A VPN (virtual private network) encrypts your internet traffic and routes it through a server run by the VPN provider, hiding your real IP address and location from the websites you visit and from your internet provider along the way. It protects the connection between your device and the internet — it doesn’t make you anonymous, doesn’t stop tracking that happens after a site identifies you by other means, and doesn’t replace the other basics like a credit freeze or strong passwords. Understanding exactly what a VPN does and doesn’t do is the difference between using one well and paying for a false sense of security.
This guide covers how VPNs actually work, what they protect against, what they don’t, and what to look for if you decide to use one.
How VPNs Actually Work
When you connect to a VPN, your device creates an encrypted tunnel to a server operated by the VPN provider. Everything you send or receive travels through that tunnel first. To your internet provider, and to anyone monitoring the network you’re connected to (a hotel WiFi network, for example), your traffic is just encrypted data going to the VPN server — unreadable and untraceable to a specific site. To the websites you visit, your traffic appears to come from the VPN server’s IP address, not your own, and often from a different city or country than you’re actually in.
What a VPN Protects You From
- Your internet provider seeing which sites you visit. Your ISP can see that you’re connected to a VPN, but not which sites you visit through it.
- Snooping on public WiFi. Anyone else on the same coffee-shop or airport network can’t intercept your unencrypted traffic if it’s already encrypted by the VPN.
- Websites seeing your real IP address and approximate location. Sites see the VPN server’s IP instead of yours.
- Some forms of location-based content restriction (accessing content available in the country your VPN server is located in).
What a VPN Does NOT Protect You From
- Account-based tracking. Logging into Google, Facebook, or any account identifies you to that service regardless of your IP address.
- Data broker exposure. Information already collected and sold about you (see What Are Data Brokers?) isn’t affected by a VPN in any way.
- Phishing and scams. A VPN doesn’t stop you from clicking a malicious link or falling for a fake login page.
- Malware and viruses. A VPN encrypts traffic; it isn’t antivirus software.
- Browser fingerprinting. Sites can identify your browser and device configuration through means that have nothing to do with your IP address.
Free vs. Paid VPNs
Free VPNs have to make money somehow, and the two most common ways are logging and selling usage data (defeating the entire purpose of using one for privacy) or funding the service through ads and slower speeds by design to push you toward a paid tier. There are a small number of reputable free tiers offered by paid providers as a limited trial, but a VPN with no revenue model and no company behind it worth naming is a red flag, not a bargain. If privacy is the reason you want a VPN, a paid, audited provider is the only version of this tool that actually does the job.
Key VPN Features to Look For
| Feature | What It Does | Why It Matters |
|---|---|---|
| Kill switch | Cuts your internet connection entirely if the VPN drops unexpectedly | Without one, a dropped VPN connection silently reverts you to your normal, unprotected connection |
| No-log policy, independently audited | The provider verifiably doesn’t record your browsing activity, not just a promise on the website | A no-log claim without a third-party audit is unverifiable marketing copy |
| Modern protocol support (WireGuard, OpenVPN) | The underlying method used to build the encrypted tunnel | Older or proprietary protocols can be slower or carry known weaknesses |
| DNS and IPv6 leak protection | Prevents your DNS requests or IPv6 traffic from bypassing the encrypted tunnel | A leak defeats the privacy benefit even while the VPN otherwise appears connected |
| Privacy-friendly jurisdiction | Where the company is legally based and what data-retention laws apply there | A provider based somewhere with mandatory data-retention laws can be legally compelled to log, regardless of its policy |
VPN Protocols, Briefly
You don’t need to become an expert here, but the names show up in every VPN app’s settings: WireGuard is the current standard most reputable providers default to — fast and simple, with strong, modern encryption. OpenVPN is older, extremely well-tested, and still a solid choice, particularly in TCP mode on networks that block VPN traffic. IKEv2 handles switching networks well (WiFi to mobile data) without dropping the connection, which matters more on phones than laptops. If an app lets you choose, WireGuard is the reasonable default; if it doesn’t let you choose, that’s fine too as long as the provider is otherwise reputable and audited.
When You Do (and Don’t) Need a VPN
- You do: use public WiFi regularly (coffee shops, airports, hotels), want to keep your ISP from seeing your browsing at the network level, or travel somewhere with content restrictions you want to work around legally.
- You probably don’t need one for: “anonymity” in any strong sense (see the Reality Check above), protecting against phishing or malware (that’s what a password manager, 2FA, and basic caution are for), or hiding activity from someone who already has access to your device or accounts directly.
If you’re specifically dealing with public WiFi as a frequent traveler rather than at home, a portable privacy router is worth knowing about as an alternative: Ryoko PRO creates your own private WiFi network wherever you go, which sidesteps the “which hotel network do I trust” question entirely rather than encrypting your connection to an untrusted one.
A Note on Choosing a Provider
We don’t yet have a full tested-and-ranked VPN comparison published (that’s next on our list). In the meantime: PureVPN is the VPN we currently have an active, vetted relationship with. It’s based in the British Virgin Islands (chosen specifically for the jurisdiction’s lack of mandatory data-retention laws) and has completed four independent no-log audits with KPMG since 2021, under a standing agreement allowing unannounced inspections of its servers. Worth knowing in the interest of full disclosure: in 2013, PureVPN provided connection logs to the FBI in a criminal investigation, which contradicted a strict “no logs” claim the company made at the time — the subsequent audits are the company’s response to that history, not an erasure of it. We’re not naming this as “the best VPN,” just the one we can currently speak to directly; a fuller comparison is coming.
NordVPN is a VPN we’re evaluating but don’t yet have a confirmed link for, so it isn’t included with a recommendation here yet.
Frequently Asked Questions
Does a VPN make me completely anonymous online?
No. It hides your IP address and encrypts your traffic in transit, but any account you log into, any fingerprinting technique, and any data already collected about you from other sources are unaffected.
Can my internet provider still see that I’m using a VPN?
Yes. Your ISP can see that you’re connected to a VPN server and roughly how much data you’re using, but not which specific sites or services you’re accessing through the encrypted tunnel.
Is a free VPN safe to use?
Approach free VPNs with caution unless it’s a limited free tier from a paid, reputable, audited provider. A VPN with no clear business model often makes money by logging and selling the exact data you’re trying to protect.
Do I need a VPN if I already use incognito/private browsing mode?
Private browsing mode only affects what’s stored locally on your device (history, cookies) — it does nothing to hide your IP address or encrypt your traffic from your ISP or the network you’re connected to. The two solve different problems.
Will a VPN slow down my internet connection?
Some slowdown is normal since your traffic takes a longer route through an encryption process, but a well-run provider on a modern protocol like WireGuard keeps this minimal for most everyday use.
Is it legal to use a VPN?
In the United States and most countries, yes. A small number of countries restrict or ban VPN use — check local law before traveling if this matters to you.
The short version: a VPN is a genuinely useful tool for a specific, narrower job than its marketing usually implies — encrypting your connection and hiding your IP address from your network and the sites you visit. It’s not a general-purpose privacy shield, and treating it like one leaves the gaps (data brokers, account tracking, phishing) that actually cause most of the harm this site covers.
Recommended Next Reading
- How to Google Yourself — find out what’s already exposed about you regardless of whether you use a VPN.
- What Are Data Brokers? — the exposure a VPN doesn’t touch.
- What Is Digital Privacy? — how a VPN fits into the bigger picture.