slowmadly

infrastructure

Public Wifi Security for Digital Nomads

How to keep client data safe on hotel, café and coworking wifi in 2026 without slowing your workflow. Kill-switch settings, MFA, password vault and the three habits that matter.

Tools we actually use for this

Sponsored
  • Airalo logo

    Land with Airalo (code SACHA6010 for $3 off) so you have data the moment you clear immigration — no kiosk queue, no overpaying at the airport. Airalo

  • NordVPN logo

    Hotel and café wifi is the actual threat model on the road. NordVPN with the kill-switch on means a dropped wifi never silently leaks your work traffic. NordVPN

  • Fireflies logo

    Patchy internet kills meeting recall. Fireflies records and transcribes Zoom/Meet/Teams so you can rejoin a dropped call without losing the thread. Fireflies

Frequently asked

Is public wifi really a threat in 2026?
For untargeted attacks, modern HTTPS covers most browsing. The real risks left are session hijacks on cookie-only logins, captive portals that route through hostile proxies, and adjacent attackers using your network for their own traffic.
What is the minimum setup for a nomad?
A reputable VPN with always-on kill-switch, MFA on every important account, a password vault that auto-fills only on the right domain, and DNS-over-HTTPS so even your lookups do not leak in the clear.
When should the kill-switch be on?
Always. The point of the kill-switch is exactly the moment you stop paying attention. If the VPN drops on a hotel wifi while you are deep in code, the kill-switch silently keeps traffic from leaking until the tunnel is back.
Is hotspot from my phone safer than hotel wifi?
Usually yes. A 4G or 5G connection from your own SIM or eSIM avoids the worst captive-portal and adjacent-attacker risks. Even with a VPN on hotel wifi, switching to hotspot for sensitive logins is a sensible reflex.
Do I need a corporate-grade setup?
No. A good consumer VPN, a password vault, MFA on critical accounts, and DNS-over-HTTPS already cover 95 percent of practical risk. Anything beyond that is for very specific threat models, not the average remote worker.

More on infrastructure

Sister site · Slate Remote

The remote job, wherever you are

Useful for this trip

Data the moment you land

Skip the airport SIM kiosk. Land already connected.

Airalo gives you an eSIM in 200 plus countries that activates in minutes from the app, with country and regional plans plus tethering. Use code SACHA6010 for 3 $ off your first plan; it pays the eSIM itself on most short trips.

Get an Airalo eSIM

Affiliate link, see disclosure