VPN ads promise anonymity, security, and freedom from tracking, often in the same 30 seconds. Some of that is real. A lot of it is marketing. Here's what a VPN actually does on a technical level, where it genuinely helps, and where it's solving a problem you don't have.
What a VPN actually does
A VPN (virtual private network) encrypts the traffic between your device and a server run by the VPN provider, then sends it on to the internet from there. Two concrete effects follow from that:
- Anyone on your local network can't read your traffic. That includes whoever runs the Wi-Fi at a coffee shop, airport, or hotel.
- Websites see the VPN server's IP address, not yours. This changes your apparent location and makes your connection harder to tie back to your home or workplace network.
That's the whole mechanism. Everything else claimed about VPNs is a downstream effect of those two things, or isn't true.
What a VPN does not do
- It doesn't make you anonymous. Sites still identify you through login sessions, cookies, and browser fingerprinting regardless of which IP address you connect from.
- It doesn't stop most tracking. Advertising networks, Google, and Meta track you across sites using account logins and fingerprinting techniques a VPN has no effect on.
- It doesn't replace HTTPS. Most web traffic today is already encrypted between your browser and the site itself; a VPN adds an extra encrypted hop but isn't the thing making your banking login safe.
- It doesn't protect against phishing or malware. A VPN encrypts a connection; it doesn't check whether the site on the other end is legitimate.
- It doesn't make you safer against government surveillance in any meaningful way for typical users — it just moves the point of trust from your ISP to the VPN provider, who can see the same traffic.
When a VPN is genuinely useful
- Public Wi-Fi. Coffee shops, airports, and hotel networks are the clearest case — an unencrypted or shared network is exactly the scenario a VPN is built for.
- Traveling somewhere with content restrictions or network blocks. A VPN can route around country-level blocking of specific services.
- Avoiding ISP throttling on specific traffic types. Some ISPs slow certain kinds of traffic (like video streaming) when they can identify it; a VPN can prevent that identification.
- Journalists, activists, or anyone with a specific reason to hide their network origin from a specific adversary — though this use case calls for research well beyond a general guide like this one.
When you can skip it
At home, on a network you control, with a modern router using WPA2 or WPA3 encryption, a VPN adds little. Your ISP can see which domains you visit but not the content of encrypted (HTTPS) pages, and in most countries there are real, if imperfect, legal limits on what they can do with that. If your main goal is "stop being tracked by advertisers," a VPN is the wrong tool — a privacy-focused browser, tracker blocker, and careful app permissions do far more (see our guide on managing app permissions).
How to choose one, if you decide you need it
- Look for an independently audited no-logs policy. Any provider can claim not to log your activity; audits by a named third-party firm are what make that claim checkable.
- Prefer WireGuard as the underlying protocol where available — it's faster and has a smaller, more easily audited codebase than older protocols like OpenVPN.
- Check for a kill switch — a setting that blocks all internet traffic if the VPN connection drops, so you don't silently fall back to an unprotected connection.
- Avoid free VPNs as a rule. Running VPN servers costs real money; a free service is often paying for that by logging and selling the exact browsing data you're trying to protect. Some free tiers from well-known privacy-focused companies (like Proton) are funded by paid tiers instead and are a reasonable exception.
- Check where the company is legally based. This determines which government can compel it to hand over logs, if any exist.
Quick decision checklist
- Regularly use public Wi-Fi → a VPN is worth using.
- Mainly worried about ad tracking → look at browser settings and app permissions instead.
- Traveling somewhere with content or service blocks → a VPN can help, check local laws first.
- Choosing a provider → audited no-logs policy, WireGuard support, kill switch, and a clear jurisdiction.
- Considering a free VPN → treat it with the same skepticism as any free product that needs to make money somehow.