Shared Networks in the UAE: What Café and Co-Working Wi-Fi Can See

A large share of work in the UAE happens away from a company office — in co-working floors in Business Bay, in hotel lounges between meetings, in the cafés of Al Barsha and Khalifa City, in an airport terminal before a short-haul flight. The connectivity is excellent. The part worth a minute of thought is that almost none of those networks belong to you.

Who is on the network with you

Joining shared Wi-Fi puts your device on the same local segment as every other guest, and under the eye of whoever administers the access point. That used to mean passwords travelling in the clear. It mostly does not any more, and the security industry has been slow to update the scare story.

Today the contents of your session are usually protected. Any serious site or app uses HTTPS, so the message you typed, the file you uploaded and the credentials you entered are not readable by the person at the next desk.

What is still legible

What HTTPS does not conceal is the outline. Your device has to ask for each destination by name before it can reach it, and the network sees those requests, along with how much data moved and exactly when.

That outline is more revealing than people expect. An afternoon of it tells a reader which bank you use, which client portals you log into, which recruiter you were talking to, and which hours you actually work. If you handle a client's material on a network you do not administer, that is the exposure — not some dramatic password theft.

What a tunnel changes

A VPN puts the whole session inside one encrypted connection to a server you choose. From the local network's point of view there is a single stream to a single address and no way to tell it apart into destinations. The outline stops being readable in the room.

The limits are worth stating with the same directness:

• It covers traffic in transit and nothing else. Malware already on the laptop, a phishing page you authenticate to, or an app that hands your data to a broker are all outside its reach.
• It does not deliver anonymity. Your ISP stops seeing the detail and the VPN operator could, which is why a no-logs policy is the thing to actually check before you trust one.
• It does not alter what is permitted anywhere. A privacy tool is not a legal one.

Calling: the licensed route

Voice and video calling over the internet is regulated in the UAE rather than open, and the Telecommunications and Digital Government Regulatory Authority licenses specific services to provide it. Those services are offered through the national operators, and they are the route to use if calling is what you need. Working around the rules is neither something we recommend nor something we sell — Article 3 of Federal Decree-Law No. 34 of 2021 addresses that directly, and the penalties are serious.

Doft VPN

Doft VPN gives you every server location free, with no paywalled regions, and keeps no logs of your activity. One tap connects it on Android and iOS. Premium adds higher speeds and raises the data allowance; the privacy features are free, because protection that only reaches paying users is not much of a protection.

Use it where it earns its place: on the networks you borrow.