7 ways to protect a Mac using public Wi-Fi at cafes, hotels

Security features on the Apple Mac you MUST enable to stay safe at pubic Wi-Fi hotspots

If you use a MacBook at cafes, hotels, airports and other places with public Wi-Fi, how do you protect it from hackers, people spying on you, malware and other threats? Here is what to do.

When using a computer in the home or office, you are surrounded by relatives or work colleagues and you are protected to a certain degree by bing on a local network that outsiders cannot access.

None of this is true when using a laptop computer at a public Wi-Fi hotspot. It is most probably safe and it is unlikely to be a problem working in public, but safety and security cannot be guaranteed. You cannot be certain that someone is not eavesdropping on network traffic at a cafe, hotel, airport and other places.

It is possible for hackers to set up fake hotspots or to intercept internet activities, connect to your computer through the network, and more.

Don’t panic! You are not likely to be sharing a coffee with a hacker on the next table, but that does not mean you can afford to be complacent. A few simple tweaks to the MacBook’s settings will make it much more secure and safe to use in public.

1 Encrypt the Mac’s drive

Laptop computers are sometimes accidentally left on trains, buses, in cafes, hotels and other places. There is also the possibility that it could be stolen. You put your laptop bag down for a moment and the next thing you know is it is missing, or you leave it in your car and it gets broken into.

Of course you are extra careful when out with your MacBook and it is unlikely that you will lose it it have it stolen, but as the saying goes, hope for the best but prepare for the worst.

If someone else got their hands on your MacBook you would not want them to be able to access the contents of the drive. A good way to ensure this is by encrypting the drive contents so that only you, with the password, can access it.

FileVault in macOS on the Apple Mac drive encryption
macOS FileVault is off? Enable it immediately!

If you have not done so already, open System Preferences and click Security & Privacy. Select the FileVault tab and enable it. Bear in mind that it could take several hours to encrypt, even with an SSD, but you can continue to use the Mac while it does it. Don’t even ask about times for very old MacBooks with hard disk drives.

2 Enable the firewall

A firewall is designed to prevent access to the computer from people or software on the network you are connected to. It isn’t very likely but it is possible for hackers to hang around public Wi-Fi hotspots and see if they can access any computers or devices. Flaws in the security could then be exploited.

The firewall setting in macOS on the Apple Mac
Enable the firewall when using a MacBook in public

Go to System Preferences and click Security & Privacy. Select the Firewall tab and enable the firewall in macOS to block network attacks.

Stealth mode selector in the Firewall in macOS on the Apple Mac
Enable stealth mode in the advanced firewall options

Click the Advanced button in the bottom right corner  and there is an option to enable stealth mode. This prevents the Mac from responding to network activity designed to locate and identify devices and computers. It does its best to make the Mac invisible.

The ultimate blocking setting in macOS Firewall on the Apple Mac
The ultimate blocking option in macOS Firewall

That should be sufficient but if you happen to be staying at a hotel where a hackers convention is being held it is possible to lock down network access even tighter. Select the option at the top to Block all incoming connections in the Advanced Firewall settings.

3 Stop sharing services

The MacBook is able to share a variety of things over a local network, including access to the drive, printers, scanners, the internet and more. It is not a good idea to use a MacBook in public with a bunch of sharing services enabled. You could use the ultimate firewall blocking setting in the last tip, or you could disable the sharing options while out and about.

Sharing features in macOS System Preferences on the Apple Mac
Don’t share computer resources in public

Go to System Preferences and open Sharing. Turn everything off.

4 Turn off Bluetooth

Bluetooth enables devices to connect to each other over short distances and exchange information. If it is enabled, it is a temptation for a hacker or troublemaker at the Wi-Fi hotspot and you may see requests to connect or to receive files and so on. Don’t! It could be malware, a hack attack or who knows what?

Turn Bluetooth on or off in macOS on the Apple Mac
Bluetooth should be turned off in public

Go to System Preferences, open Bluetooth and turn it off.

5 Make sure to join the right Wi-Fi

It is a fairly easy task to turn a phone or computer into a Wi-Fi hotspot. Hackers and criminals have been known to set up Wi-Fi hotspots at Wi-Fi hotspots with the same name. For example, they could create a hotspot called Starbucks inside or close to a Starbucks cafe. People might then connect to the fake hotspot instead of the real one.

All their internet activity would then flow through the hacker’s computer and could be captured and analyzed. That would be bad if you logged into sites and services, banked or shopped online.

The Wi-Fi menu in macOS on the Apple Mac

There isn’t a anything specific that you can do to protect yourself. Just keep your wits about you and be careful what networks you connect to. If you are in any doubt, don’t connect.

6 Use a VPN

A VPN is a utility that provides an encrypted connection to the internet and it is a great way to ensure your security, privacy and safety at public Wi-Fi hotspots. If you are out with a MacBook and are at all concerned about these issues, get a VPN.

NordVPN software on the Apple Mac
Connect to a VPN server for security and privacy in public

Free ones are available, but they are not recommended because they offer poor performance and may offer imperfect security or privacy. Go with a company you trust and know works well. There are a lot of VPNs out there and the huge choice can be confusing. Here are the ones I recommend and use (my affiliate links):

  • NordVPN – Great speed, security, privacy
  • Ivacy VPN – Fast and cheap deals on offer
  • PureVPN – Good performance, great security

7 Require a password

Passwords are compulsory for some features on the Apple Mac, but not for all of them. Some are optional, but they are recommended if you use your MacBook in public places. So which passwords are optional? Open System preferences and enter ‘password’ into the search box.

 

General security settings in macOS on the Apple Mac
Require a password to unlock the Mac

Disable automatic login, which logs into your account without having to enter a password. Imagine if this was not set. Someone could start your MacBook or wake it from sleep and go straight into your account.

Another essential setting is that a password is required immediately after sleep or the screen saver kicks in. If you walk away from your MacBook, you want it to be locked in case someone sits down and tries to access it. Set a short timeout for the screen saver in System Preferences > Desktop & Screen Saver > Screen saver tab > Start after. The minimum is one minute.

You may find this irritating and if the phone rings, something else interrupts you, or you just pause to think, the screen saver starts and then you have to enter the password again.

You might want to set a longer screen saver timeout, such as 5 minutes, and configure hot corners so that pushing the mouse pointer into the corner of the screen locks it. Configure this in System Preferences > Desktop & Screen Saver > Screen saver tab > Hot Corners. Select a corner and select Start Screen Saver or Put Display to Sleep.

 

1 Comment

  1. I work in a company where we have a deal, that whenever employee wants, he can work remotely. The only condition is not to forget to open a Nordvpn app. For example, I like to work in a coffee shop, so I need to use public wi-fi, and vpn is the best tool to do that without being scared that someone will hack into your device and steal all the data.

Leave a Reply

Your email address will not be published.