The Morning My Dad's Email Got Hijacked at a Hotel
Last spring, my parents flew down to visit my tita in Orlando — their first real trip since my dad moved into assisted living and then, thankfully, got well enough to travel again. They were staying at one of those mid-range hotels near International Drive, the kind with a breakfast buffet and Wi-Fi that asks you to "agree to terms" on a page that looks like it was designed in 2004.
My dad, being my dad, immediately connected to the hotel Wi-Fi and logged into his email. He wanted to forward my mom a confirmation for their restaurant reservation. Normal stuff. But somewhere between the lobby and the elevator, something went sideways. Within two days, three of his contacts got spam emails "from" him — messages with weird links about discount medications.
Was it the hotel Wi-Fi? Honestly, I can't say for certain. It could've been a weak password. It could've been a phishing email he'd clicked weeks earlier (wouldn't be the first time — I've written about scams like that before). But it was the hotel Wi-Fi that made me think: I should've set him up with a VPN.
And then I thought: most people my parents' age have no idea what a VPN even is. Or they've heard the term tossed around and assumed it was something only hackers or tech people use.
So let's talk about it. No jargon. No sales pitch. Just what a VPN actually does, when you might want one, and when you really don't need to bother.
The Short Answer: What I'd Actually Install
If you came here looking for a name and a price, here it is. I checked every one of these prices directly on the company's own pricing page on August 31, 2026 — not from a review site, and not from a comparison chart that may have been written a year ago.
| VPN | Introductory price | Devices | What it renews at |
|---|---|---|---|
| Proton VPN Free | $0, no time limit | 1 | Nothing — it stays free |
| Surfshark Starter | $2.49/mo (27 months, $67.23 up front) | Unlimited | Not published |
| ExpressVPN Basic | $2.99/mo (28 months, $83.72 up front) | 10 | $99.95/year |
| NordVPN Basic | $3.49/mo (27 months, $94.23 up front) | 10 | $139.08/year |
| Proton VPN Plus | $3.49/mo (24 months, $83.76 up front) | 10 | $83.88/year |
If you just want protection on library or coffee-shop Wi-Fi and you're not going to fuss with it: Proton VPN Free. It's genuinely free, permanently — no ads, no logs, no data cap and no speed limit. The catch is real but small: one device at a time, and you don't get to pick your country at all — the free plan connects you to one of 10, chosen for you. (That last part matters if your reason for wanting a VPN is reaching a U.S. banking app from overseas; for that you need a paid plan, where you choose the country.) For a woman who checks email at the library three days a week, that's plenty. This is the only free VPN I'd install on my own parents' phones.
If you want to cover the whole household: Surfshark. Unlimited devices on one account, which matters more than people expect — a phone, a tablet, a laptop, and a spouse's phone all on one subscription. Cheapest of the paid options up front.
If you want the least confusing app: ExpressVPN. Not the cheapest, but the app is close to a single on/off switch, and it publishes its renewal price plainly.
If you plan to keep it for years: Proton VPN Plus. It renews at $83.88/year — the gentlest of the renewal prices that are actually published, about 16% below ExpressVPN's. Over three years ExpressVPN still edges it out; from around year four onward Proton is the cheapest of the three, even though it's tied for the highest introductory price. (Surfshark may well be cheaper still — but since it won't publish its renewal rate, there's no way to know.) It's also the natural pick if you already pay for Proton Mail.
One more for Apple users: if you already pay for iCloud+ (starting at $0.99/month), you have iCloud Private Relay built in. It isn't a full VPN, but it encrypts your Safari browsing and hides your IP address. You may already have it without knowing — worth checking before you pay for anything.
The Renewal Price Nobody Puts in the Headline
This is the part I'd want my own mother to read.
Every one of these companies advertises a monthly price that is not really a monthly price. You pay for the whole term up front — two years or so, depending on the plan — in one charge. And when that term ends, you don't keep paying the advertised rate — you get moved onto the standard renewal rate, automatically, on a card you set up more than two years earlier and have probably forgotten about.
Look at what actually happens with NordVPN. You sign up at "$3.49 a month." Twenty-seven months later it renews at $139.08 a year, which is $11.59 a month — more than three times what you thought you were paying. ExpressVPN goes from $2.99 to $99.95 a year, about $8.33 a month. Proton VPN Plus is the mildest, going from $3.49 to $83.88 a year, roughly $6.99 a month.
Surfshark doesn't say. I clicked through to their own FAQ entry titled "How much does Surfshark cost after 2 years?" and the complete answer was that your cost "depends on the chosen plan" and that you'll be charged "the applicable renewal price." That's not an answer. I'm not saying it's a bad service — by the numbers it's the cheapest way in — but you should know going in that they won't tell you the second number before you pay the first one.
