Public Wi-Fi in the UAE: What Your Network Can See, and What a VPN Changes

Internet access in the UAE is fast and, for most of what people do online, straightforward. The part that gets less attention is the network you are sitting on. Public Wi-Fi in cafés, malls, hotels and airports across Dubai, Abu Dhabi and the other emirates is convenient precisely because it is open — and open is also what makes it worth thinking about.

What an Open Network Actually Exposes

When you join a shared Wi-Fi network, your device is on the same local segment as everyone else on it. Traffic that is not encrypted end to end can be observed by other devices on that network, and by whoever operates it. Modern browsers and apps have made this much better than it was — most large sites use HTTPS now, so the contents of what you send are protected.

What HTTPS does not hide is where you went. The name of every site you visit is still visible to the network as your device looks it up, along with the size and timing of what you exchange with it. For a personal browsing session that may not matter to you. For someone working remotely on a client's files from a café in Deira, or logging into a company system from a co-working space, the picture of who they work with and what they are working on is worth more than the individual pages.

What Encryption Changes

A VPN puts your traffic inside a single encrypted tunnel between your device and a server you choose. The local network — the café's router, the hotel's access point, anyone else connected to it — sees one encrypted connection to one address, and nothing about what is inside it. Site names, the pattern of your browsing and the services you use stop being readable from the seat next to you.

That is the whole of it, and it is genuinely useful. It is worth being precise about the limits, because a VPN is sold as more than it is:

• It protects traffic in transit. It does nothing about a compromised device, a phishing page you type your password into, or an app that leaks data by design.
• It does not make you anonymous. It moves the trust rather than removing it: your ISP no longer sees your traffic, and the VPN operator's handling of it becomes the thing that matters. That is why a no-logs policy is the claim to check, and why it should be checkable.
• It does not change what is permitted. A VPN is a privacy tool, not a legal one.

Calling and Messaging: Use the Licensed Route

Voice and video calling over the internet is regulated in the UAE, and the Telecommunications and Digital Government Regulatory Authority licenses specific VoIP services to operate here. Those licensed apps are the route that keeps you on the right side of the rules, and they are available through the national operators. If calling is what you need, that is where to start — not with a workaround.

We say that plainly because the alternative advice is common and it is bad advice. Article 3 of Federal Decree-Law No. 34 of 2021 penalises using an IP address to access services one is not authorised to access, and the penalties are substantial. No connection is worth that, and any product that suggests otherwise to a resident is not being straight with them.

Where a VPN Fits Here

On the network side, and only there. Encrypting what you do on an open Wi-Fi network is lawful, uncontroversial, and the reason most people install one in the first place: the café, the airport, the hotel, the conference hall. If you handle work data on networks you do not control, that is the case for it, and it is a strong one on its own.

Doft VPN

Doft VPN gives you every server location free, with no paywalled regions. It keeps no logs of your activity. It connects in one tap on Android and iOS, and premium adds higher speeds and raises the data allowance — but the privacy features are free, because a security tool that only protects people who pay is not much of a security tool.

Use it for what it is good for: making the network you happen to be on stop being a party to your work.