What a VPN Actually Does (and What It Doesn't)
VPNs are marketed as a privacy cure-all. Here's what they really protect, what they can't do, and how to tell whether you need one.
On this page
A VPN (virtual private network) is one of the most heavily advertised products online — and one of the most misunderstood. Here's an honest look at what it does, so you can decide whether it's worth paying for.
How a VPN works, in one paragraph
Normally, your internet traffic goes from your device to your internet provider and then to the website. With a VPN, your device first creates an encrypted tunnel to the VPN company's server. Your provider (or the café Wi-Fi) sees only that you're connected to a VPN; the website sees the VPN server's IP address instead of yours.
What a VPN does well
- Protects you on public Wi-Fi. It stops others on the same network from snooping on your traffic.
- Hides your browsing from your internet provider. Your ISP can't see which sites you visit.
- Changes your apparent location. Useful for reaching your home services while travelling — subject to each service's terms.
- Masks your IP address from the websites you visit.
What a VPN does not do
- It doesn't make you anonymous. If you log in to an account, that site knows it's you.
- It doesn't stop tracking cookies or browser fingerprinting. Use a privacy-focused browser and settings for that.
- It doesn't protect you from phishing or malware. You still need to be careful what you click.
- It moves trust, it doesn't remove it. The VPN company can see your traffic metadata instead of your ISP. That's why the provider's policies matter.
Do you need one?
| Situation | VPN useful? |
|---|---|
| You often use café, hotel or airport Wi-Fi | Yes |
| You want to keep browsing private from your ISP | Yes |
| You travel and want to access home services | Often |
| You only browse at home on a trusted network | Optional |
| You want to be fully anonymous online | Not on its own |
How to choose a trustworthy VPN
- An independently audited no-logs policy. Look for a published third-party audit, not just a promise.
- Modern protocols such as WireGuard or OpenVPN.
- A kill switch that blocks traffic if the VPN drops.
- Clear ownership and jurisdiction. You should be able to find out who runs the company.
- A real refund window so you can test speeds on your own connection.
Skip "free" VPNs with unclear business models. Running servers costs money; if you're not paying, find out how the company is.
The bottom line
A VPN is a genuinely useful tool for public Wi-Fi and everyday privacy from your ISP — but it's one layer of protection, not a force field. Pair it with a password manager and two-factor authentication for real security.