A method (200; 300) for secure wireless network connections, the method being performed by a client installed on a mobile device, and the method comprising: acquiring a type of a wireless network to which a mobile device is connected; determining that the type of the wireless network is insecure based at least in part on how frequently the mobile device has accessed the wireless network; and in response to a determination that the type of network is insecure, monitoring to determine whether an application is to be activated, wherein: the monitoring to determine whether the application is to be activated comprises: querying an operating system of the mobile device using certain pre-defined function calls supported by the operating system to determine that the application corresponds to a current display interface of the mobile device, and the application is installed on the mobile device; determining that the application is to be activated based at least in part on a detection that the current display interface of the mobile device is showing the application; and in response to the determination that the application is to be activated, establishing a secure communication channel between the mobile device and a first server; determining that a display of the interface for the application is no longer being shown by the mobile device based at least in part on querying the operating system of the mobile device using certain pre-defined function calls supported by the operating system to determine that the application is no longer shown on the current display interface of the mobile device; and in response to a determination that the application is no longer shown on the current display interface of the mobile device, disconnecting, by the mobile device, the secure communication channel and maintaining a connection with the first sever via the wireless network for one or more other applications to communicate via a non-secure channel acquiring a type of a wireless network to which a mobile device is connected; determining that the type of the wireless network is insecure based at least in part on how frequently the mobile device has accessed the wireless network; and in response to a determination that the type of network is insecure, monitoring to determine whether an application is to be activated, wherein: the monitoring to determine whether the application is to be activated comprises: querying an operating system of the mobile device using certain pre-defined function calls supported by the operating system to determine that the application corresponds to a current display interface of the mobile device, and the application is installed on the mobile device; determining that the application is to be activated based at least in part on a detection that the current display interface of the mobile device is showing the application; and in response to the determination that the application is to be activated, establishing a secure communication channel between the mobile device and a first server; determining that a display of the interface for the application is no longer being shown by the mobile device based at least in part on querying the operating system of the mobile device using certain pre-defined function calls supported by the operating system to determine that the application is no longer shown on the current display interface of the mobile device; and in response to a determination that the application is no longer shown on the current display interface of the mobile device, disconnecting, by the mobile device, the secure communication channel and maintaining a connection with the first sever via the wireless network for one or more other applications to communicate via a non-secure channel the monitoring to determine whether the application is to be activated comprises: querying an operating system of the mobile device using certain pre-defined function calls supported by the operating system to determine that the application corresponds to a current display interface of the mobile device, and the application is installed on the mobile device; determining that the application is to be activated based at least in part on a detection that the current display interface of the mobile device is showing the application; and in response to the determination that the application is to be activated, establishing a secure communication channel between the mobile device and a first server; determining that a display of the interface for the application is no longer being shown by the mobile device based at least in part on querying the operating system of the mobile device using certain pre-defined function calls supported by the operating system to determine that the application is no longer shown on the current display interface of the mobile device; and in response to a determination that the application is no longer shown on the current display interface of the mobile device, disconnecting, by the mobile device, the secure communication channel and maintaining a connection with the first sever via the wireless network for one or more other applications to communicate via a non-secure channel