A VPN — Virtual Private Network — is a piece of software you install on your phone or computer. Once you turn it on, everything your device sends to the internet goes through the VPN provider’s server first. To anyone watching your local network — your ISP, an airport Wi-Fi, a school firewall — it looks like your device is only talking to that one server. What you are actually opening inside that connection is hidden.
That is the whole idea. Every other question about VPNs is a variation of “what happens when you turn on that switch?”
What a VPN actually changes
Turn on a VPN and three things happen at once:
- All traffic from every app on your device — browser, email, Slack, iMessage, Steam, background updaters — is wrapped in an encrypted tunnel to the VPN server.
- The destination sees the VPN’s IP address, not yours. Sites, ad networks, and IP-geolocation databases all see you as being where the VPN server is.
- Your local network sees an encrypted tunnel, not the pages you are visiting. Your ISP, the coffee shop’s router, or a corporate firewall can see that you are talking to a VPN server, but not what you are asking for.
Turn the VPN off and none of that is true anymore. There is nothing “installed on the network” — the whole thing lives in the app.
What a VPN does not do
- A VPN does not hide who you are from sites you sign in to. Log in and the site knows you’re you.
- A VPN does not make you invisible. Browser fingerprinting, cookies, and account logins still identify you.
- A VPN does not necessarily hide you from your VPN provider. They can see everything you do; the “no-log” promise depends on how much you trust them.
- A VPN does not fix bad passwords, phishing, or malware. It only moves where your traffic appears from.
When a VPN is worth it
- Public Wi-Fi safety — cafés, hotels, airports.
- Working across multiple apps that all need to appear from one country.
- Accessing streaming catalogues (though many services actively block VPN IPs).
- Making sure your ISP cannot see what sites you visit.
- Any professional context that requires whole-device privacy.
When a proxy is enough
If you only need to open one site that your current network won’t load, a full VPN is overkill. A web proxy like AnyProxy does the smaller job — one browser tab, no install, no account. The trade-off is that it only routes what happens inside that one tab.
See our longer comparison in proxy vs VPN.
How to pick a VPN
The market is loud. Filter it down to four questions:
- Are they audited? Reputable providers publish annual third-party security audits. If they don’t, assume they aren’t.
- Where are they based? Jurisdiction matters if you care about who can legally compel them to hand over records.
- Do they support the protocols you actually need? WireGuard is fast and modern; OpenVPN is older and slower but universally supported.
- What is the price when the intro discount ends? Almost every VPN charges much more in year two than year one.
The one honest sentence
Most people don’t need a VPN most of the time. They need a specific site to open, or a specific Wi-Fi to feel safer. Pick the tool for the specific problem, not the tool that sounds most reassuring in the ad.