A VPN for public Wi-Fi puts an encrypted tunnel between your phone and the internet, so the network you joined only sees scrambled data going to one server. Tunnexa does this for free on Android, DNS lookups included, and you can connect without an account.
Corner Café GuestConnected · inside the Tunnexa tunnel
Other networks
Airport Free Wi-FiOpen
Hotel LobbySign-in page
FREE_WIFI_2GWho runs this?
Key icon means VPN on
DNS protected
What the hotspot sees
Coffee shop Wi-Fi, with and without a VPN
Everyone on an open network shares the same router. Here is what that router, or whoever runs it, can see from your phone.
● Without a VPNExample
PhoneCafé hotspotInternet
lookup · yourbank.exampleVisible
app · chat.example.comVisible
http · old-recipes.exampleReadable
https · page contentSite encrypts it
● With Tunnexa onExample
PhoneHotspotTunnexaInternet
lookup · inside the tunnelHidden
app · ▒▒▒▒▒▒▒▒▒▒Encrypted
dest · 198.51.100.7 onlyOne server
size · how much, and whenStill visible
Most sites use HTTPS now, which already encrypts the page itself. The gap is everything around it: the names your phone looks up, the apps that check in all day, and the odd page that still loads over plain HTTP. With the tunnel on, all of that is scrambled before it touches the café's router. For the longer version, read what a VPN is and how it works.
The real risks
What can actually go wrong on open Wi-Fi
Public Wi-Fi isn't a trap. Most days, nothing happens. But an open network gives strangers a seat at your table, and these are the things that do go wrong.
01
Look-alike hotspots
Anyone can name a hotspot "Airport Free Wi-Fi". Join a fake one and its owner sits between you and everything you open.What helps: the tunnel starts on your phone, so a fake hotspot only gets scrambled data.
02
Lookups in plain view
Your phone asks a DNS server where every site and app lives. On an open network, those questions can be read, logged or answered with a wrong address.What helps: Tunnexa keeps every lookup inside the tunnel, on by default.
03
Apps that cut corners
Browsers are careful. Some apps and older sites are less so, and still send data without encryption.What helps: every app's traffic goes through the tunnel, not just the browser's.
04
Sign-in pages that ask too much
A room number or an email to get online is normal. Card details or "install this app first" is a reason to walk away.What helps: your judgment. No VPN can stop you typing a card number into the wrong page.
Set it once
Three settings for hotel and airport Wi-Fi
DNS leak protection
On from the first tap, for guests too. While you’re connected, your lookups stay in the tunnel instead of going to the hotel’s DNS server. How DNS leak protection works.
Kill Switch & Always On
Hotel Wi-Fi drops. When it does, Android can block every connection until the tunnel is back, so nothing slips out on the open network. It only protects you while it’s switched on. Set up the VPN kill switch.
Auto Connect
Connects the moment you open the app, so you don’t have to remember at the gate. Turn on “When the phone starts” as well, and after a restart Tunnexa shows a “Tunnexa is ready · Tap to connect” notification, so one tap puts you back in the tunnel. Turn on Auto Connect.
Kill Switch & Always On and Auto Connect need a free account. DNS leak protection works for everyone.
Settings
Privacy & security
DNS leak protectionKeeps every lookup private, inside your tunnel
Kill Switch & Always OnSet Always-on VPN and block connections without VPN›
Auto ConnectOnWhen the app opensWhen the phone starts
Step by step
How to use a VPN on public Wi-Fi
1
Join the right network
Ask staff for the exact name. Pick that one, not the one that looks close enough.
2
Finish the sign-in page
Accept the terms or enter your room number first. The tunnel can't start until the Wi-Fi lets you out.
3
Tap To Connect
Pick a nearby location for speed. Android shows a small key icon while the VPN is on.
4
Stay connected
Leave it on until you leave the network. If a page won't load, check the key icon is still there.
Packing a bag? Hotels, roaming and apps that dislike VPNs are covered in our guide to using a VPN for travel.Café · Hotel · Gate
It's a good habit. Most sites encrypt their pages, but an open network can still see which sites and apps you reach, and read anything sent without HTTPS. A VPN closes that gap in one tap.
Is hotel Wi-Fi safe without a VPN?
+
Often it's fine, but you rarely know who runs it or who else is on it. With Tunnexa on, the hotel network only sees encrypted data going to one server.
Is a free VPN good enough for public Wi-Fi?
+
For protecting your connection, yes. As a guest, Tunnexa encrypts your traffic and keeps DNS lookups in the tunnel. A free account adds Kill Switch & Always On and Auto Connect.
Why won't my VPN connect on airport Wi-Fi?
+
Usually the sign-in page isn't finished. Disconnect, open your browser, complete the login, then tap connect again. If it still fails, the network may block VPNs, and another protocol often gets through.
Does a VPN make me anonymous on public Wi-Fi?
+
No. It hides your traffic from the network and your IP address from the sites you visit, but a site still knows it's you once you sign in. Think of it as privacy from the Wi-Fi, not invisibility.
Free, even as a guest