VPN for Remote Work
Table of Contents
You're sitting in a Bangkok co-working space, laptop open, connected to the "Free_WiFi_5G" network alongside 40 other remote workers. You're in a Slack channel discussing an upcoming product launch, downloading a contract PDF from Google Drive, and about to join a video call with your London-based team. How secure is any of this?
The answer: entirely insecure without a VPN. Public Wi-Fi networks are among the most dangerous environments for sensitive business data. A VPN is your first and most essential layer of defense.
The Real Security Risks of Remote Work on Public Networks
Most remote workers dramatically underestimate how vulnerable they are when working from hotels, cafes, airports, and co-working spaces. The threats are real, technically straightforward to execute, and underreported because most breaches go unnoticed.
Man-in-the-Middle (MITM) Attacks
In a MITM attack, someone on the same public network intercepts your traffic before it reaches its destination. They can read unencrypted emails, capture login credentials, and even modify data in transit. Public Wi-Fi with no encryption (or weak WEP encryption) makes this trivially easy — tools are freely available online.
Evil Twin Hotspots
An attacker creates a fake Wi-Fi hotspot with a legitimate-sounding name (like "Hotel_Guest_WiFi" or "Starbucks_Free"). Your device auto-connects to it, and all your traffic routes through the attacker's network. You won't notice anything different. They'll see everything.
Packet Sniffing and Session Hijacking
Even on a WPA2-protected public network (hotel, cafe), anyone with the network password can capture and analyze all unencrypted traffic. Tools like Wireshark make this accessible to non-technical users. If you're sending passwords or sensitive data over HTTP, it's visible.
How VPN Protects Remote Workers
A VPN creates an encrypted tunnel between your device and a VPN server. All your internet traffic — email, Slack, video calls, file transfers — passes through this encrypted tunnel. Even if someone intercepts your traffic on the public Wi-Fi, they see only encrypted gibberish.
What VPN Encryption Protects
- Login credentials: Your corporate email password, CRM login, cloud service authentication tokens
- Communication content: Email body text, Slack messages, Slack file attachments
- File transfers: Documents uploaded to Google Drive, Dropbox, or sent via WeTransfer
- Video call data: Audio and video streams from Zoom, Teams, Google Meet
- Browsing activity: Internal company tools, HR systems, financial dashboards
Corporate VPN vs Personal VPN for Remote Work
There are two categories of VPN relevant to remote workers, and understanding the difference is critical.
Corporate/Enterprise VPN
Your company provides this. It connects your device directly to the corporate network — you get an internal IP address and can access internal resources like file servers, internal wikis, and on-premise databases. Corporate VPNs typically use protocols like Cisco AnyConnect, Fortinet SSL-VPN, or Pulse Secure.
| Feature | Corporate VPN | Personal VPN |
|---|---|---|
| Access internal systems | Full access | None |
| IT department management | Fully managed | Self-managed |
| Speed impact | < td>Can be significantUsually minimal | |
| Access public services | Usually routes all traffic | Selective routing |
| Privacy from employer | Full logging | Private |
Why Not Just Use Corporate VPN?
- Speed: Corporate VPNs route traffic through company infrastructure, which is often slower
- Split tunneling limitations: Corporate VPNs may force all traffic through the tunnel, slowing everything down
- Privacy from your employer: Corporate VPNs typically log all your internet activity
- Accessing home services: Corporate VPN won't help you access US-only services while traveling
The ideal setup for remote workers: Use both. Corporate VPN when you need to access internal company systems. Personal VPN for all other work activities — especially on public networks.
Setting Up Your Work VPN — Step by Step
Step 1: Install Your Personal VPN on All Devices
Install your chosen VPN (ExpressVPN, NordVPN, or Surfshark) on your laptop, phone, and tablet. Most VPN providers allow 5-10 simultaneous connections, so protecting all your devices is usually covered by one subscription.
Step 2: Enable Kill Switch on All Devices
The kill switch feature blocks all internet traffic if the VPN connection drops unexpectedly. This prevents your real IP address and unencrypted traffic from being exposed during reconnection. Always enable this — it's your safety net.
Step 3: Configure Split Tunneling
Split tunneling lets you choose which apps use the VPN tunnel and which use your regular internet connection. Route your work tools (Slack, email, video calls) through the VPN while allowing less sensitive traffic to go direct. This maintains speed while keeping sensitive data protected.
Step 4: Connect to a Server Near Your Work Location
If your company is based in San Francisco and you're working from Berlin, connect to a VPN server in San Francisco or the US West Coast. This gives you a US IP address, which keeps access to US-only SaaS tools and services seamless.
Public Wi-Fi Security Checklist
Before connecting to any public network for work, run through this checklist:
- VPN is active: Confirm your personal VPN is connected before opening any work applications
- Kill switch is enabled: Verify the kill switch is on
- Avoid WPA2/Open networks: Prefer networks with passwords over open networks, though password protection doesn't guarantee security
- Verify network name: Ask staff for the exact network name — attackers create convincing typos (e.g., "Starbuks_WiFi")
- HTTPS-only browsing: Install HTTPS Everywhere or ensure the padlock icon is present before entering any credentials
- Disable auto-connect: Turn off automatic Wi-Fi connection on your devices to prevent inadvertent connections to malicious networks
- Use cellular for sensitive tasks: For the most sensitive tasks (accessing banking, large financial transfers), use cellular data instead of public Wi-Fi
- Two-factor authentication: Ensure 2FA is enabled on all work accounts — this is your last line of defense if credentials are somehow captured
Accessing Home Country Services Abroad with VPN
Many services behave differently — or are completely blocked — when accessed from abroad. A VPN lets you appear to be in your home country, maintaining access to the services you depend on.
Banking and Financial Services
Many banks block access from foreign IP addresses as a fraud prevention measure. Trying to check your US bank account from a European IP may trigger a security lockout. Connect to a VPN server in your home country to access banking services seamlessly.
US Streaming Services (Work Break Entertainment)
If you're a Netflix, Hulu, or Disney+ subscriber, your home country's library is likely different from what's available abroad. A VPN set to your home country keeps your usual entertainment accessible during downtime.
Google Workspace and Microsoft 365
Both Google and Microsoft have varying levels of regional restrictions. Some enterprise features, specific document types, or administrative functions may be restricted based on login IP location. A home-country VPN usually resolves this.