Sicurezza del wifi pubblico per nomadi digitali

Frequently asked

Is public wifi really a threat in 2026?

For untargeted attacks, modern HTTPS covers most browsing. The real risks left are session hijacks on cookie-only logins, captive portals that route through hostile proxies, and adjacent attackers using your network for their own traffic.

What is the minimum setup for a nomad?

A reputable VPN with always-on kill-switch, MFA on every important account, a password vault that auto-fills only on the right domain, and DNS-over-HTTPS so even your lookups do not leak in the clear.

When should the kill-switch be on?

Always. The point of the kill-switch is exactly the moment you stop paying attention. If the VPN drops on a hotel wifi while you are deep in code, the kill-switch silently keeps traffic from leaking until the tunnel is back.

Is hotspot from my phone safer than hotel wifi?

Usually yes. A 4G or 5G connection from your own SIM or eSIM avoids the worst captive-portal and adjacent-attacker risks. Even with a VPN on hotel wifi, switching to hotspot for sensitive logins is a sensible reflex.

Do I need a corporate-grade setup?

No. A good consumer VPN, a password vault, MFA on critical accounts, and DNS-over-HTTPS already cover 95 percent of practical risk. Anything beyond that is for very specific threat models, not the average remote worker.