I keep a small travel kit in my backpack: a compact battery, a cheap Android phone that’s no longer my daily driver, and a few cables. Over the years I’ve turned that setup into a stealthy, travel-ready hotspot that gives me private DNS filtering and encrypted traffic over VPN — useful on trains, in hotels, or at cafés where I don’t trust the Wi‑Fi. In this how-to I’ll walk you through the practical steps I use, plus tips on battery life, connectivity, and simple security tweaks so your temporary hotspot is fast, private, and hard to notice.

Why use an old Android as a hotspot?

Repurposing an old Android is cheap, flexible, and keeps your main phone safe. You avoid exposing personal apps and credentials to sketchy networks, you can install network-specific tools, and if something goes wrong you’re only losing a device you already replaced. Many Android phones still get solid Wi‑Fi radio performance even after a couple of years, and tethering support is built-in.

What I pack

Here’s what I carry in the little pouch:

  • Old Android phone (cleaned, factory-reset, updated to the latest supported OS)
  • Compact USB battery pack (10,000–20,000 mAh depending on trip length)
  • Short USB-A to USB-C cable and a USB-C to USB-C cable (for modern chargers)
  • Small travel router or USB-C Ethernet adapter (optional for wired reliability)
  • Lightweight VPN subscription that supports OpenVPN/IKEv2 or WireGuard
  • Ad/blocking DNS over HTTPS (DoH) or DNS over TLS (DoT) provider like NextDNS or Cloudflare
  • This combo keeps things portable and gives me options: I can run purely via mobile tethering, share a hotel Ethernet, or create a local Wi‑Fi network from the phone.

    Step 1 — Prepare the Android device

    Start fresh. I factory-reset my spare phone, install only the apps I need, and lock it down:

  • Install updates (system and apps) so you’re not exposing known vulnerabilities.
  • Create a separate Google account if you don’t want your primary account tied to the device.
  • Disable unnecessary services: Bluetooth, location (unless needed), and background syncing.
  • Set a strong lock screen PIN or passphrase; enable device encryption if not already on.
  • Install the VPN client and DNS app you’ll use (more on that below).
  • Tip: Rename the device in its settings (e.g., “TravelHotspot”) so you can identify it when you connect cables or manage it remotely.

    Step 2 — Choose your VPN and DNS setup

    I use a two-layer approach: a VPN to encrypt traffic and a DNS resolver that supports privacy (DoH/DoT) to block trackers and unwanted content before it resolves. This combination keeps DNS leaks from exposing what domains I visit.

  • VPN: I prefer providers with WireGuard support (fast, efficient) such as Mullvad, Proton VPN, or Windscribe. Install the provider app or use the built-in WireGuard client if you run your own endpoint.
  • DNS: NextDNS is my go-to for custom filtering and analytics; Cloudflare’s 1.1.1.1 app with Warp can be a lighter choice. Android 9+ supports Private DNS (DNS over TLS) in system settings — set it to a DoT hostname like “1dot1dot1dot1.cloudflare-dns.com” or your NextDNS custom hostname.
  • Important: Enable "Always-on VPN" and toggle "Block connections without VPN" (settings vary by Android version). That ensures apps can’t bypass the tunnel and prevents DNS leaks when the VPN disconnects.

    Step 3 — Create the hotspot

    I usually create a password-protected Wi‑Fi hotspot from the Android device and let the battery power it. Steps:

  • Settings → Network & internet → Hotspot & tethering → Wi‑Fi hotspot.
  • Set a WPA2/WPA3 password (avoid WEP and open networks).
  • Set a non-default SSID so it’s not obvious (don’t use names like “AndroidAP” or your own name).
  • Limit connected devices in the hotspot settings if you want to control bandwidth or security.
  • If you want better performance, some small travel routers (GL.iNet or Netgear Nighthawk M1 series) can be used with the phone via USB tethering or as a middleman for Ethernet. I bring a tiny GL.iNet router on longer trips — it gives more control and often better Wi‑Fi range.

    Step 4 — Power management with a compact battery

    Batteries matter. I prefer USB-C PD power banks with passthrough charging so the phone can be charged while the battery itself charges from an outlet. Look for these features:

  • 10,000–20,000 mAh for multi-day use.
  • USB-C Power Delivery (18W–30W) for fast charging.
  • Passthrough charging or at least the ability to power the phone continuously.
  • During testing I’ve found hotspots drain older phones faster than typical use — Wi‑Fi radio + VPN + NAT work is CPU-heavy. Expect 6–12 hours of continuous hotspot from a well-maintained phone and a 10,000 mAh battery; a 20,000 mAh pack can double that.

    Step 5 — Test privacy settings and DNS leaks

    Before you rely on this setup in public, test it locally:

  • Connect a laptop to the hotspot and visit a DNS leak test site (like dnsleaktest.com) to confirm the resolver is the one you configured.
  • Verify your VPN shows the expected exit location and that web services see the VPN IP.
  • Try connecting when the VPN is off to ensure the "Block without VPN" setting prevents traffic — the device should have internet only when the VPN is active.
  • If you run NextDNS or uBlock Origin via the browser, test that trackers and ads are being blocked. Small misconfigurations can leak DNS or bypass filters, so don’t skip this step.

    Practical tips and trade-offs I’ve learned

  • If you need speed for video calls, try to use hotel wired Ethernet into a small router and let the phone just run VPN/DNS. Wireless hotspot throughput can be lower and more inconsistent.
  • Keep an eye on mobile data caps — tethering over mobile networks can exhaust allowances quickly. If you frequently need data overseas, buy a local SIM for the spare phone or use an eSIM travel data plan.
  • For discreetness, set the hotspot SSID to something innocuous and reduce broadcast power if the Android or travel router supports it.
  • Be prepared for battery overheating. Continuous tethering and VPN use generates heat — give the phone a breathable surface and occasional breaks if you’re doing heavy traffic.
  • ComponentWhat I useWhy
    Spare AndroidPoco X3 / Pixel 4aGood Wi‑Fi radios, stable updates for privacy
    BatteryAnker PowerCore 10000 PDCompact, PD passthrough, reliable
    VPNMullvad / Proton VPNWireGuard support, strong privacy stance
    DNSNextDNS / CloudflareDoH/DoT support, customizable filters
    Travel router (optional)GL.iNet GL-AR750Small, configurable, USB-powered

    If you want, I can create a printable checklist or a one-page configuration guide with exact settings for a given Android model and VPN provider. I use this setup a lot when I’m testing compact devices for Usbzone Co — it’s simple to pack, hard to break, and keeps my online footprint minimal while I’m on the move.