Friday, July 5, 2013

Secure your Wi-Fi connection on Smart Phones and Tablets

Now a days eavesdropping became a big threat to Wi-Fi networks because most public Wi-Fi hotspots are not encrypted. Means anyone within the range can eavesdrop on what you send and receive. This is same scenario applies when using a laptop on a hotspot, or your computers at home on your own wireless router if it isn't encrypted with WEP, WPA, or WPA2 security.

Eavesdropping on Wi-Fi connections needs some software tools, that are freely available on internet. For example, programs such as Firesheep and SniffPass simply listen for and show login credentials to unsecured sites or services, like social networking sites and Web-based or POP3/IMAP email accounts. There are programs like EffeTech, HTTPSniffer can even capture and reassemble the web pages you are viewing and files you transfer. Though eavesdroppers can even capture data from your online banking transaction, if the site it is not secured. The same goes with other services, for instance, if you check your email through the browser or a client app on the device and if it is secured with SSL then you need not to worry.

Combating threats:
The first line of defense to combat Wi-Fi eavesdroppers is to make sure any sensitive website you login to or service you setup on the phone (like email), is secured with SSL encryption.

If a website connection is secured and its address starts with https:// in the address bar. And also you should see a padlock or other indicator showing SSL encryption is in use somewhere on the browser screen (usually in the lower right hand corner).

If you use the device's email client rather than a website to check your email, open your account settings and make sure SSL encryption is set for both the incoming (POP3 or IMAP) and outgoing (SMTP) servers.

We can not say all Wi-Fi hotspots are unsecured. But some larger hotspot networks use WPA/WPA2-Enterprise security with 802.1X authentication to protect you from snoopers. When you are using encrypted connections like these you don't have to worry about local eavesdroppers. Keep in mind this is not the case if the hotspot is secured with WEP or WPA/WPA2-Personal (PSK) as other people on the network can still capture and decode your traffic.

Use the data plan instead using of Wi-Fi:
One way to mitigate Wi-Fi security issues is to limit your usage of hotspots, specially when you are out side in the public places like Cinema Theaters, Airports use a 3G or 4G (if you can get it) cell data connection instead. Though it's slower, most cell service providers encrypt the traffic between cell towers and your device.

Use a VPN for full security:
If you're really concerned about your mobile Internet security, consider using a virtual private network (VPN) on both your Wi-Fi and cell data connections. When connected to a VPN, all your Internet traffic travels through an encrypted tunnel, guarding it from local eavesdroppers. It protects your data traffic and passwords. In addition to encryption, VPNs can also give you secure remote access to files and network resources at work or home, like remote desktop services.