Every Connection, Locked Down From the padlock in your browser to the Wi-Fi at the airport, a secure connection keeps eavesdroppers out of what travels between your devices.

The connection to that site is encrypted with TLS, so no one on the path can read or alter the traffic. It does not mean the site itself is honest — phishing sites use HTTPS too.

Less than it used to be — HTTPS protects most traffic now. The remaining risks are fake hotspots and unencrypted sites, so verify the network name and avoid logging in over plain HTTP.

Sometimes. A VPN encrypts your traffic to the VPN provider — useful on untrusted networks or to shift your visible location — but it moves trust to the provider rather than eliminating it.