How to Encrypt Your Internet Connection: 7 Methods That Work

By George Mutune   Published: 10/02/21   Updated: 09/26/26   8 min read
Cybersecurity

Updated September 2026. We rewrote this guide with seven methods that work today, including browser HTTPS-only modes, encrypted DNS and iCloud Private Relay, plus an honest look at what a VPN does and doesn’t do. Discontinued apps such as Wickr Me were removed, along with 2021 statistics.

“Encrypting your internet connection” means making sure the data you send and receive can’t be read by anyone between you and the site or service you’re using: people on the same Wi-Fi, your internet provider or a compromised router. Most of your traffic is already encrypted by HTTPS. The steps below close the remaining gaps.

What’s already encrypted, and what isn’t

TrafficEncrypted by default?Who can still see something
HTTPS websites and most appsYes (TLS)Your network and ISP see which sites you connect to, not the pages or data
Plain HTTP websitesNoAnyone on the path can read or change the page
DNS lookupsOften notYour ISP or network can log every domain you look up
Home Wi-Fi with WPA2/WPA3Yes, between device and routerTraffic is unencrypted again past the router unless HTTPS is used
Open public Wi-FiUsually noOther users can see unencrypted traffic
Standard SMS and phone callsNo end-to-end encryptionCarriers, and attackers who compromise them

According to Google’s HTTPS transparency report, the vast majority of pages loaded in Chrome now use HTTPS. The remaining risks are the leftover HTTP sites, unencrypted DNS, untrusted networks and messaging that isn’t end-to-end encrypted.

1. Force HTTPS in your browser

Turn on your browser’s HTTPS-only setting so it always tries a secure connection and warns you before loading an unencrypted page:

Never enter passwords or payment details on a page your browser flags as “Not secure.” The old HTTPS Everywhere extension is retired because browsers now do this themselves.

2. Encrypt your DNS lookups

Every time you visit a site, your device looks up its address with DNS. Traditional DNS is unencrypted, so your ISP or anyone on your network can see and log the domains you visit, and an attacker can tamper with the answers. DNS over HTTPS (DoH) and DNS over TLS (DoT) encrypt those lookups.

3. Secure your Wi-Fi

Wi-Fi encryption protects traffic between your device and the router. At home, use WPA3 (or WPA2/WPA3 transition mode for older devices) with a long passphrase, keep the router’s firmware updated and change its default admin password, as the NSA recommends (NSA). On public Wi-Fi, assume the network is untrusted: confirm the network name with staff, prefer your phone’s hotspot for anything sensitive, and use methods 1, 4 or 5. Our guide to wireless network security covers router settings in detail.

4. Use a trustworthy VPN when you need one

A VPN creates an encrypted tunnel from your device to the VPN provider’s server. It hides your traffic and DNS lookups from the local network and your ISP, and it hides your IP address from sites you visit. It’s useful on public Wi-Fi and for reaching work systems.

But a VPN doesn’t make you anonymous or protect you from malware or phishing, and the VPN provider can see what your ISP no longer can. The FTC advises researching a VPN app before you install it, checking the permissions it asks for, making sure it actually encrypts your data and finding out whether it shares your information with third parties (FTC). Choose a paid provider with a clear no-logs policy that has been independently audited, and avoid free VPNs of unknown origin. At work, use the VPN or zero-trust access tool your employer provides.

5. Turn on iCloud Private Relay (Apple devices)

If you pay for iCloud+, Private Relay encrypts your DNS lookups and sends Safari traffic through two separate relays. Apple sees your IP address but not the sites you visit; the second relay, run by a partner, sees the site but not your real IP address (Apple). It’s lighter than a VPN and covers Safari, DNS lookups and unencrypted app traffic, but not every app. Turn it on in Settings > [your name] > iCloud > Private Relay.

6. Use Tor Browser for anonymity

Tor Browser routes your traffic through three volunteer-run relays, encrypting it in layers so no single relay knows both who you are and what you’re visiting. It’s designed for anonymity rather than speed, which makes it valuable for journalists, activists and people in countries that censor the internet. Traffic leaving the final relay is only encrypted if the site uses HTTPS, so the same HTTPS rules apply.

