Don’t Let Your Business Become the Next Public Wi-Fi Hack Victim

Public Wi-Fi networks are notoriously insecure. In

fact, high-profile hacks at hotels, coffee shops, airports, and other public places have put small businesses on high alert. With more employees working remotely than ever before, the use of public Wi-Fi is growing rapidly. But connecting to these networks also opens businesses up to significant data security risks that many small companies fail to properly address. Neglecting cybersecurity when using public Wi-Fi can lead to leaked customer records, stolen credentials, compromised company data, and crippling legal and PR nightmares. For small and medium-sized businesses, implementing the right protocols and policies for secure public Wi-Fi usage is absolutely essential. This guide will provide actionable steps to help safeguard your business and avoid becoming the next victim of a damaging public Wi-Fi data breach.

Verify the Network

Using public Wi-Fi networks can put your business data at risk of getting intercepted. To avoid connecting to illegitimate networks, take the following precautions:

• Don’t automatically connect to any open network. Manually select the network each time.
• Confirm the network name and ID match what you’d expect before connecting. For example, the coffee shop’s own network instead of a similarly named rogue version.
• If using a shared workplace connection, validate with your IT team that it’s an approved network before connecting.
• Avoid logging into accounts or accessing sensitive information until verifying the legitimacy of a hotspot.
• Consider setting devices to ask before connecting to new networks automatically. This provides a chance to cancel potentially unsafe connections.

Use VPNs to Encrypt Data

A virtual private network (VPN) is an essential tool for securing your internet connections and data when using public Wi-Fi. A VPN encrypts all data transmitted between your devices and the internet, preventing hackers from snooping on your online activities and stealing sensitive information while connected to public networks.

VPNs work by creating a private tunnel through the public internet. Even if bad actors gain access to the public Wi-Fi network you are using, they cannot decipher the encrypted data flowing through the VPN tunnel. This protects your internet traffic, passwords, emails, and any other private information from potential surveillance.

For small businesses, implementing a trusted business VPN should be a top priority for all employees that work remotely or use company devices outside of the office. VPNs not only encrypt Wi-Fi connections, but also cellular data when employees are working on-the-go without Wi-Fi.

As a Sophos Partner, we can help use Sophos VPN Products. When considering your options look for providers that offer dedicated apps for all employee devices, easy management for IT administrators, and the ability to whitelist safe sites so internet speeds are not throttled for essential business tools.

By enforcing company-wide use of VPNs, small businesses can ensure their data remains secure across all Wi-Fi networks. VPNs are essential for combatting “man-in-the-middle” attacks and preventing bad actors from gaining access to sensitive company information transmitted online. Investing in robust VPN protection should be a top priority for every modern small business.

Turn Off File Sharing

Sharing files over a public Wi-Fi network can open up your device and business data to security risks. When connected to public Wi-Fi, ensure you have disabled all file sharing options in your device’s settings.

This includes turning off options like network file sharing, media sharing, printer sharing, screen sharing, or other features that allow access to your files. Leaving file sharing enabled essentially opens the doors for others on that network to access sensitive company information stored on your device.

To keep business data protected, always verify file sharing is switched off prior to connecting. Some devices may automatically re-enable sharing when joining new networks, so double check each time. Developing strong habits around disabling file sharing is crucial for any employee handling confidential company information and devices.

With file sharing off, you create an extra barrier against data theft or privacy violations when using public Wi-Fi. This quick setting adjustment helps prevent unauthorized access to important documents, customer data, financial reports, product designs, or other sensitive materials.

Stay vigilant and keep file sharing disabled as a standard security measure when relying on public connections. Safe practices like this require minimal effort but make a major difference in securing your company’s digital assets and privacy.

Secure Browser Settings

When connecting to public Wi-Fi, be sure to take steps to secure your browser settings as well. This will provide an extra layer of protection for your online activity and data.

• Use HTTPS sites whenever possible. Look for the padlock icon in the URL bar which indicates a secure, encrypted connection. Avoid entering any sensitive information on unsecured HTTP sites when on public Wi-Fi.
• Disable location services on your devices when connecting to public networks. This prevents your device from broadcasting your location or syncing this data across apps. Turn location services back on when connecting to a trusted network.
• Frequently clear your browser history, caches and cookies after a public Wi-Fi session. This removes traces of the sites you visited and wipes login credentials or other saved info that could be intercepted. Set your browser to clear this data automatically each time you close the window or app while using public hotspots.

Taking these precautions ensures your browsing remains private and secure while on unprotected public connections. Take the time to lock down browser settings across all your devices before transacting or sharing data over public Wi-Fi.

Avoid Sensitive Info

When using public Wi-Fi, it’s best to avoid accessing or entering any sensitive personal or company information that could be intercepted.

