The modern pace of life dictates its own conditions, and access to the global network is becoming a necessity at any moment, whether at the airport, a cafe, or public transport. Often, the only available option remains open Wi-Fi network, which doesn't require a password for the initial connection. However, despite the apparent simplicity of the process, connecting to public hotspots on a computer is associated with certain technical nuances and security risks that every user should be aware of.
Unlike home routers, where configuration is usually automated and protected by encryption protocols, public access points often require manual configuration of IP addressing parameters or passing through captive portal — a special authorization page. Incorrectly configuring your network card or ignoring security warnings can not only result in internet access but also the leaking of confidential data. In this article, we'll cover the steps for different operating system versions, troubleshooting methods, and ways to secure your device.
Search for available networks and initial analysis
The first step in the connection process is finding an available signal. Windows automatically scans the air, and the wireless network icon in the system tray (usually in the lower right corner of the screen) displays a list of available access points. You need to find a network with a matching name (SSID), which often matches the name of the establishment, airline, or service provider. Note the icon next to the name: the absence of a lock indicates the network is open and does not use WPA2/WPA3 encryption during the connection process.
It's important to be vigilant when choosing a network. Attackers often create access points with names similar to legitimate ones (for example, "Airport_Free_WiFi" instead of the official "Airport_Official"). Connecting to such a fake network, known as Evil Twin (Evil Twin) allows a hacker to intercept all your traffic. Before connecting, always check the exact SSID against the information on the information boards or ask the facility's staff.
After selecting the desired network, click "Connect." If the system asks you to confirm that you want to make your computer visible to others, always select "None" or "Public Network" for public locations. This will switch the firewall profile to maximum protection mode, hiding your device from other network members.
⚠️ Attention: If the system displays a warning when connecting that says "The certificate cannot be verified" or "The security of this connection is in question," don't ignore it. In corporate or government networks, this may be normal due to specific gateway settings, but in cafes, such a message often indicates an attempt Man-in-the-Middle attacks.
Authorization via Captive Portal
A common situation when working with open Wi-Fi is redirection to an authorization page known as Captive PortalAfter successfully connecting to the access point, the browser may not open any pages, but instead redirect any requests to the provider's internal server. Here, you may be asked to accept the user agreement, enter your phone number to receive an SMS code, or log in via social media.
If automatic redirection does not occur, try opening any site with the HTTP protocol (for example, http://neverssl.com or http://example.com). Modern browsers use a secure HTTPS connection by default, which can prevent the login portal from intercepting the request. Using an HTTP address forces the browser to send an unencrypted request, which the router intercepts and redirects to the login page.
In some cases, especially on older operating systems or specific corporate environments, manual proxy server configuration is required. If the internet connection is not working after connecting, even though the "Connected" status is active, check the proxy settings in the section Settings → Network & Internet → Proxy ServerMake sure the "Use a proxy server" switch is unchecked unless you were given specific addresses and ports for manual configuration.
Configuring TCP/IP and DNS settings
For stable operation in some public networks, manual protocol configuration may be required. TCP/IPv4By default, computers operate in automatic IP address acquisition mode (DHCP), but in congested networks or with specific ISP equipment settings, address conflicts or DNS errors may occur. In such cases, manually assigning addresses can restore access.
To change the settings, go to Control Panel → Network and Internet → Network and Sharing Center → Change adapter settingsFind your wireless connection, right-click it, and select "Properties." In the list of components, find "Internet Protocol Version 4 (TCP/IPv4)," select it, and click "Properties." Here you can enter a static IP address if provided by your network administrator, or change the DNS servers to faster and more secure ones, such as Google's (8.8.8.8) or Cloudflare (1.1.1.1).
Below is a table of common parameters that may need to be manually configured in various scenarios:
| Parameter | Default value (DHCP) | Example of a static value | Purpose |
|---|---|---|---|
| IP address | Receive automatically | 192.168.1.150 | The unique address of a device on the network |
| Subnet mask | Receive automatically | 255.255.255.0 | Determines the size of the local network |
| Main gateway | Receive automatically | 192.168.1.1 | Router address for Internet access |
| DNS server | Receive automatically | 8.8.8.8 | Converts domain names to IP addresses |
When changing these settings, it's important to understand the specific network requirements. An incorrectly specified gateway will completely disable your internet access, and an incorrect DNS will prevent you from opening websites by name. If you're unsure of the settings, it's best to leave the settings set to "Obtain an IP address automatically" and "Obtain DNS server address automatically."
