When Should You Turn On a VPN?

Most advice about VPNs is written around the question "should I buy one?" This article answers the question that comes a week later: it is installed on your phone and laptop, so when exactly should you tap connect? Switching it on for every second of the day is not wrong, but it is not the only sensible habit, and it is not always the most practical one. Switching it on only when you remember is the worst habit of all, because the moments you forget are usually the risky ones.

The answer below is built around situations rather than technology. You will get a three-question test, a table of everyday moments, a timeline of a normal day, and a list of the occasions when pausing the VPN is the better move. If you are still deciding whether a VPN is worth having at all, start with Do I Need a VPN? and come back here once you own one.

The three-question test before you tap connect

You can decide almost every case with three quick questions. Ask them whenever you join a new network or open something sensitive.

1. Who else is on this network? If the answer is "only my household", the network is low risk. If the answer is "I do not know", such as a cafe, hotel, airport, coworking space, school or a shared building, the risk is higher because strangers and unknown equipment sit on the same connection.
2. What am I about to send or open? Reading a public news page is low stakes. Logging in to email, entering a card number, opening client documents or using a work portal is higher stakes, because the information would be valuable to someone who could read it.
3. Who do I not want to see where I go? This is the privacy question. The operator of any network, from a cafe to your internet provider, can usually see which sites you contact even when the pages themselves are encrypted. If you would prefer that operator not see it, a VPN is the tool that hides the destinations from them.

If the answer to the first question is "unknown" or the second is "valuable", turn the VPN on. If the third question matters to you, turn it on even at home. If none of the three applies, leaving it off costs you nothing in safety. That is the whole rule; the rest of this guide is practice.

Moments when switching it on makes sense

The table below lists common situations, how strong the case is, and the reason behind it. "Strong" means most people should use a VPN here; "optional" means it is a personal choice.

Moment	Case for a VPN	Reason
Hotel, cafe or airport Wi-Fi	Strong	Shared network with unknown users and unknown equipment
Coworking space or shared flat network	Strong	You cannot see or control who else is connected
Logging in to work tools from outside the office	Strong	Work accounts are valuable; many employers expect a protected link
Booking travel or paying by card on a network you do not run	Strong	Card and booking details are worth stealing
Using a laptop for the first time on a new network	Strong	Laptops run many background services that talk to the network
Home Wi-Fi, ordinary browsing	Optional	Protects destinations from your provider; low risk from outsiders
Mobile data, ordinary use	Optional	Not shared with strangers, but your operator sees destinations
Reading a public page on your own network	Not needed	Nothing sensitive is sent and the network is yours
Downloading a large update at home	Usually off	A tunnel adds overhead without adding much protection

Public places deserve the most attention because the danger there is practical rather than theoretical. The US Federal Trade Commission's guidance on public Wi-Fi explains why shared networks need extra care, and our own article on staying safer on public Wi-Fi walks through the habits that go with a VPN. A VPN does not make an unsafe site safe or stop a fake login page from collecting your password. It protects the path between your device and the VPN server, which is exactly the part you cannot trust in a shared place.

Moments when you can safely leave it off

Not every minute needs a tunnel. Knowing when you can relax is what makes a VPN habit sustainable.

• Your own home network for ordinary browsing. The people who share your router are people you know. If your concern is only strangers on the network, you are covered.
• Local devices. Printers, smart speakers, casting devices and network storage often cannot be reached while a VPN is routing your traffic elsewhere. Switch the VPN off, or use split tunneling so that those local devices stay reachable. What split tunneling is explains how to let chosen apps bypass the tunnel.
• Games or calls where every millisecond counts on a trusted network. A VPN adds a hop, which can add a little delay. On your own connection you may prefer to disconnect for the match or the video call.
• Large downloads of public files. An operating system update or a public software package is not sensitive, and the tunnel only slows it down.
• Anything that is already protected well enough for the risk. HTTPS protects the content of the connection to most sites, as Cloudflare's explanation of HTTPS describes. For casual reading of a public page, that is often enough.

Leaving it off in these cases is a decision, not a lapse. The mistake is leaving it off by accident in the places where your three-question test said "on".

A day in the life: six moments, six decisions

Abstract rules are easy to forget, so here is one ordinary weekday for a person called Arisa, who works in marketing and travels twice a month.

7:30, the kitchen. Arisa checks the weather and the news on her phone over home Wi-Fi. The network is hers and the pages are public. VPN off, or on if she wants her internet provider not to see her reading habits; either is fine.

8:45, the train. She answers work messages over mobile data. The radio network is shared with other passengers only in the sense that the carrier is shared; nobody can join her connection. She leaves the VPN off for speed but would turn it on if she needed to open a client file.

10:15, the cafe near the office. She joins the cafe Wi-Fi to join a video call and open a spreadsheet. Unknown network, work documents: VPN on, before the first app opens.

13:00, lunch at the food court. She pays for lunch with a card tap and checks her bank app for a transfer. The bank app refuses to open while the VPN is running. She turns the VPN off, confirms the transfer on mobile data, and turns it back on. This is a normal pause and not a failure.

18:30, the airport lounge. She is travelling for a conference. Lounge Wi-Fi, hotel booking emails, a boarding pass, a work login: VPN on, and kept on for the flight's gate area, the taxi, and the hotel lobby later.

22:00, the hotel room. The room Wi-Fi is shared across the floor. VPN on for email and social media, and off for the hotel's casting feature, which needs to find the TV on the local network.

