Creating a secure Hot Spot?

[Ambrosia7177]

Hello. I got a mobile plan yesterday - first ever - to convert my iPhone into a hotspot and use it for two-factor authentication.

When I use my iPhone as a hotspot, I want to be 110% certain that the connection is secure!!

How can I do this?

 

[CharlesShaw]

Turn off WiFi and bluetooth on the iPhone and only share via USB.

 

[Ambrosia7177]

Turn off WiFi and bluetooth on the iPhone and only share via USB.

Some follow-up questions...

1.) I have heard that Bluetooth is horribly insecure, so I guess that should always be left turned off, right?
What exactly does "WiFi" mean?

2.) I understand what WiFi is like when connecting to the WiFi at say, my hotel. But what exactly does this setting mean/do on my iPhone?

3.) Isn't there a "secure" way to allow my Retina MBP to connect to my iPhone' Hotspot without having to physically tether the two together with a USB cable?

4.) What about using a VPN to add security?

Because I live on the road, whenever I go online on my Retina, I always use IVPN as my VPN so I have an encrypted tunnel, and so I have a "kill switch" at all times.

Do I need to do something similar when accessing my iPhone's Hotspot?

 

[glenthompson]

Use a strong, unique password for the hotspot if using WiFi. A VPN can improve security but probably isn’t necessary. Data is encrypted between laptop and phone then the cellular connection is very hard to snoop. Unless you’re a high value target there are easier targets out there. Most hacks are the result of social engineering or stupid user tricks like weak or reused passwords.

 

[Ambrosia7177]

Use a strong, unique password for the hotspot if using WiFi.

Right.

A VPN can improve security but probably isn’t necessary. Data is encrypted between laptop and phone then the cellular connection is very hard to snoop.

Hang on a minute...

You are saying that the hotspot connection between my Retina MBP (macOS Sierra) and my iPhone 6S Plus (iOS 10.x) is encrypted automatically??

And further, you are saying the connection between my iPhone 6S Plus (iOS 10.x) and AT&T is encrypted automatically??

Unless you’re a high value target there are easier targets out there.

Not quite yet!

Most hacks are the result of social engineering or stupid user tricks like weak or reused passwords.

I asked because I have a unique situation..

I'm away from home and staying in a hotel with WiFi which I use daily for surfing/email/VoIP/etc. I use IVPN to protect me.

But I have learned the hard way that these days you get dinged if you use a VPN when signing up for accounts.

So as I set up some social media accounts, I need to drop my IVPN, however, there is no way in hell I'm using the unencrypted hotel WiFi?!

So another benefit of breaking down and getting a mobile plan is that it becomes a hotspot.

But since I cannot use IVPN while signing up for accounts, I need to be 110% certain that a.) I understand how all of this new technology works, and b.) make sure I have things configured correctly!![/QUOTE]

 

[glenthompson]

Unless you are using the VPN to route through another country there should not be a problem signing up accounts when connected. Some streaming services like Netflix try to block VPN usage since people try to use them to circumvent licensing restrictions.

Sure, you can use a VPN with your hotspot. It will add some overhead. For best security running a more current OS version is preferred.

 

[Ambrosia7177]

Unless you are using the VPN to route through another country there should not be a problem signing up accounts when connected. Some streaming services like Netflix try to block VPN usage since people try to use them to circumvent licensing restrictions.

Sure, you can use a VPN with your hotspot. It will add some overhead. For best security running a more current OS version is preferred.

@glenthompson,

Okay.


But to clarify, can you please answer my questions from above...

1.) You are saying that the hotspot connection between my Retina MBP (macOS Sierra) and my iPhone 6S Plus (iOS 10.x) is encrypted automatically??


2.) And further, you are saying the connection between my iPhone 6S Plus (iOS 10.x) and AT&T is encrypted automatically??

Thanks.

 

[glenthompson]

Yes, the connection to the hotspot from the Mac is encrypted. Then communications between the phone and AT&T is encrypted. However this is all software and all software has bugs so no connection is 100% secure. The only really secure computer is one with no external connections kept in a SCIF. Once you have ports or connect to other devices, the security is reduced.

 

[Ambrosia7177]

Yes, the connection to the hotspot from the Mac is encrypted. Then communications between the phone and AT&T is encrypted. However this is all software and all software has bugs so no connection is 100% secure. The only really secure computer is one with no external connections kept in a SCIF. Once you have ports or connect to other devices, the security is reduced.

I'll have to look into how to set up IVPN on my iPhone...