What a VPN does, and what it does not hide
A VPN encrypts traffic between your device and a server. Learn what that protects, what the provider can still see, and when a VPN is actually useful.
A virtual private network creates an encrypted tunnel between your device and a VPN server. Your internet traffic goes through that tunnel, then out to the wider internet from the server's network.
What the tunnel protects
On a public Wi-Fi network, a VPN prevents other devices on the same network from reading your traffic. It also hides your traffic from the local network operator, such as a hotel or airport.
The connection between your device and the VPN server is encrypted. That protects against local eavesdropping and some forms of network tampering. It does not encrypt the connection from the VPN server to the destination website unless that website uses HTTPS.
What the VPN provider can see
The VPN provider sits in the middle. It can see which websites you connect to, unless it uses a design that limits logging. It may see your real IP address, device information and connection times.
A VPN moves trust from the local network to the provider. It does not make you anonymous. If the provider keeps logs, those logs can be requested or leaked.
What a VPN does not do
- It does not stop tracking by websites. Cookies, logins and browser fingerprints still identify you.
- It does not block malware or phishing. Those need other defences.
- It does not make you anonymous. Your account logins and behaviour still reveal you.
- It does not encrypt everything end to end. The destination site's HTTPS does that.
- It does not fix a compromised device. Malware can read data before it enters the tunnel.
When a VPN helps
- Public Wi-Fi. It reduces local snooping, though HTTPS already protects most web traffic.
- Untrusted networks. It can prevent internet providers or network operators from inspecting traffic.
- Remote access. Companies use VPNs so employees can reach internal systems securely.
- Region-limited content. A VPN can change your apparent location, but services may block known VPN addresses.
Choosing one
Look for a clear no-logs policy, independent audits, strong encryption, a kill switch and a jurisdiction you understand. Free VPNs often monetise data or limit bandwidth; read the privacy policy before installing one.
A VPN is one layer in a broader privacy setup. Use HTTPS, keep software updated, use unique passwords and enable two-factor authentication. For how traffic is routed, see how the internet works. For message privacy, see what end-to-end encryption means.