What Is a VPN and Do I Need One?
A VPN encrypts traffic between your device and a server run by the VPN provider. It hides activity from the local network and shifts trust to the provider.
In short
A VPN, virtual private network, routes your internet traffic through an encrypted tunnel to a server run by the provider, so the local network and your internet provider see only that connection. Websites see the VPN's address instead of yours. It is useful on public Wi-Fi, for reaching region-locked services, and for privacy from your network operator. It does not make you anonymous and does not protect against scams or malware.
VPN advertising has become so pervasive that many people believe they need one without being able to say why. The technology does one specific thing well. Most of the marketing claims are about things it does not do.
What it does
Your device makes an encrypted connection to a server operated by the VPN provider. All your traffic goes through that tunnel. The local network, whether that is a café’s Wi-Fi, your employer’s, or your home broadband provider, sees only an encrypted stream to one address. The websites you visit see the VPN server’s address, not yours.
That is it. Two effects: the local network cannot see where you go, and sites cannot see where you are.
What it does not do
Make you anonymous. The VPN provider sees everything the network would have seen. Any site you log into knows who you are. Browser fingerprinting, cookies and tracking within a session all still work.
Protect you from scams, phishing or malware. A fraudulent site loads just as well through a VPN. A malicious download is just as malicious.
Encrypt anything that was not already encrypted. Nearly all websites use HTTPS, which already encrypts the content between you and the site. A VPN adds a second layer over the part of the journey between you and the VPN server. The main thing it newly hides is which sites you visit, since domain names are visible to the network even with HTTPS.
Speed things up. It almost always slows things down slightly, because of the extra hop and the encryption.
When it is genuinely useful
- Public Wi-Fi. Café, hotel and airport networks are the setting where a VPN earns its keep, because the network operator is unknown and other users share it.
- Privacy from your provider. If you would rather your internet provider not have a list of the sites you visit, a VPN moves that list to a company you chose instead.
- Region-locked content. Appearing to be in another country lets you reach services that check location. Whether this is permitted depends on the service’s terms.
- Restrictive networks. Some workplaces, schools and countries block or throttle categories of traffic. A VPN can route around that, with whatever consequences apply locally.
- Working remotely. A company VPN connects you to an office network as if you were in it. This is the original purpose and still the most common business use.
Choosing one
The provider sees your traffic, so the choice is entirely about trust. Look for a clear no-logging policy that has been independently audited, a jurisdiction you are comfortable with, and a business model that is obviously subscriptions rather than data. Free services fail that last test almost by definition.
The honest verdict
Useful on networks you do not control. Modestly useful for privacy from your provider. Not a security product in the sense the adverts imply, and not a substitute for the things that actually stop account takeovers: unique passwords, two-factor authentication and not clicking the link.
Common questions
Does a VPN make me anonymous?
No. The VPN provider can see everything your internet provider would have seen. You have moved trust, not removed it. Sites you log into still know who you are, and browser fingerprinting still works.
Do I need a VPN on home Wi-Fi?
Usually not for security. Almost all sites now use HTTPS, which encrypts the content of what you send and receive. A VPN adds privacy from your internet provider and can change your apparent location, which are different benefits.
Are free VPNs safe?
Treat them with suspicion. Running servers costs money, and a free service has to cover that somehow, often by logging and selling browsing data or injecting adverts, which is the opposite of the purpose. A reputable paid provider with a published no-logging policy and independent audits is the sensible choice.
Sources
Every factual claim above traces to one of these. Follow them rather than taking this article's word for it.
- Virtual private networks National Cyber Security Centre
- Phishing scams National Cyber Security Centre
Try it yourself
Free, instant, and nothing you enter leaves your browser.