Many people are used to connecting to public WiFi at cafes, airports, or libraries and casually opening Potato to reply to messages. Behind this convenience, there are many security risks. An unsecured public network may expose chat records, contact lists, and even account passwords to third parties. Today's reminder is specifically for three common scenarios: public WiFi, shared computers, and new device logins. Each suggestion comes from real risk scenarios, hoping to help you raise the security bar a bit.
Public WiFi: Don't Let Free Networks Become Information Leaks
Public WiFi is usually unencrypted or uses very weak encryption. Attackers only need a laptop and simple tools to intercept data packets on the same network. If you open Potato while connected to public WiFi without enabling additional protection, every message you send and every image you receive could theoretically be monitored.
What to do specifically?
- Prioritize mobile data: If you just need to reply to a few messages, switch to 4G/5G network, which is much safer than connecting to unfamiliar WiFi.
- Enable Potato's built-in encrypted transmission: Potato uses end-to-end encryption by default, but it is recommended to confirm that the "Encrypted Connection" option is enabled in settings. Go to Potato Settings → Privacy & Security → Encrypted Connection, and ensure it shows "Enabled".
- Avoid logging into sensitive accounts on public WiFi: Besides Potato, banking and payment apps should also not be used on public networks.
- Use a VPN as an extra barrier: If you frequently travel or need to use public networks, a reliable VPN can add another layer of encryption to your traffic.
There was a real case last year: A user connected to free WiFi at Beijing Capital Airport, and within half an hour, their Potato account was logged in from a different location, and multiple people in their friend list received scam messages. Subsequent investigation revealed that the WiFi hotspot was fake, specifically designed for phishing. So, take a closer look at the hotspot name before connecting, and don't connect to "free WiFi" with strange names or no password required.
Shared Computers: Clear All Traces After Use
Logging into Potato on shared computers at libraries, internet cafes, or company computers is a high-risk operation. Browsers remember passwords, cache chat records, and save login tokens. If you just close the webpage and leave, the next person opening the browser may directly see your conversation list.
Three rules to follow:
- Use incognito/private mode: Open an incognito window in Chrome, Edge, or Safari (shortcut Ctrl+Shift+N or Cmd+Shift+N), so all cookies and cache are automatically cleared when the window is closed.
- Manually log out and clear after use: Before leaving, click "Log Out" on the Potato web version, then close the browser. If time permits, manually clear the browser cache and saved passwords.
- Never check "Remember Password": Always select "Never" for browser prompts to save passwords. Many internet cafe computers have keyloggers installed, so even if you don't save the password, the input process could be intercepted.
There is a common misconception: Some people think logging out is enough. In reality, if the browser is not closed, background Service Workers may still maintain the session. So the safest sequence is: log out of the account first, then close all tabs, and finally close the browser window. Cultivating this habit can reduce the risk of using shared computers by over 90%.
New Device Login: Two-Step Verification Is the Last Lock
Switching phones, using a tablet, or temporarily logging in on a friend's computer—each time you log into Potato on a new device, it's a security test. If the account is only protected by a password, once the password is leaked, attackers can log in from any device.
Potato offers Two-Step Verification, and it is strongly recommended that every user enable it. How to enable: Go to Settings → Privacy & Security → Two-Step Verification → Set a six-digit password (do not use the same as your account password) and bind a backup email or phone number. This way, even if someone gets your password, they cannot enter without the second verification code.
Checklist after logging in on a new device:
- Check active session list: Immediately after logging in, go to Potato Settings → Device Management to view the list of currently logged-in devices. If you find any unfamiliar devices, force them offline immediately.
- Delete old device authorizations: After switching phones, if the Potato session on the old phone is still active, remember to manually delete it. Many people forget this step after switching phones, and if the old phone is resold or lost, chat records may leak.
- Enable login notifications: In settings, enable "New Device Login Alert" so you will receive a push notification immediately if an unfamiliar device logs in.
By the way, there is an easily overlooked point: Do not select "Keep Me Logged In" on public computers. This option usually appears on the web version login page; checking it generates a persistent token locally, which may be recoverable even after logging out. Always uncheck it and manually enter the password each time.
In security, details determine success or failure. Potato has done a lot of protection at the transmission and storage layers, but the final line of defense is still the user's own operating habits. Next time you connect to WiFi at a cafe, use a computer at an internet cafe, or switch to a new phone, take 30 seconds to check against the reminders above to avoid most risks. If you haven't enabled Two-Step Verification yet, open Potato settings now and set it up—spending two more minutes for a more secure chat environment.