None of this is a scam. It's all in the fine print, and every one of these companies offers a money-back window. But it's the single most common way people end up paying $140 a year for something they were told cost $42.
So do two things when you sign up:
- Write the renewal date on your calendar — the paper one on the fridge is fine. Two years out, in the month it renews.
- Set a reminder a week before it. When it comes up, decide again. If you still want it, it's worth asking for a better rate through the company's live chat — none of these four have a phone line, so look for the chat button in the app or on their website, and ignore any "support number" you find in a search result. Or simply cancel and re-subscribe at the new-customer price.
That's it. Five minutes of admin now saves you about a hundred dollars later.
What a VPN Actually Is (the Sealed Envelope Version)
VPN stands for Virtual Private Network. But that name is honestly terrible because it tells you nothing useful.
Here's how I explain it to my mom.
Think of your internet connection like sending a postcard through the mail. When you're on regular Wi-Fi — especially public Wi-Fi at a hotel or coffee shop — your information travels kind of like a postcard. Anyone handling it along the way could, in theory, read what's on it. Your browsing activity, the sites you visit, maybe even bits of information you're typing in.
A VPN is like slipping that postcard into a sealed envelope before you send it. The information still gets where it's going, but nobody in between can peek at it. The VPN creates a private, encrypted tunnel between your device and the internet.
That's it. That's what it does.
It doesn't make you invisible. It doesn't make you invincible. It doesn't stop you from clicking a bad link in a scam text message. It's one tool that does one specific thing: it keeps your connection private, especially on networks you don't control.
And here's something worth knowing — about 85% of websites today already use HTTPS, which is its own form of encryption (that little padlock icon in your browser). So even without a VPN, most of your browsing is already somewhat protected. A VPN adds another layer on top of that. Think of it like wearing a seatbelt in a car that already has airbags. The airbags are great. The seatbelt still matters.
When You Probably Don't Need a VPN
This is the part most tech articles skip, and it bugs me. There's a whole industry built around making people feel like they're in danger every second they're online. Fear sells subscriptions.
So let me be straight with you.
At home, on your own Wi-Fi? You probably don't need a VPN. Your home router is password-protected (it is, right?). Your internet provider handles the connection. It's about as safe as it gets for everyday use.
For online banking? Your bank's app and website already use heavy encryption. A VPN on top of that is like putting a padlock on a safe that's already inside a vault. It doesn't hurt, but it's not the thing keeping your money secure.
To stop scams and phishing? A VPN won't help here. If someone sends you a fake email pretending to be Medicare and you click the link and type in your information, a VPN can't save you from that. That's a completely different problem — and one I've spent a lot of time thinking about since my mother almost fell for a phone scam a few years back.
To "speed up" your internet? No. In fact, VPNs typically slow your connection down a bit. How much depends on the provider and how far away the server you connect to is — sometimes it's barely noticeable, sometimes it's significant. You're adding a stop between you and the website, so things take a little longer.
I'm telling you all this because I don't want you spending money on something out of fear when it's not solving the actual problem. The actual problems are weak passwords, phishing emails, and scam calls. A VPN doesn't fix any of those.
When a VPN Actually Makes Sense for Seniors
Okay, so when should you use one? Here are the situations where I genuinely recommend it.
Hotel and airport Wi-Fi. This is the big one. Public networks — the kind where you just click "Connect" and agree to some terms — are open. That means other people on the same network could, with the right tools, see your traffic. A VPN closes that door.
Coffee shops and restaurants. Same deal. That Panera Bread Wi-Fi is convenient, but it's shared with every stranger in the building. If you're checking email or logging into anything, a VPN is a smart move.
Libraries and community centers. I know a lot of retirees who spend time at the library using the free Wi-Fi. It's a shared network. A VPN keeps your browsing private.
Senior living and assisted living facilities. This one hits close to home. The shared Wi-Fi in my dad's facility is exactly like hotel Wi-Fi — one network, dozens of users, no guarantee of who's on it. If your parent lives in a place like that and uses the communal Wi-Fi daily, a VPN is worth setting up.
Telehealth appointments while traveling. If you're a snowbird — spending winters in Florida or Arizona — and you've got a telehealth appointment with your doctor back home, a VPN on public Wi-Fi protects that conversation. Medical information is personal. Treat it that way.
International travel. Some countries restrict access to certain websites and apps. A VPN can get around those blocks so you can still use your email, video-call your grandkids, or access your banking app normally.
If you never use public Wi-Fi, honestly? You might not need a VPN at all. And that's fine. But if any of those scenarios sound like your life, keep reading.
Why Free VPNs Are Usually a Trap
I recommended one free VPN above and exactly one, and I want to explain why the rest of that aisle is dangerous.
