One humid afternoon in June, I found myself hesitating over a 'Send' button on a sensitive design contract while connected to a cafe wifi named 'Coffee_Guest_Free' in Mexico City. I had just finished my third horchata—the condensation on the cold glass was literally dripping onto the table—and I was waiting for that little green 'Connected' icon to appear on my taskbar. There is a specific kind of internal monologue that happens when you're a remote worker: Is this PDF worth the risk of this free latte’s internet? I was staring at the unsecured network warning, thinking about the NDA I’d signed and the fact that I was basically shouting my client's secrets into a room full of strangers.
Since I left London back in 2022, my life has been a series of these moments. Whether it was a rainy week in Porto in mid-January or a stint in Chiang Mai, the 'free wifi' siren song is always there. But after three years of bouncing between Lisbon and Mexico City, I’ve learned that public wifi is less like a utility and more like a crowded pub where everyone can hear your conversation if you aren't whispering. When you send an email over an unsecured connection, you're essentially sending a postcard that any 'packet sniffer' (a fancy term for a digital eavesdropper) on the same network can read.
The Ritual of the Secure Connection
My ritual for working in cafes has become almost mechanical. I never just open my laptop and start typing. First, I connect to the local wifi, which usually triggers one of those 'Captive Portals'—you know the ones, the annoying pop-up pages where you have to tick a box saying you won't do anything illegal in exchange for thirty minutes of browsing. I wait for that to clear, but I don't touch Outlook or Slack yet. I wait. I engage the VPN tunnel first. It feels a bit like closing the curtains before you start changing clothes.
The tech behind it sounds complicated, but I think of it as a specialized safe. Most good VPNs use Advanced Encryption Standard with a 256-bit bit-length. To put that in 'I just want to send this email' terms: it’s the digital equivalent of putting your email inside a titanium box that would take a supercomputer roughly a billion years to crack. Most of these apps give you 2 protocol options to choose from—usually WireGuard or OpenVPN. I tend to stick to WireGuard because it’s faster, which matters when my partner is on a video call at the same table and starts glaring at me the moment the bandwidth dips.
Why Your VPN Might Make You a Target
Here is the slightly contrarian bit I’ve noticed after working from dozens of spots: connecting to a VPN at a cafe often makes you a more visible target for local network anomalies. Because you're sending all your data through a single 'tunnel' (often using Port 443, which is the standard side door for encrypted web traffic), the cafe's router sees this weird, solid stream of unreadable data. Some aggressive security filters in modern cafes see that 'unusual' pattern and decide you’re a threat, occasionally throttling your speed or kicking you off entirely.
I remember this happening back in late November when I was trying to clear my inbox in a trendy spot in Lisbon. Every time I turned the VPN on, the wifi would drop. It’s a frustrating trade-off: do you want to be invisible to hackers but visible to the router’s grumpy security software? For me, the answer is always yes. I’d rather be kicked off the wifi five times than have a single work email intercepted. If you're finding that you're getting disconnected often, you might actually need a dedicated IP for remote work to look a bit more 'normal' to these systems.
The Kill Switch Lesson in Porto
The real 'aha' moment for me happened after about six weeks of living in Porto. It was mid-January, and the wifi in my favorite stone-walled cafe was flickering because of a storm. My VPN has something called a 'Kill Switch,' which I used to think was a bit dramatic-sounding. But that day, the wifi dropped for a split second. Without the Kill Switch, my laptop would have automatically reconnected to the unsecured cafe wifi and my email client would have finished sending a large attachment over that open line.
Instead, the Kill Switch instantly cut my entire internet connection the moment the VPN tunnel wobbled. It felt like a fail-safe on an elevator. It prevented my data from leaking out into the open air before the secure connection could be re-established. It’s one of those small things you don't notice until it saves your skin. Since we travel as a pair, we actually use the Best VPN with Unlimited Device Connections for Nomadic Couples to make sure both our laptops and our phones have this safety net running 24/7 without us having to constantly log in and out.
Final Thoughts from the Cafe Floor
By the time I finally hit 'Send' on that contract in Mexico City, the horchata was gone and the cafe was getting loud, but I felt fine. There’s a specific peace of mind that comes from knowing my client's NDAs are safe, even when the coffee is great but the network security is non-existent. You don't need to be a network engineer to protect your work; you just need to be disciplined enough to wait for that green icon before you open your inbox.
Working remotely is a privilege, but it comes with the responsibility of not being the 'weak link' in your company's security chain. It’s not just about avoiding the 'bad guys'; it’s about creating a bubble of privacy that travels with you, whether you're in a humid cafe in CDMX or a drafty library in London. Just remember: wifi first, VPN second, emails third. Always.