What Should You Do When Using A Public Computer: Complete Guide

What to Do When Using a Public Computer

You're at a hotel business center, about to check your email. Or maybe you're at the library, needing to print boarding passes. Or you're traveling and the only way to get online is the internet cafe down the street.

Here's the thing: public computers are incredibly convenient, but they're also one of the easiest ways for someone to get access to your personal information. And most people using them have no idea what they're doing wrong.

I've been writing about online security for years, and public computers are one of those topics where the gap between what people think is safe and what actually is safe is huge. Most folks assume that because they're at a library or a hotel, someone has already "taken care of" the security. That's not how it works.

So let's talk about what you should actually do — and what you absolutely should not do — when you find yourself using a computer that isn't yours.

What Is a Public Computer, Really?

A public computer is any machine you don't own or control that other people have access to. This includes:

• Library computers
• Hotel business center workstations
• Internet cafe machines
• Shared office computers (like a coworking space)
• Airport kiosk computers
• Computer labs at schools

The common thread? You don't know who used it before you, you don't know what's been installed on it, and you have no way of verifying whether it's been compromised.

Here's what most people miss: even if the machine itself is relatively secure, the network it's on might not be. Practically speaking, a hotel WiFi or library network is often less monitored than you'd think. So you're dealing with two potential risk vectors — the machine and the network — neither of which you control.

Why This Matters More Than You Think

The short version: public computers are a favorite target for criminals because they offer a one-stop shop for harvesting credentials, financial information, and personal data.

Think about what you do on a computer. Also, you check email. You might log into your bank. Worth adding: you enter passwords. You might access medical portals or tax documents. You might even type in a credit card number to buy something.

Now imagine someone has installed software on that machine that records every keystroke. Plus, every password. That said, every account number. Plus, every login. That's a keylogger, and it's one of the simplest pieces of malware to deploy on a public machine.

Or imagine the browser has been modified to "remember" your login information. When you type in your email and password, the browser helpfully fills them in — and that saved data is sitting there for the next person who knows where to look.

The reality is that public computers are rarely as clean as they look. In practice, even when they're not actively compromised, they're used by dozens or hundreds of people who have varying levels of technical knowledge and security awareness. Someone before you might have accidentally downloaded something sketchy. Someone might have plugged in a USB drive that installed malware. You just don't know.

And here's the part that really gets me: most public computers don't have any security software running in real-time, or if they do, it's the free trial version that expired months ago. The organization maintaining them is usually more concerned with keeping the machines running than with keeping them secure.

How Public Computers Get Compromised

Understanding how things go wrong helps you understand why the precautions matter. Here's what you're actually dealing with:

Keyloggers and Spyware

At its core, the big one. Keylogger software records every keystroke you make — passwords, credit card numbers, answers to security questions — and sends that data to whoever installed it. That said, it runs invisibly in the background. You would never know it's there.

Spyware is broader. It can capture screenshots, record which websites you visit, and even hijack your sessions. Some spyware is sophisticated enough to wait until you log into a specific site (like your bank) before springing into action.

Browser Manipulation

Public computers often have browser extensions or modifications that save your login information "for convenience." The next person using the machine can potentially access your accounts without even knowing your password.

There are also malicious extensions that can redirect you to fake versions of websites — so you think you're logging into your email, but you're actually typing your credentials into a site controlled by someone else.

Network Snooping

Even if the machine itself is clean, the network might not be. If you're on an unsecured hotel or cafe network, someone else on that network could potentially intercept your traffic. This is especially dangerous if you're entering sensitive information.

Physical Access

Here's one people forget about: someone can simply watch you type your password. In a busy internet cafe or library, it's easy for someone to glance over your shoulder or use a camera to capture what you're doing.

What You Should Actually Do

Now for the practical part. Here's how to protect yourself when you have no choice but to use a public computer:

Use Private or Incognito Mode

Every major browser has a private browsing mode — Chrome calls it Incognito, Firefox calls it Private Browsing, Safari calls it Private Window. When you open a private window, the browser won't save your browsing history, cookies, or form data.

This is your first line of defense. It doesn't make you invisible to keyloggers or network snoops, but it does prevent the browser from storing your credentials locally.

Here's how to do it: Press Ctrl+Shift+N (Chrome), Ctrl+Shift+P (Firefox), or Cmd+Shift+N (Mac Chrome) to open a private window instantly.

Never Save Passwords or Login Information

This should go without saying, but don't let the browser save your passwords. When the prompt pops up asking if you want to save your password, click "Never" or "No."

On a public computer, that saved password is essentially public information. Even if no one deliberately installed malware, someone could simply open the browser settings and see every account you've saved.

