Downloading on public Wi-Fi: what’s actually at risk, and when a VPN helps
Saving a video over café or airport Wi-Fi is mostly safe — but not for the reasons people think. Here is what the network can and cannot see, and where a VPN genuinely makes a difference.
What HTTPS already protects
Almost every site you use today, KlipJar included, is served over HTTPS — the padlock in the address bar. That encrypts everything between your device and the site. Someone else on the same café network cannot read the link you paste, the page you are looking at or the video you download.
What it does not hide
- Which sites you visit. The network operator can usually see the names of the sites you connect to (for example klipjar.com or tiktok.com), even though it cannot see what you do there.
- Whether the network itself is genuine. A hotspot called “Airport_Free_WiFi” can be set up by anyone. A fake hotspot cannot break HTTPS, but it can show you a fake sign-in page or push you towards sites that are not what they claim.
- Anything on a site without HTTPS. If there is no padlock, assume everything on that page is visible to the network.
The real risks on public Wi-Fi
- Lookalike networks. Ask staff for the exact network name instead of joining the first open one.
- Captive portals that ask for more than they need. A café portal does not need your social-media password or your card details.
- Out-of-date devices. Most real attacks rely on software that has not been updated, not on the Wi-Fi itself.
- Downloading something that is not what it claims to be — the same risk as at home, covered in How to spot a fake downloader site.
When a VPN genuinely helps
A VPN (virtual private network) sends all your traffic through an encrypted tunnel to the VPN provider, and from there to the sites you visit. On a network you do not trust, that means:
- The hotspot operator sees only that you are connected to a VPN — not which sites you visit.
- Your traffic is encrypted even on the rare site without HTTPS.
- A network that blocks or slows certain sites cannot single them out.
A VPN does not make you anonymous to sites you sign in to, does not stop phishing or malicious downloads, and does not change what you are allowed to download. Copyright and each platform’s terms apply exactly as they would without one. What it does is move trust from the café’s network to the VPN provider — so the provider you pick matters.
How to choose a VPN
- Avoid unknown free VPN apps. Running a VPN costs money; a free one with no clear business model is often paid for with your data.
- Look for an independent audit of the provider’s no-logs claim, published in full rather than summarised.
- Prefer open-source apps, a clear owner and jurisdiction, and modern protocols such as WireGuard.
- Check what the free tier, if any, actually includes, and where the provider makes its money.
Two well-known examples that meet these criteria: Proton VPN, whose apps are open source and independently audited and which offers a free plan without a data cap; and Mullvad, which does not ask for an email address at all. KlipJar has no affiliate or commercial relationship with either; they are named only as reference points.
A quick checklist for downloading on the go
- Confirm the exact Wi-Fi name with staff before joining.
- Check for the padlock before typing anything.
- Turn on a trustworthy VPN if the network is open or unfamiliar.
- Only accept media files — .mp4, .jpg, .mp3 — never an installer.
- Forget the network on your device when you leave.