The pattern is simple: the VPN follows the network and the task, not the clock.

Always on or switched on when needed?

There are two sensible habits, and the right one depends on how much you value convenience versus control.

Always on. You leave the VPN connected whenever the device is awake. Advantages: no decision fatigue, no forgotten moments, and consistent protection as you move between networks. Disadvantages: occasional friction with banking and payment apps, local devices that cannot be found, a small delay, and a little extra battery and data. This habit suits people who travel a lot, work from shared spaces, or simply prefer not to think about it. If your app has an option to connect automatically when the device joins a network, that supports this habit; check what your app actually offers rather than assuming.

On when needed. You switch the VPN on for the situations in the table and leave it off at home. Advantages: fewer app conflicts and less overhead. Disadvantages: you must remember, and you must connect before you open anything sensitive. A reminder can help: some people keep the VPN app on their home screen and make "join Wi-Fi, tap connect" a single reflex.

A reasonable compromise for most people is this: always on while travelling and on any shared network, on demand at home and on mobile data. Whichever you choose, choose it deliberately and write it down once, so the habit does not depend on your mood.

When to pause it for a minute

A VPN you cannot pause is a VPN you will eventually uninstall. These are the normal reasons to pause, and how to do it safely.

1. A banking or payment app refuses to open or asks for extra verification. These apps watch for unusual connections, and a VPN can look unusual to them. Switch the VPN off, finish the task on a network you trust such as your home connection or mobile data, then switch it back on. Do not retry failed logins many times in a row, because that can lock the account.
2. A local device cannot be found. Printers, TVs and speakers live on your home network. Turn the VPN off while you set them up or use them, or exclude the relevant app with split tunneling if your app supports it.
3. A website shows a puzzle or an error. Many sites treat shared connections cautiously. Try once more, and if it keeps happening, pause the VPN on a trusted network to see whether it is the cause. Our help guide on turning off a VPN on any device shows how to do this cleanly on each system.
4. A video call or game feels slow. Test with the VPN off on a network you trust. If the problem disappears, the tunnel is adding delay on that route; otherwise the slowness lies elsewhere.
5. You are doing something where you want your real location to count, such as using a local food-delivery app that needs your actual position.

The rule for pausing is simple: pause only on a network you trust, and reconnect afterwards. A paused VPN left off by accident in a hotel lobby is the same as having no VPN.

Travel days: a timeline from front door to hotel

Travel is where the "when" question matters most, because you cross many networks quickly and each has different risk.

• Before you leave. Install the app and test it at home so that any sign-in problem is solved on a network you trust. With XPASS you sign in to the free VPNclient app using the username and password on your My Pass page; see the download page for the official app links.
• Airport and gate. Connect before you open the airline app, email or any booking. Airport Wi-Fi is shared by thousands of devices.
• Plane Wi-Fi. The same reasoning applies: shared, unknown, and expensive. Connect before you log in to anything.
• Taxi or train. Use mobile data, and switch the VPN on only if you are handling something sensitive.
• Hotel. Connect when you join the room or lobby network. Remember that hotel networks sometimes need a login page, so you may have to open the captive page first, then connect.
• Restaurants and shops. Treat each Wi-Fi network as new. A network you used yesterday at a different venue does not make this one safe.
• Back home. Return to your home habit and disconnect only when you want to.

If a hotel blocks VPN connections, fall back to mobile data for sensitive tasks rather than switching the VPN off and carrying on. The longer guide to using a VPN on hotel Wi-Fi covers that situation in more detail.

Common timing mistakes

• Connecting after opening the apps. If email and chat have already synced over the open network, part of the exposure has already happened. Connect first, then open.
• Assuming the VPN stayed on. Networks drop and phones switch between Wi-Fi and mobile data. Glance at the connection indicator after you change networks, and consider enabling a kill switch if your app provides one.
• Treating a VPN as a reason to ignore other habits. It does not stop phishing, weak passwords or malware. What a VPN actually protects is narrower than people expect.
• Leaving it off because "the site has a padlock". HTTPS is valuable, but it does not hide which sites you visit and does not cover apps that use their connections carelessly.
• Turning it on only when something feels wrong. Risk is not something you can feel on a network. Decide by situation, not by mood.
• Never turning it off. If an app keeps failing, the fix is a short pause on a trusted network, not weeks of frustration.

Write down your own policy

Because the best habit is a decided habit, finish by writing two or three lines that you can follow without thinking. Here are examples to adapt.

• Traveller: "Always on from the moment I leave home until I return. Pause only for banking on mobile data."
• Remote worker: "On for every shared network and every work login. Off at home unless I handle client files."
• Student: "On in the library, the dorm and cafes. Off at home. Pause for the university portal if it refuses the connection."
• Family: "On for the parents' laptops on any public network. Off for the TV and printer at home."

Review the policy after a month. If you break it constantly, it was too strict; loosen it. If you notice a situation you forgot, add it. A policy that is realistic will survive busy weeks, which is what matters.

Summary

Use a VPN whenever you are on a network you do not control or are handling something valuable, and consider it at home when you want your destinations hidden from your internet provider. Leave it off, or pause it, for local devices, apps that refuse VPN connections, and low-stakes tasks on a trusted network, and always reconnect afterwards. Decide your habit once, write it down, and let situation rather than mood guide each tap.

If a simple prepaid pass would suit the way you travel or work, the pricing page shows how it works at your own pace.