7. Use end-to-end encrypted messaging and calls

End-to-end encryption (E2EE) means only you and the person you’re talking to can read the messages, not the app provider or your carrier. In December 2024 CISA advised people to switch to end-to-end encrypted apps for sensitive communications after Chinese state hackers breached major U.S. telecom networks (CISA).

Wickr Me, which older versions of this guide recommended, shut down at the end of 2023 (The Verge). For calls specifically, see our guide on how to encrypt phone calls.

What encryption in transit won’t protect

For the principles behind all of this, read our guides to cryptography and network security and common encryption methods. To hear about new privacy threats and fixes as they happen, sign up for the CyberExperts Daily Brief, a short weekday email.

Frequently asked questions

How do I encrypt my internet connection for free?

Turn on your browser’s HTTPS-only mode, enable encrypted DNS (Secure DNS in Chrome or Edge, Private DNS on Android, DNS over HTTPS in Windows 11), use WPA3 on your home Wi-Fi and use end-to-end encrypted apps like Signal. None of these cost anything.

Is my internet connection already encrypted?

Mostly. HTTPS encrypts the content of most websites and apps. But plain HTTP sites, standard DNS lookups and open public Wi-Fi can still expose information, and your ISP can see which sites you connect to.

Does a VPN encrypt all my internet traffic?

A VPN encrypts traffic between your device and the VPN server, including DNS if it’s set up correctly. After that, traffic travels normally, so HTTPS still matters. The VPN provider can see what your ISP used to see, so choose one you trust.

Can my ISP see what I do with HTTPS?

Your ISP can’t see the pages you view or what you type on HTTPS sites, but it can usually see which domains you visit through DNS lookups and connection details. Encrypted DNS, iCloud Private Relay or a VPN reduce that.

Is public Wi-Fi safe if the site uses HTTPS?

HTTPS protects the content of your session even on public Wi-Fi. The risks are fake networks, unencrypted apps or sites and DNS tampering. Use HTTPS-only mode, encrypted DNS and a trusted VPN or your phone’s hotspot for sensitive tasks.

Is Tor better than a VPN?

They do different jobs. Tor gives strong anonymity but is slower. A VPN is faster and good for protecting traffic on untrusted networks, but the provider can see your activity. For everyday privacy, HTTPS plus encrypted DNS covers most needs.

Sources

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Recent Coverage

Common Encryption Methods in 2026

Practical 2026 guide to encryption methods: AES-GCM and ChaCha20-Poly1305 AEAD, RSA/ECC key exchange, NIST PQC (ML-KEM, ML-DSA, SLH-DSA), TLS 1.3 context, and...

Recent Coverage

Why Hardware Encryption is Not Secure

Hardware Encryption is not Secure A Little History... In the past, it was assumed that hardware encryption is far more secure than...

Latest Daily Brief

Monday’s brief: GlobalProtect logins without passwords, then SonicWall, AhsayCBS and NetScaler

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

George Mutune

I am a cyber security professional with a passion for delivering proactive strategies for day to day operational challenges. I am excited to be working with leading cyber security teams and professionals on projects that involve machine learning & AI solutions to solve the cyberspace menace and cut through inefficiency that plague today's business environments.

Keep Reading

Explore more →
Common Encryption Methods in 2026

Common Encryption Methods in 2026

Practical 2026 guide: AES-GCM, ChaCha20-Poly1305, RSA/ECC, NIST PQC (ML-KEM, ML-DSA, SLH-DSA), TLS 1.3, and legacy algorithms to retire.
Asymmetric Encryption Example: RSA Explained Step by Step

Asymmetric Encryption Example: RSA Explained Step by Step

An asymmetric encryption example you can check by hand: RSA keys, encryption, decryption and signing with small numbers, plus HTTPS, SSH and post-quantum.
Why Hardware Encryption is Not Secure

Why Hardware Encryption is Not Secure

Hardware Encryption is not Secure A Little History… In the past, it was assumed that hardware encryption is far more…