your own traffic on hotel Wi-Fi is a different use from getting round a block, and the second is the one that carries risk. The Middle East eSIM guide sets out what works for calls there.
1 · Set it up at home. Install, sign in, turn on the Kill Switch and auto-connect, and test once. An app installed in the lobby is being set up on the network it is meant to protect you from.
2 · Trust the network name only when someone at the property confirms it. A name that includes the word secure, or the hotel's brand, proves nothing by itself.
3 · Stop at a certificate warning. If the browser warns that a site's certificate is not valid while you are on public Wi-Fi, do not continue. Switch to mobile data and try again.
This page was rebuilt on 6 October 2026. It now follows the Federal Trade Commission's current position that public Wi-Fi is usually safe, in place of earlier wording that overstated the risk. NordVPN's help centre, read the same day, confirms the Kill Switch is still off by default. Speed and price figures that could not be traced to a source have been removed, and so has the suggestion to use a VPN to get round local restrictions.
It is a sensible extra, not a necessity for everything. The US Federal Trade Commission says connecting through public Wi-Fi is usually safe because most websites and apps now encrypt their traffic. A VPN adds protection in the cases encryption does not cover: a fake network with the hotel's name, a site or app that is not encrypted, and the network operator seeing which sites you visit. Use one for work, banking and anything confidential.
Usually, for ordinary browsing. Most websites and apps encrypt the connection, so others on the network cannot read it. The main risk is joining the wrong network: a hotspot set up to look like the airport's. Check the network name on the airport's own signs, look for https in the address bar, and use a VPN or mobile data for banking and work.
Join the Wi-Fi first, complete the sign-in page with your room number or the terms box, then connect NordVPN. A sign-in page often will not load while a VPN or its Kill Switch is active. If the page does not appear, pause the VPN, sign in, and reconnect before opening anything else.
The Kill Switch blocks internet access when the VPN connection drops, so nothing is sent over the open network in the gap. Hotel and airport Wi-Fi drops often, so turn it on before the trip. On Windows there are two kinds: the Internet Kill Switch cuts all traffic and the App Kill Switch closes only the programs you choose.
No. NordVPN's help centre says the feature is off by default and has to be turned on in the app settings. On Android 8 or later it works as a system-wide block, and Android's own Always-on VPN setting does a similar job. It is not available on Amazon Fire TV Stick.
Yes, a little, because traffic takes a longer route and is encrypted on the way. The effect is smallest on a server close to where you are and largest on one in another continent. If the connection feels slow, change to a nearer server before turning the VPN off.
Wi-Fi is enough inside the hotel and the terminal. It is not enough between them: maps, ride apps, boarding changes and bank codes all need a connection on the move. A travel eSIM covers that, and 1 GB for 7 days cost $4 on the plans we read on 6 October 2026. Mobile data is also the simplest way to keep banking off public Wi-Fi.
In most countries, yes. The rules differ, and what you use the VPN for matters as much as the VPN. In the United Arab Emirates, VPNs are legal for legitimate purposes, but using one to reach blocked calling services such as WhatsApp or FaceTime calls is treated as an offence. Check the position for each country on the route before relying on a VPN there.
Read next
Richard Jasinski · Uncompromised Travel · written from Valencia · first published 11 May 2026 · rebuilt 6 October 2026 · facts re-verified 6 October 2026
We use cookies to improve user experience. Choose what cookie categories you allow us to use. You can read more about our Cookie Policy by clicking on Cookie Policy below.
These cookies enable strictly necessary cookies for security, language support and verification of identity. These cookies can’t be disabled.
These cookies collect data to remember choices users make to improve and give a better user experience. Disabling can cause some parts of the site to not work properly.
These cookies help us to understand how visitors interact with our website, help us measure and analyze traffic to improve our service.
These cookies help us to better deliver marketing content and customized ads.