There are hundreds of free VPN apps out there, and by a 2024 VPNRanks projection reported in Tom's Guide, as many as 60% of them could end up selling data to advertisers or third parties. That's not a typo. It's a forecast rather than a headcount — but it's a forecast built on where the industry was already heading. The free product is free because you're the product. Your browsing data, your habits, your location — that's what they're selling. Which means the app you installed to protect your privacy is the thing violating it.
Even worse, the number of people running into fake VPN apps — ones designed purely to steal your information — jumped 2.5 times in a single quarter (the third quarter of 2024), according to Kaspersky research. Downloading a random free VPN from the App Store could genuinely leave you less safe than using no VPN at all.
Proton VPN's free tier is the exception because the company's money comes from its paid plans and its email service, not from your data. It's independently audited and it publishes the results. If you want free, use that one. If a free VPN you've never heard of is advertising on a website or in a pop-up, close the tab.
Setting It Up (This Takes About 5 Minutes)
I know. "Setting it up" are three words that make a lot of people close the browser tab. But believe me, this is one of the easier tech things you'll do. Easier than setting up a new email account. Easier than setting up an iPhone from scratch, that's for sure.
On an iPhone or iPad:
- Open the App Store (the blue icon with the "A" made of sticks)
- Search for the VPN you chose — type "NordVPN" or "Proton VPN" or whichever
- Tap "Get" and let it download
- Open the app and create an account (email and password)
- The app will ask permission to add a "VPN configuration" — tap Allow. This is normal. It's how the phone knows to route your connection through the VPN
- Tap the big Connect button. That's it. You'll see a small "VPN" icon appear at the top of your screen when it's active
On an Android phone:
- Open the Google Play Store
- Search for your VPN by name
- Tap "Install"
- Open the app and create your account
- It will ask to set up a VPN connection — tap OK
- Tap Connect
Don't worry if the app asks you to choose a server location. For most people, the default (usually "Fastest" or "Recommended") is exactly right. You don't need to pick a specific country unless you're traveling internationally and want to appear like you're back home.
And here's a tip I always give my parents: you don't need to leave it on all the time. Turn it on when you're at Starbucks, the airport, or the hotel. Turn it off when you're home. Think of it like sunscreen — you put it on when you're going outside, not when you're sitting on your couch.
Three Real People, Three Real Uses
I want to paint a picture because I think it helps.
The snowbird. My parents' friend Tito Jun spends November through March in a rented condo in Sarasota. He uses the building's shared Wi-Fi for everything — email, FaceTime with his apo back in Michigan, even his telehealth visits with his cardiologist. I set him up with NordVPN on his iPad last Thanksgiving. He taps one button before he opens Safari. That's his whole routine now.
The library regular. A woman in my mom's prayer group — she goes to the Dearborn Public Library three days a week. She reads the news, checks email, sometimes does a little online shopping. All on the library's public Wi-Fi. Proton VPN Free is perfect for someone like her. No cost, no commitment, real protection.
The traveler. My cousin went to the Philippines last Christmas and couldn't access her Chase banking app because of regional restrictions. A VPN connected to a U.S. server fixed it instantly. Five-minute install at the airport in Manila, and she was checking her balance before the Grab ride home.
None of these people are "tech people." They're regular folks who needed one thing and got it done in a few minutes.
It's Just One Tool — and That's Okay
Here's what I want you to walk away with: a VPN is not magic internet armor. It won't stop every threat. It won't prevent you from getting scam calls, and it won't block phishing emails. I've written about text message scams and AI voice cloning scams — those are different problems that need different solutions.
But a VPN does one thing well. It keeps your internet connection private when you're on a network you don't own. Just under 30% of Americans 60 and older use a VPN regularly, according to Security.org's 2025 consumer report — well behind the nearly 40% of adults under 30, but a good deal more than you'd guess. Seniors lost $4.9 billion to fraud in 2024, per the FBI's Internet Crime Complaint Center. Not all of that is preventable with a VPN. But some of it is.
If you use public Wi-Fi regularly — at a hotel, a coffee shop, a library, or a shared living facility — a VPN is worth the five minutes it takes to set up. Proton VPN Free costs nothing at all. The paid ones start around $2.49 a month for the first two years — just remember what they renew at.
And if you never leave your home Wi-Fi? You're probably fine without one. Seriously. Don't let anyone scare you into buying something you don't need.
I set up my dad's VPN on his phone the week after the Orlando incident. It took four minutes. He doesn't think about it — he just taps the button when he's not at home. That's the goal. Not to become a cybersecurity expert. Just to close one more door that doesn't need to be open.
If you've got a parent or grandparent who travels, or who uses Wi-Fi outside the house, maybe block off ten minutes this weekend. Bring coffee. Set it up together. The hard part is deciding to do it — the actual setup is the easy part.
And if you found this helpful, you might also want to check out my list of the best free apps for seniors in 2026. A few of them pair really nicely with what we talked about today.





