Why public Wi-Fi is different
Public Wi-Fi is convenient, but it is usually outside your control. You do not control the access point, the upstream network, or the other users on the same local network.
A VPN helps by creating an encrypted path from your Windows device to the VPN service. That reduces exposure on the local Wi-Fi segment, especially on shared networks in hotels, airports, cafes, coworking spaces, and similar locations.
What a VPN does not fix
A VPN does not make unsafe websites safe. It does not replace strong passwords, browser updates, device patching, or multi-factor authentication. It also does not protect you if you willingly type credentials into a fake website.
The VPN protects the network path; it does not fix every security problem on the device or every risk on the internet.
Before you connect
Connect to the Wi-Fi network first, complete any captive portal sign-in if required, then start the VPN client. If the Wi-Fi network blocks VPN traffic, try reconnecting after the captive portal is fully completed.
On Windows, also confirm the device has working DNS and internet access before blaming the VPN client. A broken hotel Wi-Fi login page can look like a VPN problem when the real issue is local connectivity.
Simple checklist
Use the VPN before opening sensitive sites. Avoid banking or administrative tasks on suspicious networks. Keep Windows and the browser updated. Disconnect from public Wi-Fi when you are done.