Public Computers and Email: The Real Risks
Library computers, hotel business centers, airport kiosks, school lab computers — these shared machines carry significant security risks that most users do not fully appreciate. Unlike your personal device, you have no control over what software is installed, what monitoring tools are active, or who has used the machine before you.
The risks when accessing email on public computers:
Keyloggers: Software that records every keystroke — including your email address and password — may be installed and invisible to casual inspection.
Session hijacking: Cookies saved in the browser can be extracted to access your account even after you log out, if the logout was incomplete.
Shoulder surfing: People nearby can observe your screen and potentially see credentials or sensitive email content.
Malware: Public computers may be infected with malware that captures screenshots, records browser activity, or steals stored credentials.
Browser-saved passwords: If you accept a browser's offer to save your password, it is now stored on a public computer accessible to subsequent users.
If You Must Use a Public Computer for Email
Do not access your primary email if avoidable: If your need is casual (checking something non-urgent), consider waiting until you have access to your personal device. If access is genuinely necessary, proceed with maximum caution.
Verify the computer before using it: Look for physical keyloggers attached between the keyboard cable and the computer. These are small devices inserted at the USB or PS/2 connector — unusual and suspicious hardware between keyboard and computer. They are more common than most people expect.
Use private browsing mode: Open the browser in private/incognito mode. This prevents the browser from saving your browsing history, cookies (to some degree), and autofill data. Not foolproof against keyloggers, but prevents browser-level credential storage.
Never save passwords: Decline any browser offer to save your password. If the browser has saved someone else's credentials, do not use them.
Use 2FA: If your email has 2FA enabled (it should), the keylogger captures only your password — not your 2FA code. This significantly limits the damage from credential capture.
Log out completely: After accessing email, log out explicitly rather than just closing the browser. In Gmail, the logout option is in the Google account menu at the top right.
Clear browser data after use: In public browser settings, clear browsing history, cookies, cached data, and any saved passwords before leaving the computer.
After Using a Public Computer
Even with all precautions, accessing email on a public computer represents elevated risk. After returning to your personal device:
Check account login activity: Review which devices and locations have accessed your email recently. Look for unrecognized sessions. Gmail: Google Account Security page. Outlook: Security > Recent Activity.
Sign out other sessions: If you see the public computer session still active, sign it out remotely through your account's security settings.
Change your password: If you have any concern about keylogger exposure, change your email password from your personal device. With a password manager, this is a single click to generate and save a new strong password.
The Temp90 Alternative for Public Computer Situations
If you need to receive a verification code or access a one-time email on a public computer, using Temp90 rather than your real email is significantly safer. You create a temporary address, receive the email, and discard the address — no credential to steal, no account to compromise, no login required for the Temp90 inbox itself.
For situations where you need email access on a public computer specifically for a service registration, using Temp90 addresses the use case without exposing your real account.
Frequently Asked Questions
Can I trust a hotel business center computer for quick email access?
Treat hotel business center computers with the same skepticism as any public computer. Hotel computers are frequently used by many people and may not receive security updates or monitoring. If access is brief and low-sensitivity, use private browsing and log out carefully. For sensitive email, wait for your personal device.
Does using HTTPS protect me from keyloggers on public computers?
No. HTTPS encrypts data between your browser and the website. Keyloggers operate at the keyboard level, before your input is encrypted. HTTPS does not protect against local device keylogging.
Are VPN services available on public computers?
Some public computers allow software installation; most do not. Browser-based VPN extensions (if available) would not protect against keylogging. The risks on public computers go beyond network-level interception that VPNs address.
Conclusion
Public computers represent a fundamentally different threat environment than personal devices. Treating them accordingly — using private browsing, avoiding password saving, logging out completely, and monitoring your account afterward — provides reasonable protection. When email access on a public computer is necessary for a registration specifically, Temp90 provides a safer alternative that requires no credentials to steal.