What a VPN actually does — and what it does not do

A VPN is one of the most advertised tools on the internet, and most of the advertising is misleading. You have probably seen the claims: total anonymity, complete safety, a hacker-proof connection. None of that is true. A VPN is a useful, narrow tool — and it is much easier to decide whether you need one once you understand what it actually changes.

What a VPN does

When you use a VPN, your device builds an encrypted tunnel to a server run by the VPN provider. Everything you do online travels through that tunnel first, and only then out to the wider internet.

That changes three things:

It hides your traffic from the network you are on. On a hotel, airport, or café network, other people on the same Wi-Fi — and the network operator — cannot read what you send. They can see that you are connected to a VPN server, and how much data moves, but not the contents. This is the VPN's clearest, most honest benefit.

It hides your real IP address from the websites you visit. A website sees the VPN server's address instead of yours. That makes it harder for a site to pin your visit to your home connection, and it makes your apparent location the location of the server you chose.

It lets you appear to be in another country. Pick a server in another country, and most websites will treat you as a visitor from there. That is why travellers use VPNs to reach services from home while abroad — more on that in VPN for travel.

That is the full list.

[AFFILIATE LINK: VPN provider homepage]

What a VPN does not do

It does not make you anonymous. Your VPN provider can see your traffic the way your internet provider could before. You have not removed the observer — you have moved it from one company to another. That is why the provider's logging policy matters more than any marketing claim, and why how to pick a VPN starts with that question. If a provider keeps detailed logs of what you do, a VPN gives you very little privacy at all.

It does not protect you from malware by itself. A VPN encrypts your connection; it does not check the files you download or the links you click. A malicious website reached through a VPN is still malicious. Some VPN apps bundle extra features that block known bad sites, but that is an add-on, not what a VPN is. Your device's own security updates and a bit of caution do far more here.

It does not hide you from services you are logged into. If you are signed in to an email account, a social network, or a shop, that service knows exactly who you are, VPN or no VPN. A VPN hides your network address, not your identity. The same goes for anything you type into a website yourself — a VPN cannot un-tell a site your name, your address, or your card number.

It does not bypass every block. Some streaming services, banks, and work systems detect VPN servers and refuse the connection. Some countries restrict VPN use by law. A VPN is not a universal key, and a service that blocks a VPN server today may block a different one tomorrow. Expect this, especially while travelling — VPN for travel explains what to do when it happens.

It does not make your internet faster. A VPN adds a step between you and the internet, so it usually slows things down a little. Sometimes it feels faster if your internet provider was slowing down a particular service, but that is the exception.

It does not fix a weak password. If someone guesses your password, a VPN does nothing. The habits that protect your accounts — a password manager and two-factor authentication — matter more than any VPN, and they cost less. That is the subject of beyond the VPN.

Who actually benefits

A VPN is worth it for you if any of these sound familiar:

• You often work from hotels, airports, cafés, or other shared Wi-Fi.
• You travel and want to reach services from home, or keep using your usual apps safely on unfamiliar networks.
• You want your internet provider to see less of what you do online, and you are willing to trust a VPN provider instead.
• You share a connection with people you do not fully trust — a shared house, a dorm, a rental.

A VPN is probably not your first priority if you mostly use the internet at home on your own network, you rarely travel, and your accounts have no password manager or two-factor authentication yet. In that case, start with beyond the VPN — those habits protect you every day, VPN or no VPN.

A quick checklist before you go further

• I know what a VPN hides (traffic from the local network, my IP from websites) and what it does not hide (my identity from services I log into).
• I understand that my VPN provider can see my traffic, so the logging policy is the first thing to check.
• I do not expect a VPN to block malware, fix weak passwords, or make me anonymous.
• I know a VPN may slow my connection slightly and may be blocked by some services.

The bottom line

A VPN is a privacy tool with a narrow job: it encrypts the road between your device and the internet, and it moves your trust from your internet provider to the VPN provider. Used that way, it is genuinely useful — especially on public Wi-Fi and while travelling. Believed as a magic shield, it is a disappointment. Buy it for what it actually does, and the next question is which one to pick — that is how to pick a VPN.