Assume the network is hostile
Treat public Wi‑Fi as read-only for sensitive tasks when possible. Use cellular hotspot for banking if needed.
HTTPS everywhere
Modern browsers flag insecure sites. Combine HTTPS with a VPN when you must work on untrusted networks.