Virtual Private Nonsense

31 May 2025

Adverts for Virtual Private Networks (VPNs) are now a regular feature on many podcasts. A common theme I’ve noticed is the attempt to justify using a VPN by claiming that public WiFi networks are inherently unsafe without one. Take this recent example:

When you connect to an unencrypted network in cafes, hotels, airports, your online data is not secure. Someone on the same network can gain access to your information, passwords, bank logins, credit card information, and other things that you don't want in someone else's hands.

This is absolute nonsense. Yes, it's true that if the WiFi network doesn't require a password to connect to, then your data will be sent in the clear and could theoretically be accessed by anyone, as made famous by the app Firesheep. This was in 2010 however. In fifteen years since then, and the twelve years since the Snowden leaks, the vast, vast majority of websites have adopted their own encryption to protect data in transit. Even before then, any reputable site handling sensitive information (such as online banking or payment processing) was already using TLS (Transport Layer Security). In 2025 (and really for the past decade), you do not need a VPN when on public WiFi.

Regardless of whether the WiFi network is encrypted, there are inherent risks in connecting to a network you can't necessarily trust. Most devices have built in firewalls to mitigate this. As long as that's switched on, you're probably going to be OK.

So why would anyone use a VPN? As far as I can tell there are only three reasons why anyone would use a VPN:

I would not hesitate to use online banking over Starbucks WiFi. In fact, I’d be more worried about someone peering over my shoulder than any threat from the network itself.

So don’t be taken in by the scaremongering ads. The chances are, you don’t need a VPN.

But if you’ve got another reason for using one, let me know in the comments below.