A VPN — Virtual Private Network — is a piece of software you install on your phone or computer. Once you turn it on, everything your device sends to the internet goes through the VPN provider’s server first. To anyone watching your local network — your ISP, an airport Wi-Fi, a managed firewall — it looks like your device is only talking to that one server. What you are actually opening inside that connection is hidden.
That is the whole idea. Every other question about VPNs is a variation of “what happens when you turn on that switch?”
What a VPN actually changes
Turn on a VPN and three things happen at once:
- All traffic from every app on your device — browser, email, Slack, iMessage, Steam, background updaters — is wrapped in an encrypted tunnel to the VPN server, unless you have set up split tunnelling to leave some apps out.
- The destination sees the VPN’s IP address, not yours. Sites, ad networks, and IP-geolocation databases all see you as being where the VPN server is.
- Your local network sees an encrypted tunnel, not the pages you are visiting. Your ISP, the coffee shop’s router, or a corporate firewall can see that you are talking to a VPN server, but not what you are asking for.
Turn the VPN off and none of that is true anymore. There is nothing “installed on the network” — the whole thing lives in the app.
What a VPN does not do
- A VPN does not hide who you are from sites you sign in to. Log in and the site knows you’re you.
- A VPN does not make you invisible. Browser fingerprinting, cookies, and account logins still identify you.
- A VPN does not hide you from your VPN provider. They can see which servers you connect to and when, and the contents of anything not separately encrypted with HTTPS; the “no-log” promise depends on how much you trust them.
- A VPN does not fix bad passwords, phishing, or malware. It only moves where your traffic appears from.
When a VPN is worth it
- Public Wi-Fi safety — cafés, hotels, airports.
- Working across multiple apps that all need to appear from one country.
- Accessing streaming catalogues (though many services actively block VPN IPs).
- Making sure your ISP cannot see what sites you visit.
- Any professional context that requires whole-device privacy.
When a proxy is enough
If you only need to open one site that your current network won’t load, a full VPN is overkill. A web proxy like AnyProxy does the smaller job — one browser tab, no install, no account. The trade-off is that it only routes the web pages in that one tab. Even inside the tab, WebRTC (the technology behind browser video calls) is not carried by a web proxy and can reveal your real IP to the page; our what a proxy can and cannot hide piece shows that test.
See our longer comparison in proxy vs VPN.
How to pick a VPN
The market is loud. Filter it down to four questions:
- Are they audited? Many established providers publish third-party security or no-logs audits. If a provider publishes none, you only have its word.
- Where are they based? Jurisdiction matters if you care about who can legally compel them to hand over records.
- Do they support the protocols you actually need? WireGuard is fast and modern; OpenVPN is older and slower but universally supported.
- What is the price when the intro discount ends? Many VPNs advertise a discounted first term and renew at a higher price; check the renewal price before you pay.
The one honest sentence
Most people don’t need a VPN most of the time. They need a specific site to open, or a specific Wi-Fi to feel safer. Pick the tool for the specific problem, not the tool that sounds most reassuring in the ad.