A VPN, short for virtual private network, is a tool that sits between your device and the internet, routing your traffic through a private server. It sounds technical, but the core ideas are simple: encryption and IP hiding. Here's what a VPN actually does, what it can't fix, and when it's worth your money.
What a VPN actually does
When you connect to a VPN, your device and the VPN server create an encrypted tunnel. Everything you send passes through it before reaching the open internet, so anyone watching sees only scrambled data, not your actual pages or downloads.
The encryption gives you two benefits:
- Your ISP can't see which sites you visit or what you download. It can see that you're connected to a VPN, but not what you're doing with it.
- The sites you visit see the VPN server's IP instead of yours, which makes it harder to pin your location or tie your traffic to your home connection.
The short version: a VPN hides your traffic from your ISP and hides your IP from the sites you visit.
What a VPN does not do
A VPN is not a security shield for your whole device. It does not:
- Stop cookies or trackers placed by the sites you visit. Third-party trackers can still see you.
- Stop logins. Sites still know who you are when you sign in.
- Stop browser fingerprinting. Your browser leaks identifying details like screen size and fonts that a VPN can't change.
- Block malware or phishing. A VPN encrypts traffic; it does not scan files for viruses.
- Keep you anonymous on the sites themselves. They still log your activity.
The VPN alone won't stop a site from recognizing you. That's where DNS privacy explained and other techniques come in.
Your VPN provider can see you
The encryption protects your traffic from everyone between you and the VPN server, but not from the VPN provider itself. The provider is the endpoint of the tunnel, so it can see which sites you visit and when.
The provider's logging policy matters. A "no-logs" policy says the company doesn't store this data, but a promise is only as good as the law it operates under. Providers in privacy-friendly jurisdictions that undergo independent audits are easier to trust.
When a VPN is genuinely useful
A VPN earns its keep in a handful of situations:
- Public wifi. On an unsecured network at an airport or cafe, anyone nearby can sniff your traffic. A VPN scrambles it first.
- Avoiding ISP snooping or throttling. If your ISP throttles streaming, a VPN hides what you're doing.
- Geo-restricted content. A service that only works in certain countries can be unlocked by connecting to a server in the right region.
- Privacy on a shared or borrowed network.
Pattern: a VPN helps when you don't trust the network you're on.
Why free VPNs are usually the product
If a product is free, you're usually the product. Free VPNs prove it: servers cost real money, and someone has to pay. That money comes from somewhere:
- Selling aggregated browsing data to advertisers
- Running ads inside the app
- Upselling you to a paid tier
- Bundling trackers from partner companies into the service
That doesn't mean every free VPN is evil, but if a service isn't charging you, it's usually selling something. If privacy is the point, that's a strange trade.
What to check before you pick one
I won't name brands; the right answer changes over time. Here's a checklist you can apply to any provider:
- Logging policy. Does the company say, in plain language, what it stores?
- Independent audits. Has a third party actually reviewed its servers and claims?
- Open-source apps and protocols. Code that anyone can review beats a trust-me arrangement.
- Kill switch. If the connection drops, your traffic is blocked instead of leaking out on your real connection.
- Jurisdiction. Which country is the provider based in, and what can that government demand?
If a provider can't answer these questions, that's an answer in itself.
When you don't need a VPN
You don't need a VPN for everything. Skip it when:
- You're on your own home wifi and trust your ISP. Most web traffic is already encrypted with HTTPS.
- You want a specific site to stop tracking you. The site controls its own trackers; a VPN can't change that.
- You're worried about malware. You need antivirus and good habits, not a VPN.
The honest summary: a VPN protects your traffic from the network in the middle, not from the sites you visit or the apps you use. Choose it for the right job and it works well.
FAQ
What does a VPN do? A VPN encrypts the traffic between your device and the VPN server and hides your IP from the sites you visit, so your ISP can't see what you're doing.
Does a VPN make me anonymous? No. Your VPN provider can see your traffic, and sites can still track you with cookies, logins, and browser fingerprinting.
Are free VPNs safe? A free VPN still has to pay for servers, often by tracking you or selling data. If privacy is the goal, that's a poor match.
Do I need a VPN at home? Usually not. Most web traffic is already encrypted with HTTPS, and a VPN mainly helps on networks you don't trust or when you want to hide activity from your ISP.
Sources and further reading
---Written by Hassan Arshad, founder of UsefulOrbit. Last updated August 31, 2026.