VPNs are marketed with a lot of hooded figures and padlock imagery, which obscures a fairly simple idea. A VPN sends your internet traffic through an intermediary server before it reaches its destination. That is the whole mechanism.
Understanding what that does, and equally what it does not do, saves both money and false confidence.
What actually changes
Normally your connection goes from your device to your internet provider to the website. Your provider can see every domain you visit. The website sees your real address, which reveals your rough location.
With a VPN, an encrypted tunnel runs from your device to the VPN server, and the traffic emerges from there. Two consequences follow:
- Your internet provider sees encrypted traffic to one server, and no longer which sites you visit.
- Websites see the VPN server’s address and location, not yours.
That is genuinely useful for specific problems. It is not invisibility.
What a VPN does not do
It does not make you anonymous. The moment you sign into any account, that service knows exactly who you are regardless of where the traffic came from.
It does not stop tracking. Cookies, browser fingerprinting and advertising identifiers all work identically through a VPN. Advertisers rarely needed your address to follow you.
It does not protect against malware or phishing. A hostile download arrives just as reliably through an encrypted tunnel.
It does not add much on modern public Wi-Fi. The café-attacker scenario in VPN advertising largely predates near-universal HTTPS. Your bank session was already encrypted end to end. A VPN hides which sites you visited from others on the network, which is a real but much smaller benefit than implied.
You are moving trust, not removing it
This is the part most worth internalising. Without a VPN, your internet provider can see which sites you visit. With one, your VPN provider can.
You have not eliminated the observer. You have chosen a different one. Whether that is an improvement depends entirely on which company you would rather have that view, and how each is regulated.
This is why free VPNs deserve suspicion. Running server capacity worldwide is expensive, and a service with no subscription is funded some other way. Several free VPNs have been found selling browsing data or injecting advertising, which is precisely the opposite of the advertised product.
When one is genuinely worth having
- Your network is censored or monitored. Restrictive countries, some workplaces, some schools. This is the original use case and it still holds.
- You want your provider not to log your browsing. A legitimate preference, particularly where providers may sell that data.
- You need to appear to be somewhere else, for testing a site’s regional behaviour, or reaching your own country’s services while travelling.
- You are on a genuinely untrusted network that you suspect is interfering with traffic.
Streaming is the reason many people buy one, and it is the least reliable. Streaming services detect and block VPN address ranges continuously, so a server that works today may not next month. Using one this way also generally breaches the terms you agreed to.
What to look for if you do want one
- An independently audited no-logs policy. The claim is universal; the audit is not. Only the audit means anything.
- A kill switch, which blocks traffic if the tunnel drops rather than silently reverting to your normal connection.
- DNS leak protection, so lookups do not bypass the tunnel.
- Modern protocols such as WireGuard or OpenVPN.
- A jurisdiction you are comfortable with, since that determines what the provider can be compelled to hand over.
The honest summary
A VPN is a specific tool for a specific problem: it hides your traffic from your network and your location from websites. Within that scope it works well.
If your concern is accounts being compromised, two-factor authentication and a password manager do far more. If it is advertising, a tracker-blocking browser does more. If it is malware, keeping software updated does more.
Buy one because you have the problem it solves, not because an advertisement implied it solves all of them.
Join the discussion