Travel eSIM, public Wi-Fi and VPN: what each protects

For a quick map check, convenience may be the main consideration. For a work login or sensitive document, your organisation’s security requirements matter. Australia’s cyber security guidance recommends trusted mobile data or a personal hotspot while travelling, and advises caution with public networks.

A hotel network name is not proof that the access point belongs to the hotel. Confirm the network with staff. Do not install an unfamiliar certificate or device-management profile simply because a pop-up says it is required for ordinary guest access.

A VPN can protect traffic between your device and the VPN service and change the public IP address seen by websites. It also shifts trust to that service. It does not verify that a shopping page is genuine, prevent you from entering a password into a phishing site, or guarantee that your bank will accept a foreign connection.

Use your employer’s approved VPN for work where required. For personal use, decide who operates the VPN and what traffic it carries before trusting it with your accounts. The Australian Cyber Security Centre advises checking local laws before using a VPN abroad.

A service may apply location or fraud checks, or restrict VPN addresses. A travel eSIM can also route traffic through another country without you using a VPN. Our IP-location guide explains why GPS, local signal and website location can disagree.

If one app fails, compare its behaviour on a trusted alternative connection and record the error. Do not cycle through account countries or repeatedly retry payments to get around a restriction. Ask the service owner or your IT team which connection it supports.

• Update the device and essential apps before departure.
• Set a strong device passcode and arrange account recovery while your normal verification methods work.
• Keep sensitive work inside approved apps and connections.
• Use a strong hotspot password and limit the connected devices.
• Save tickets and key contact details for offline use.
• Pause before responding to urgent login or payment messages, even when the connection itself is trusted.

If a personal VPN is optional, a brief comparison with it off can help isolate a connection problem. Avoid sensitive activity during that comparison. If it is required by work, ask IT rather than disabling it. A different result tells you which layer to investigate; it does not prove the VPN or eSIM is defective.

For calls, also check carrier-specific conditions. Telstra says its Wi-Fi calling does not support VPNs. That does not mean you should remove a required work VPN; use another approved calling route. See calling Australia with data only.

Checked 3 October 2026. Device and carrier instructions can change; the linked source and your purchased plan govern the specific service.

• Australian Cyber Security Centre: travelling security tips
• Australian Cyber Security Centre: practical business guidance
• Telstra: Wi-Fi calling and VPN conditions