Don’t Access Financial/Health Records

Avoid checking bank accounts, paying bills online, or accessing health records on public networks. This sensitive financial and medical information could be intercepted and used for identity theft or fraud if the connection is not secure. Wait until you are on a trusted private network.

No Online Shopping

Do not enter credit card information to make purchases while connected to public Wi-Fi. Retail sites can seem secure with https URLs, but your payment info could still be intercepted on a compromised network. Save online shopping for a secure connection.

Caution with Company Login Pages

Think twice before accessing your company’s login page and remote desktop over public Wi-Fi. Even if the site appears legitimate, a hacker could steal your credentials or gain entry to your company’s system. Only remote access into work through VPN or from a trusted private network.

Beware of Evil Twins

Public Wi-Fi networks are often plagued by “evil twin” access points. These are rogue networks that mimic real public Wi-Fi by using a similar name. For example, a coffee shop’s Wi-Fi might be called “CoffeeShopWifi,” and the evil twin will use a name like “Coffe ShopWifi” to trick users.

Evil twins aim to get users to mistakenly connect to them instead of the legitimate network. Once connected, the evil twin can intercept data being sent over the connection, like login details, emails, and credit card numbers. This allows hackers running the evil twin to steal sensitive personal and company information.

To avoid falling for an evil twin, users need to be very careful when selecting a public Wi-Fi network. Closely verify the network name, ID, and password prompt. An evil twin may look very similar at first glance but small differences in spelling, spaces, capitalization, and symbols can identify it as fraudulent. Being attentive can save you from accidentally connecting and handing over important data.

Enable Firewall

Having a firewall enabled provides an extra layer of security when using public Wi-Fi. Both Windows and Mac operating systems come with built-in firewalls that you can turn on for basic protection.

For Windows, go to Settings > Update & Security > Windows Security > Firewall & network protection to configure your firewall settings.

On a Mac, the firewall can be enabled in System Preferences > Security & Privacy.

You’ll want to make sure the firewall is enabled before connecting to any public Wi-Fi network. The firewall acts as a shield around your device, protecting it from unauthorized access. It monitors incoming and outgoing network traffic, blocking dangerous requests while allowing benign traffic through.

For mobile devices like smartphones and tablets, most modern operating systems have basic firewalls built-in as well. However, you can also install third-party firewall apps from your device’s app store for enhanced security. Look for highly-rated firewall apps that offer features like whitelisting trusted Wi-Fi networks, alerting you to suspicious activity, and preventing tracking.

With the right firewall enabled, you can rest easier knowing your devices have critical safeguards in place for browsing on public Wi-Fi. Don’t neglect this key step in securing your connection.

Educate Employees

A business is only as secure as its employees. That’s why it’s critical to train staff on public Wi-Fi risks and implement robust cybersecurity policies. 

Here are some tips:

Train Staff on Public Wi-Fi Risks

• Explain dangers like man-in-the-middle attacks, data leaks, malware, etc.
• Review which activities are unsafe on public networks (e.g. accessing sensitive data)
• Demonstrate how to identify rogue networks and use VPNs properly
• Encourage security-conscious habits like HTTPS usage

Establish Company Security Policies

• Develop and distribute a formal internet usage policy
• Outline rules for public Wi-Fi usage, approved apps, safe browsing, passwords, etc.
• Make cybersecurity training mandatory for all employees
• Update policies periodically to address new risks

Set Protocols for Reporting Issues

• Instruct employees on identifying and reporting Wi-Fi security issues
• Establish procedures for reporting data breaches, malware infections, etc.
• Document incident response plan for dealing with cybersecurity threats
• Encourage timely reporting to facilitate rapid mitigation

Proper training, policies, and protocols empower employees to help keep the business safe. Investing in education strengthens human firewalls.

Conclusion

Using public Wi-Fi networks can provide convenient internet access for employees on-the-go. However, securing company data and devices on public networks is vital for any business.

Throughout this article, we covered several best practices for safely using public Wi-Fi:

• Verify you are connecting to an authentic, secure network instead of an unsecured “evil twin”
• Use a Virtual Private Network (VPN) to encrypt your internet connection
• Turn off file sharing settings on your devices
• Enable the most secure browser settings, like using HTTPS websites
• Avoid accessing or sharing sensitive company info on public networks
• Make sure firewall protection is enabled on devices
• Educate employees on public Wi-Fi risks and safe usage policies

Following these tips will help protect your company’s data, devices, and systems when employees need to access public Wi-Fi networks. Though convenient, using public internet connections requires extra security measures. Prioritize private

Wi-Fi when possible, and implement the precautions in this article when using public hotspots to keep your business safe online.