Guide

Holiday Travel VPN Checklist: Airports, Hotels and Streaming Home

Set it up at home, not at the gate. A practical checklist for using a VPN on airport and hotel Wi-Fi this holiday season, with the limits stated plainly.

October 30, 2026 · 9 min read · Last checked: October 30, 2026

The most useful thing you can do for holiday travel security happens before you pack: install your VPN, turn on its kill switch, and test it at home. Thanksgiving falls on November 26, 2026. A crowded gate the day before is a bad place to troubleshoot an app.

This checklist is based on guidance from the FTC and NIST, VPN providers' own documentation, streaming services' help pages, and official travel advice. We have not tested any VPN for this guide.

Before you leave: the at-home checklist

Do these at home, on a network you trust. Each one is harder on a hotel connection with a login page and a weak signal.

• Install the VPN app on every device you are taking, including a tablet or laptop you rarely use.
• Sign in on each device and confirm two-factor codes reach you. If they go by SMS, make sure your phone plan works abroad.
• Turn on the kill switch and the "connect automatically on untrusted Wi-Fi" option if your app has one.
• Update your phone and laptop operating systems and your browser. The FTC recommends turning on automatic updates.
• Turn on two-factor authentication for email, banking, and airline accounts.
• Download boarding passes, hotel confirmations, and maps for offline use.
• Download movies or shows you plan to watch, then check whether they will play in your destination country.
• Note your VPN's support address and refund window in case it fails on the first night.
• If you bring a travel router, update its firmware and set up the VPN profile at home.

If you are still choosing a VPN, start with our best VPN for 2026 guide. Buying close to a trip also gives you most of the refund window to test it on the road.

What public Wi-Fi risk looks like in 2026

Public Wi-Fi is less dangerous than it was a decade ago, and it helps to be accurate about why. The FTC's current consumer guidance says connecting through public Wi-Fi is "usually safe," because most websites now encrypt traffic.

The FTC's advice is to look for HTTPS or the lock symbol before entering sensitive information. It also warns that scammers can build fake sites with encryption, so a lock does not prove a site is legitimate.

So what does a VPN add on airport or hotel Wi-Fi? Three things HTTPS does not fully cover:

• Which sites and services you use. Without a VPN, the hotspot operator can typically see the domains you connect to, even when the content is encrypted.
• Apps you cannot inspect. The FTC notes it is harder to tell whether a mobile app encrypts its traffic. A VPN encrypts everything leaving the device.
• Rogue or look-alike networks. If you join a fake "Airport_Free_WiFi," the VPN tunnel still protects traffic in transit to the VPN server.

The FTC made a similar point in its 2018 VPN tips, saying VPN apps can "help shield personal information" on open networks. The same release told consumers to research a VPN app, check its permissions, and confirm whether it shares data with third parties.

NIST's National Cybersecurity Center of Excellence makes the same underlying point in its own holiday travel tip: the risk comes from joining a public hotspot with a device that is not well secured. Updates and two-factor authentication still matter more than any single app.

At the airport

1. Confirm the network name with signage or staff. Do not join a network just because it has "free" and the airport's name in it.
2. Accept the portal, then connect the VPN. Most airport networks show a login or terms page first. The VPN cannot connect until you clear it.
3. Check the VPN shows "connected" before opening email or banking. If it will not connect, use your phone's cellular data for sensitive tasks.
4. Turn off auto-join for the network when you leave. Otherwise your device may reconnect to any network with the same name later.

Expect slower speeds through a VPN on congested airport Wi-Fi. Our explainer on whether a VPN slows down your internet covers what causes the drop and which settings help.

At the hotel or rental: captive portals and kill switches

Hotel Wi-Fi usually requires a room number or a code on a captive portal page. This is the single most common reason a VPN appears "broken" on the first night.

Getting through the login page

The portal has to load before the VPN can connect. If it never appears, briefly disconnect the VPN, open a plain http website to trigger the redirect, sign in, and reconnect. Then confirm the VPN shows connected again.

A kill switch can block the portal from loading, because it stops all traffic outside the tunnel. Some apps exempt local networks or captive portals; others need the kill switch paused for that one step. Keep the pause short, and turn it back on.

Why the kill switch matters on hotel Wi-Fi

Hotel connections often drop when you move between floors or when the portal session times out. NordVPN's and Surfshark's feature pages both describe a kill switch that cuts internet access if the VPN connection drops. That prevents apps from quietly sending data over the hotel network in the gap.

Travel routers handle portals once

A travel router signs in to the portal once, then shares the VPN with every device you brought. GL.iNet's documentation describes a login mode for public hotspots in firmware 4.6 and later, plus a MAC address clone option. It also warns that some portal fixes require turning the VPN off, which can expose activity until you reconnect.

Our captive portal guide covers each workaround in detail.

Streaming your home services while away

This is where expectations and the rules diverge. Here are the facts as the streaming services state them.

Netflix's help center says streaming and download choices "vary by country," and titles in My List may not be available abroad. Downloaded titles on a phone or tablet may also stop playing in a different country.

When Netflix detects a VPN or proxy, it shows an error asking you to turn the service off. Its help pages add that VPNs are not supported for live events or on ad-supported plans.

Netflix's terms of use say you may access content "primarily within the country" where you set up your account. Content available "will vary by geographic location." The terms also prohibit attempts to circumvent its content protections. Other services set their own terms, so read the ones you pay for.

Split tunneling is the practical fix for many travelers. It sends your browser and email through the VPN while a streaming app uses the regular connection. For why detection happens in the first place, see why Netflix still detects your VPN.

Countries that restrict VPNs: check before you fly

VPN rules differ by country, and we only list what official sources state directly. Always read your own government's travel advice for every stop, including layovers.

• China. The UK government's travel advice says online products and services, "for example, VPNs," must be licensed by the Chinese government. It lists Google, Facebook, YouTube, and X as permanently blocked, and says access can be limited around key political dates.
• Russia. UK travel advice says there are increasing restrictions on internet content. It states that Meta's Facebook and Instagram, X, and LinkedIn are blocked, and that other websites can be unreliable.
• United Arab Emirates. The US State Department says the UAE has "strict laws regarding use of the internet and social media." The official pages we opened did not address VPNs directly, so check current advice before relying on one there.

Pack list and quick reference