☑️ Check network settings
Ensuring security when connecting
Using an open Wi-Fi network carries serious risks. Since traffic on such networks is often unencrypted or weakly encrypted, any tech-savvy user on the same network can intercept transmitted data. This includes passwords, messages, browsing history, and other sensitive information. To protect your data, it is highly recommended to use VPN (Virtual Private Network).
A VPN creates an encrypted tunnel between your computer and a remote server. Even if an attacker intercepts data packets, they will only see an unreadable string of characters. Furthermore, a VPN hides your real IP address and location. When choosing a service, pay attention to encryption protocols (preferred). WireGuard or OpenVPN) and the provider's logging policy.
It's also worth disabling file and printer sharing. In Windows, this can be done through the Network and Sharing Center: select your active network (Public) and ensure that "File Sharing" and "Printer Sharing" are disabled. This will prevent other network users from accessing your folders or installing malware.
⚠️ Attention: Never conduct financial transactions (online banking, card payments) or enter critical passwords while on an open Wi-Fi network without a VPN enabled. The risk of data interception is highest at this time, and responsibility for the safety of your funds lies solely with the user.
Diagnosing and resolving connection problems
Even with the correct settings, connection errors may occur. A typical issue is the "No Internet Access" or "Limited" status. First, try resetting your network settings. In Windows 10 and 11, you can do this via Settings → Network & Internet → Advanced network settings → Network resetThis action will delete all saved Wi-Fi profiles and reset network components to factory defaults.
Another common cause of problems is an outdated or incorrectly functioning wireless adapter driver. Go to device Manager (You can find it by searching in the Start menu), expand the "Network adapters" branch, and find your Wi-Fi device (usually listed as "Wireless," "Wi-Fi," "802.11," or a brand name like Intel, Realtek, or Qualcomm). Right-click it and select "Update driver" or "Uninstall device." (After uninstalling, restart your computer, and the system will attempt to reinstall the driver.)
If the problem persists, use Windows' built-in diagnostics. Right-click the network icon in the system tray and select "Troubleshoot." The system will automatically check for problems with DHCP, DNS, and the gateway, and attempt to reset the adapter. In more complex cases, you may need to reset the TCP/IP stack via the command prompt with administrator privileges.
netsh int ip resetnetsh winsock reset
ipconfig /release
ipconfig /renew
ipconfig /flushdns
Running these commands overwrites registry keys related to the network stack and clears the cache, which can often help resolve connection issues on complex corporate or hotel networks.
Frequently Asked Questions (FAQ)
Why can't my computer see an open Wi-Fi network, even though my phone can?
This could be due to several reasons. First, check that the Wi-Fi module on your laptop is enabled (sometimes it can be disabled with a physical button or the Fn+F key combination). Second, your computer may only support the 2.4 GHz standard, but the network is only broadcast at 5 GHz (or vice versa). Third, the network adapter driver may be outdated and not support modern security protocols or frequencies.
Is it safe to use public Wi-Fi for email?
Without additional security measures (such as a VPN), this is unsafe. Although modern email services use the HTTPS protocol to encrypt connections, SSL-stripping attacks are possible on an open network, where the user is redirected to an unsecured version of the website. Furthermore, metadata indicating that you are connected to the mail server is visible to the network administrator.
How do I forget a Wi-Fi network so my computer doesn't connect to it automatically?
To do this, go to Settings → Network & Internet → Wi-Fi → Manage known networksFind the desired network in the list, click it, and select "Forget." This will remove the saved profile and prevent your computer from automatically initiating a connection when a signal is detected.
Can a virus get onto a computer simply through an open Wi-Fi connection?
Simply connecting to a network won't infect your computer unless the system contains critical vulnerabilities. However, being on the same network as an infected device makes your computer visible to scanning. If your firewall is disabled or there are unpatched vulnerabilities in your operating system, an attacker may attempt to inject malicious code. Therefore, the "Public Network" profile and an active firewall are essential.