What a VPN actually does (and what it doesn't)
By Nadia Rahman · · 6 min read
In short: a VPN encrypts the traffic between your device and a VPN server, and hides your IP address from the sites you visit. That is genuinely useful — but it does not make you anonymous, and it cannot replace good everyday security habits. Here is the honest picture, without the marketing gloss.
What a VPN really is
VPN stands for "virtual private network". When you switch it on, your device builds an encrypted tunnel to a server run by the VPN provider. Your internet traffic travels through that tunnel, comes out at the server, and only then reaches the wider internet. Two practical things happen as a result.
First, the websites and apps you connect to see the VPN server's IP address rather than your own. That hides your real location and makes it harder for sites to link your visits to your home connection. Second, anyone watching your local network — the coffee shop Wi-Fi, the hotel router, your internet service provider (ISP) — can see that you are connected to a VPN, but not which individual sites or pages you are browsing inside the tunnel.
What a VPN does well
It protects you on untrusted Wi-Fi
This is the clearest benefit. On a public or shared network you do not control, a VPN encrypts your traffic so other people on the same network cannot easily snoop on it. Most websites already use HTTPS, which encrypts a lot on its own, but a VPN adds a useful extra layer when you are somewhere you would not normally trust.
It stops your ISP profiling your browsing
Without a VPN, your internet provider can see the domains you visit and may use that data for profiling or advertising, depending on where you live. With a reputable VPN on, that visibility shifts away from your ISP. Note the word "shifts" — it does not disappear, it simply moves to the VPN provider, which is exactly why their trustworthiness matters so much.
It lets you change your apparent location
Because sites see the server's IP, connecting through a server in another region changes where you appear to be. People use this for travel, for accessing services from home while abroad, or simply to avoid location-based tracking. Always respect the terms of the services you use.
What a VPN does not do
It does not make you anonymous
The moment you log into an account — email, social media, your bank — that service knows it is you, VPN or not. Your real identity is tied to the account, not the IP address. A VPN reduces some passive tracking, but it cannot un-tell a site who you are once you have signed in.
It does not stop logged-in accounts tracking you
Big platforms track behaviour through your account and through trackers embedded across the web. A VPN changes your IP, but it does nothing about cookies you have accepted or the activity tied to a profile you are signed into. If reducing tracking is your goal, browser settings and habits matter far more — see our guide on how websites track you.
It does not replace good security habits
A VPN will not scan downloads for malware, will not warn you about a phishing email, and will not save you from typing your password into a convincing fake login page. Those still rely on you: keep software updated, be sceptical of links, and use strong, unique passwords for every account. a dedicated password generator makes that easy.
You are trusting the provider — so choose carefully
The central trade-off with any VPN is that you move your trust from your network and ISP to the VPN company. That is fine if the company is genuinely worthy of it, and a problem if it is not. The things that signal trust are independent security audits, a real no-logs policy, a transparent jurisdiction and ownership, and a working kill switch that blocks traffic if the connection drops. We walk through all of this in our how-to-choose-a-VPN guide.
This is also why "free" deserves a second look. If a service is giving you a VPN at no cost, it is worth asking how it pays its bills — sometimes the answer is by logging and selling the very data you hoped to protect. We cover that in the hidden risks of free VPNs.
So, should you use one?
For many people, yes — especially if you regularly use public Wi-Fi or you would rather your ISP not profile your browsing. The key is to keep your expectations honest: a VPN is a solid layer for specific jobs, not a magic shield. If you are not sure whether it earns a place in your toolkit, our threat-model guide helps you decide based on your own situation rather than someone else's sales pitch.
Frequently asked questions
Does a VPN make me anonymous online?
No. A VPN hides your IP address from the websites you visit and encrypts traffic to the VPN server, but the accounts you log into still know who you are, and your VPN provider can see your connection. It improves privacy in specific ways; it does not make you anonymous.
Can my internet provider still see what I do with a VPN on?
Your internet provider can see that you are connected to a VPN and how much data you use, but not the individual sites or pages inside that encrypted tunnel. Visibility shifts from your ISP to the VPN provider, which is why a trustworthy, no-logs VPN matters.
Does a VPN protect me from viruses and phishing?
Not really. A VPN encrypts your connection; it does not scan downloads for malware or stop you entering details on a fake login page. You still need good habits, software updates and scepticism about links, alongside strong, unique passwords.
Is it worth using a VPN on public Wi-Fi?
Yes, this is one of the clearest wins. On untrusted networks a VPN encrypts your traffic so others on the same network cannot easily snoop on it. Modern websites already use HTTPS, but a VPN adds a useful extra layer on networks you do not control.
This article is general online-safety education, not professional security advice.