5.3 Safer networking habits

Blending rather than hiding

Network safety is often framed as hiding. In everyday life, the more practical goal is to blend.

A laptop that behaves like a normal laptop, a phone that connects predictably and a household network that looks like a household network generally attract less attention than a setup constantly trying to look unusual.

Blending does not mean giving up privacy. It means habits that reduce the sharp edges in your network footprint, so normal use does not become a string of anomalies.

The trade-off: blending relies on consistency. Your devices should behave in a steady, boring way. That can feel at odds with the idea of randomness or stealth, but in practice stability tends to be safer than novelty.

People often get into trouble because their setup is inconsistent:

• the laptop uses a VPN on Monday, none on Tuesday and a different one on Wednesday;
• the phone uses a rotating MAC address in a cafe but a fixed one on the train.

Each shift can reveal more than a calm, consistent pattern would.

Public Wi‑Fi risks without drama

Public Wi-Fi is convenient and cheap, but it is shared infrastructure. The two common risks:

• Interception: someone on the same network views unencrypted traffic.
• Impersonation: a network is set up to look like a legitimate hotspot.

Both are real, and both are usually mundane. It is far more likely to be a bored hobbyist running a test than a targeted operation against you personally.

How it plays out: you sit in a cafe and connect to "FreeCafeWiFi". Someone nearby runs a hotspot also called "FreeCafeWiFi", hoping your phone joins theirs. Once you are on it, they can see DNS requests and any unencrypted traffic, and try to redirect you to fake login pages.

Modern websites use HTTPS, which encrypts the contents of your session. But HTTPS does not hide that you are visiting a site, and it cannot protect you if you accept a dodgy certificate prompt in a rush.

The mitigations that actually work are simple:

• Prefer mobile data for anything sensitive. It is usually harder for strangers to interfere with.
• Check the network name with staff if you do use public Wi-Fi.
• Avoid networks that want you to install apps or certificates.
• Use a reputable VPN if you already trust one, but do not assume it makes an untrustworthy hotspot safe. It reduces certain risks but does not stop phishing or malware.

Myth: "HTTPS means public Wi-Fi is safe". Reality: HTTPS protects your page content, logins and messages, not the whole picture. The network can still see which sites you use, how often and roughly when. It also cannot protect you from a malicious website or a convincing fake login page.

Treat public Wi-Fi as a convenience, not a secure environment.

Home router configuration that helps rather than harms

Your home router is the choke point of your household network. It controls how devices talk to the internet and how the internet talks back. You do not need to be a network engineer to make it safer; you just need to avoid a few easy mistakes.

Start with the basics:

• change the router's admin password;
• update its firmware;
• use a modern Wi-Fi standard with a strong password.

In the UK many internet providers supply routers with decent defaults, but the admin interface is often still set to a widely known username and password. If a neighbour can guess it, so can a visitor.

Updating firmware is dull but important: it closes published vulnerabilities that are actively scanned for across the internet.

Next, keep the network simple. Most households do not need these switched on by default:

• remote administration;
• port forwarding for random services;
• universal plug and play (UPnP).

UPnP lets devices open ports automatically. Handy for games consoles and video calls, but malware can abuse it to expose services. Leave UPnP off unless you have a clear need, and then enable it only when you can see what it is doing.

A real-world example: a smart camera app asks you to enable port forwarding so you can watch the feed from outside. That works, but it exposes the camera to the internet, where vulnerable models are frequently scanned.

A safer design: the camera connects outbound to its service, and you connect to that service with a strong account password and two-factor authentication. That does trade privacy for convenience, because a third party is involved, but it avoids a direct open port on your home network.

Device isolation is another trade-off. Putting smart TVs or speakers on a guest network can stop them seeing your computers, but casting or local media may stop working smoothly.

• Upside: less risk from compromised devices.
• Downside: it can break your daily routines.

It depends on how much you rely on those devices and how often visitors connect to your network. There is no universally correct answer.

Behavioural fingerprints and how they form

A behavioural fingerprint is the pattern your devices create just by the way they talk to the network. It includes:

• the time of day you connect;
• the mix of services you use;
• how often updates happen;
• how regular your browsing is.

Unlike a cookie, which is data stored on your device, a behavioural fingerprint is inferred from traffic patterns. Internet providers, Wi-Fi operators or anyone who can observe the network path can use it.

For example, a phone that checks the same news sites every morning at 07:30, streams a particular radio station on the commute and uses a fitness app in the evening can be recognised by that pattern even if the device identifier changes.

Mostly this feeds ordinary analytics and service optimisation. It can also link activity across networks, which matters if you assume the cafe, the train and your home network give you three separate identities.

Behavioural fingerprints are hard to eliminate because they are a by-product of living a routine life. The fix is not to become random for its own sake, but to understand where routine is visible and decide whether it matters.

Ways to cut distinctive chatter without making your devices look strange:

• use the same secure browser on all networks;
• keep software updated at sensible times;
• avoid unnecessary background services.

Consistency versus randomness

It is tempting to randomise everything: rotate MAC addresses constantly, switch VPN servers every hour, change devices frequently. These can help in specific situations, but they can also create unique patterns of their own. A device that changes identifiers every ten minutes is unusual, and unusual behaviour is itself a fingerprint.

Consistency is not the same as being predictable to others. It means keeping your habits steady enough that they do not broadcast "something special is happening here".

• If you use a VPN, use it consistently across your devices and in contexts where it makes sense, such as public Wi-Fi or working away from home.
• If you do not, do not toggle one on and off in a way that draws a sharp boundary around particular activities.

Myth: constantly changing your MAC address makes you invisible. Reality: MAC randomisation helps prevent passive tracking by nearby observers, especially in busy public spaces. It does not hide your activity from the network operator you are connected to, and it does not stop fingerprinting based on traffic patterns. Use it because it removes a persistent identifier, not because it makes you anonymous.

The practical balance is to be deliberate:

• Low-risk environment: it is reasonable to prioritise convenience and stability.
• Travelling, working on sensitive material, or wanting a tighter boundary between contexts: choose stricter habits.

The aim is not perfect concealment. It is reducing avoidable exposure while accepting that some exposure is built into how networks work.