Log Out of Everything — Seriously, Everything

This is the mistake I see most often. People check their email, maybe print their boarding passes, and then just close the browser. They walk away with their session still logged in.

Want to learn more? We recommend word problems on linear inequalities and words spelled the same but pronounced different for further reading.

The next person to sit down at that computer can access their email. And their social media. Day to day, their bank. Whatever they left open.

Before you walk away: Click log out on every single account. Close the browser. Better yet, restart the computer if you can.

Clear Browsing Data Before You Leave

If you've been using a private window, this is less critical — but it's still a good habit. Before you leave, go into your browser settings and clear your history, cookies, and cached files.

In Chrome, you can do this quickly by pressing Ctrl+Shift+Delete (or Cmd+Shift+Delete on Mac) to open the clear browsing data menu. Select "All time" as the time range and make sure everything is checked.

Avoid Sensitive Transactions

This is the honest advice most security guides won't give you: if you can avoid it, don't do anything sensitive on a public computer.

Need to check your bank balance? Need to access medical records or tax documents? Plus, wait until you're on your own device. Need to enter a credit card? Don't do it. Find another way.

I know this isn't always possible. Sometimes you're traveling and the public computer is your only option. But if you have a smartphone with a data plan, that's usually safer than using a public machine.

Use Two-Factor Authentication When Possible

If you absolutely must access sensitive accounts on a public computer, having two-factor authentication (2FA) enabled adds an extra layer of protection. Even if someone captures your password, they still can't get in without the second factor (usually a code sent to your phone).

This isn't foolproof — some sophisticated attacks can intercept 2FA codes — but it makes things significantly harder for attackers.

Check for Shoulder Surfers

Simple, low-tech, but important. Worth adding: when you're typing passwords or entering sensitive information, glance around. Is someone standing too close? Consider this: is there a camera pointed at the screen? Is someone watching your hands?

It feels awkward to be paranoid, but in a public space, a little awareness goes a long way.

Common Mistakes You're Probably Making

Let me be honest: I've made some of these mistakes myself. They're easy to make because the computer seems trustworthy, the location seems professional, and you just want to get whatever you need to do finished.

Using the same password you use everywhere. If you're going to use a public computer, at least use a unique password for the account you're accessing. That way, if it gets compromised, the damage is limited.

Assuming the library/hotel/café "takes care of" security. They don't. They're not security companies. They're providing a convenience, not a secure environment.

Checking social media and thinking it's harmless. Your social media accounts contain a ton of personal information that can be used for identity theft or social engineering attacks. Treat them as sensitive as your bank account.

Leaving documents open. If you opened a document, closed it, but didn't actually log out of the cloud service (Google Drive, Dropbox, etc.), the next person might be able to access your files. Always fully log out.

What Actually Works — The Short Version

If you forget everything else, remember this:

1. Use private/incognito mode
2. Never let the browser save your password
3. Log out of everything before you leave
4. Clear your browsing data
5. Avoid sensitive transactions if you can
6. Enable two-factor authentication on important accounts
7. Be aware of who's watching

That's it. Seven habits that will dramatically reduce your risk without making your experience unnecessarily complicated.

FAQ

Is it safe to check email on a public computer?

It's relatively low-risk if you use private browsing mode, don't save your password, and log out completely. But if your email is connected to other accounts (which most are, for password resets), a compromised email account can be a gateway to everything else. Be cautious.

Can someone see what I did on a public computer after I leave?

Yes, if you didn't log out, didn't use private mode, and didn't clear your browsing data. Even if you did all those things, if the machine has keylogger or spyware software installed, your keystrokes were captured regardless of what the browser did or didn't save.

Should I ever enter my credit card on a public computer?

Ideally, no. Practically speaking, if you absolutely must, use a virtual card number or a prepaid card with a limited balance. If you can wait, don't do it. And make sure the site is using HTTPS (you'll see the little lock icon in the address bar).

What if I think I might have been compromised?

Change your passwords immediately — but do it from your own device, not the public computer. Enable two-factor authentication on any accounts you accessed. Plus, monitor your accounts for unusual activity. If you entered financial information, contact your bank.

Does using a VPN help on public computers?

It helps with network-level snooping, but it doesn't protect you from keyloggers or browser-based attacks on the machine itself. It's a good layer, but not a complete solution.

The Bottom Line

Public computers aren't evil. They're not traps set up to steal your information. They're just tools that come with real risks that most people never think about.

The good news is that protecting yourself doesn't require technical expertise or special software. It just requires a few extra seconds of attention before you walk away.

So next time you find yourself at a library terminal or hotel business center, don't just jump in and start typing. Open that private window. Skip the password saving. Log out when you're done. Clear the data.

It takes an extra minute. And that minute might save you from a world of trouble.