I highly recommend using a paid for VPN service, unless you are doing something that needs the security of TOR. This way, your traffic is encrypted all the way to the VPN, so someone sniffing local links will not be able to grab your password... and if someone has one of the big routers compromised, they will be looking for far bigger fish.
strongvpn.com comes to mind. I also have heard of high recommendations for cotse.net and swissvpn.net.