Is Proton VPN private even in a hotel wifi situation?

Operating Systems & Open Source Windows
1

So hotels in Thailand Cambodia Papua etc

Will the hotel staff still be able to see what im looking at?

2

Nope. They would see garbled communication between you and the VPN server. That’s it.

4 Likes
3

Its the free version of Proton VPN it has like only 2 severs both of which are in Mexico, is it still safe? {Like the free version]

4

I dont see why it is not safe

1 Like
5

You could use travel router to add another level of security.

1 Like
6

Depends on what your trying to keep safe from.

Do you want to ensure hotel staff isn’t see your traffic? Any VPN will protect you from that.

There are many free endpoints for Proton in lots of different countries. Most are overloaded, so that will most likely be your main issue, not security really.

1 Like
7

I have a home device set up as an exit node in Tailscale, I use that whenever I’m on a public network.

8

Not sure if you’re still tracking this, but since I happened on this thread, this sounds like the exact situation that could be vulnerable with the newly discovered VPN bug/attack. Can’t link to the site I remember posting about it now because blocked at work (Mullvad’s blog) but the short version is if you connect to a VPN on a network you don’t control (for example, hotel), someone who has control on that network (be it hotel staff or an attacker who gained access) can set it so it routes through them and your VPN client won’t tell you. Android is immune, so solution if you’re concerned is use android phone, and if you need something else like a laptop connected, do it through the android as a hotspot.

1 Like
9

The attack vector is via DHCP, option 121, IIRC, because it allows for setting default routes on the device, so it might route traffic over the insecure network, instead of tunneling over the VPN virtual interface.

Might only be windows, and IOS that are vulnerable?

Depends on the OS to choose to remove the option, or not, or whether to allow end user to disable it?

1 Like
10

Yeah, that one. I brought it up just because I happened across this thread while browsing, and I don’t know if OP had specific reasons to be concerned about security (vs. just general privacy concern), but if he does have specific threat to consider, this is relevant.

1 Like
11

Yeah, good shout dude