A Virtual Private Network (VPN) is one of the most popular privacy tools available, but it's also one of the most misunderstood. While a VPN provides genuine privacy benefits, it's not a silver bullet. Here's an honest guide to what VPNs do, what they don't do, and how to use one effectively.
What a VPN Actually Does
A VPN creates an encrypted tunnel between your device and a remote server. When you use a VPN:
- Your internet traffic is encrypted: Anyone monitoring your connection (your ISP, a Wi-Fi hacker, a network administrator) sees only encrypted data, not the actual websites you visit or data you transmit.
- Your IP address is hidden: Websites see the VPN server's IP address instead of yours, making it harder to trace activity back to you or determine your physical location.
- Your ISP can't see your browsing: Your Internet Service Provider can see that you're connected to a VPN, but not what you're doing through it.
What a VPN Does NOT Do
Common VPN Myths
VPN marketing often overpromises. A VPN does not make you anonymous, does not protect you from malware or phishing, and does not prevent companies like Google or Facebook from tracking you when you're logged into their services.
Let's be clear about VPN limitations:
- It doesn't make you anonymous: If you're logged into Google, Facebook, or any other service, they know exactly who you are regardless of your VPN.
- It doesn't block tracking cookies: Advertisers can still track you through cookies, browser fingerprinting, and other methods that don't rely on IP addresses.
- It doesn't protect against malware: A VPN encrypts your connection but won't stop you from downloading a virus or clicking a phishing link.
- It doesn't remove your data from the internet: Your personal information on data broker sites, social media, and in public records remains accessible whether you use a VPN or not.
- It shifts trust, doesn't eliminate it: Instead of trusting your ISP with your browsing data, you're trusting the VPN provider. Choose carefully.
When You Should Use a VPN
VPNs are most valuable in these situations:
- Public Wi-Fi: Coffee shops, airports, hotels, and other public networks are prime targets for eavesdropping. A VPN encrypts your traffic so other users on the network can't intercept it.
- Preventing ISP tracking: Your ISP can see every website you visit and may sell this data to advertisers. A VPN prevents this surveillance.
- Avoiding location-based restrictions: A VPN lets you appear to be in a different location, which can be useful for accessing region-restricted content.
- Sensitive research: If you're researching sensitive topics (medical conditions, legal issues, etc.), a VPN prevents your ISP from recording this activity.
- Reducing targeted pricing: Some websites show different prices based on your location. A VPN can help you see more neutral pricing.
How to Choose a VPN
Not all VPNs are equal. Here's what to look for:
Essential Features
- No-logs policy: The VPN should not record your browsing activity. Look for providers whose no-logs claims have been independently audited.
- Strong encryption: AES-256 encryption is the industry standard. Avoid any VPN using weaker encryption.
- Kill switch: Automatically disconnects your internet if the VPN connection drops, preventing accidental exposure of your real IP address.
- DNS leak protection: Ensures your DNS queries go through the VPN tunnel, not directly to your ISP.
- Jurisdiction: Consider where the VPN company is based. Some countries have data retention laws that could compel the VPN to hand over user data.
Recommended VPN Providers
Several VPNs have strong track records for privacy:
- Mullvad: Privacy-focused, accepts anonymous payments, independently audited. Based in Sweden.
- NordVPN: Large server network, independently audited no-logs policy, strong feature set. Based in Panama.
- ExpressVPN: Fast speeds, independently audited, easy-to-use apps across all platforms. Based in the British Virgin Islands.
- Proton VPN: Made by the team behind ProtonMail. Open-source apps, free tier available. Based in Switzerland.
- Surfshark: Budget-friendly with unlimited device connections. Based in the Netherlands.
Avoid Free VPNs
Most free VPN services monetize your data — defeating the entire purpose of using a VPN. They may log your browsing activity, inject ads, or sell your data to third parties. If you want a free option, use Proton VPN's free tier, which is supported by their paid subscribers and doesn't compromise on privacy.
How to Set Up and Use a VPN
- Sign up for a reputable VPN service (consider paying with cryptocurrency for extra privacy).
- Download the app for your devices — most VPNs support Windows, Mac, iOS, Android, and Linux.
- Enable the kill switch in the VPN app's settings.
- Enable DNS leak protection if it's not on by default.
- Connect to a server — for general privacy, choose a server geographically close to you for best speeds.
- Verify it's working: Visit a site like ipleak.net to confirm your real IP address is hidden.
Best Practices
- Keep the VPN on at all times, especially on public Wi-Fi
- Use the WireGuard protocol for the best balance of speed and security
- Connect to the VPN before opening your browser or other apps
- Regularly update the VPN app to get the latest security patches
A VPN Is One Piece of the Puzzle
A VPN protects your internet connection, but it doesn't address the personal data that's already out there — your name, address, phone number, and email sitting on data broker sites for anyone to find.
For comprehensive privacy, pair your VPN with a data removal service like PrivacyOn. While your VPN encrypts your future browsing activity, PrivacyOn removes the personal information that's already been collected and published about you across 100+ data broker sites. Together, they cover both sides of the privacy equation: protecting your activity going forward and cleaning up what's already exposed.