Beginner guide · updated
What a VPN actually does — without the jargon
A VPN is two things: an encrypted tunnel between your device and a server, and a different IP address at the other end. Everything else in the marketing is a consequence of those two facts.
A VPN hides your traffic from the local network and your ISP, and makes websites think you are connecting from another country. It does not make you anonymous, and it does not replace antivirus, strong passwords or common sense.
How it works
Three hops, one encrypted leg
Your data still reaches the internet. What changes is who can see it on the way, and what address it appears to come from.
1. Encryption
Your device encrypts traffic before it leaves, using a key the network does not have. On café Wi-Fi, that turns readable data into noise for anyone listening.
2. Tunnelling
The encrypted packets travel to a server run by the VPN provider. Your ISP can see that you are using a VPN, and how much data you move — not which sites you visit.
3. Substitution
The server makes the request on your behalf, so the destination sees the server’s IP and country rather than yours. That is what unlocks another region’s catalogue.
Do you need one?
Five situations where it earns its price
And three where it is a waste of money. Both lists are short on purpose.
Worth paying for
- You use hotel, airport, café or shared Wi-Fi where you do not control the router.
- You travel and want your home streaming catalogue, or your home bank’s website, to behave normally.
- Your ISP throttles video in the evening and you can feel it.
- You work from home on a connection you do not fully trust, or handle other people’s data.
- You simply do not want your browsing history sold as part of an ISP’s advertising business.
Not worth paying for
- You want to be anonymous while logged into Instagram, Gmail and your bank — the accounts identify you regardless.
- You are trying to get around a national firewall. A consumer VPN without obfuscation will not do it, and the legal risk is yours.
- You want antivirus. A VPN blocks some malicious domains; it is not endpoint protection.
- You only ever use one trusted home network and do not care about ISP visibility.
Myths
Five things people believe about VPNs
These come up constantly, and each one leads to a bad purchase decision.
| Myth | Reality |
|---|---|
| “A VPN makes me anonymous.” | It hides your IP from websites and your traffic from the local network. Logged-in accounts, cookies and browser fingerprints still identify you. |
| “Free VPNs are fine if you only browse.” | Free services have to pay for servers somehow: usually ads, data brokerage, or a very small network. Some are outright malicious. |
| “A VPN speeds up my internet.” | It almost always slows it slightly. It can help when your ISP is throttling a specific type of traffic, which is a different problem. |
| “More servers means faster.” | Server quality and load matter more than count. A well-run network of 4,000 can beat a neglected 10,000. |
| “VPNs are illegal.” | Legal in most countries, restricted in some. Check local law. Separately, using one to bypass streaming geo-blocks usually breaches the service’s terms. |
Choosing
A checklist that filters out most bad options
Run any VPN through these eight questions before you pay.
- Does it publish a no-logs policy, and has an independent auditor examined it?
- Where is the company based, and is that country in an intelligence-sharing alliance?
- How many devices can connect at once, and is that enough for your household?
- How long is the money-back window, and is it a refund or a limited trial?
- Does it have apps for the devices you actually use, including your TV?
- Is the renewal price clearly stated, or hidden until year two?
- Does it support WireGuard, or only a proprietary protocol you cannot verify?
- Is support reachable at the hour you are likely to need it?
A refund window is worth more than a feature list. It converts a judgement call into an experiment: pay, use it properly for a month, and decide with evidence. That single term is why we recommend the product on this site.
Glossary
The eight terms worth knowing
Enough vocabulary to read a spec sheet without being sold to.
- Protocol
- The rules the tunnel uses. WireGuard is fast; OpenVPN is mature; IKEv2 survives network changes.
- Kill switch
- Blocks traffic if the tunnel drops, so you do not fall back to an unprotected connection.
- DNS leak
- When domain lookups escape the tunnel and reveal which sites you visit.
- Multi-hop
- Routing through two servers instead of one. Slower; useful for a higher threat model.
- Obfuscation
- Disguising VPN traffic as ordinary traffic so networks cannot detect and block it.
- Split tunnelling
- Sending some apps through the VPN and others directly. Convenient, easy to misconfigure.
- Dedicated IP
- An IP used only by you. Helps with some work systems and bank logins; reduces anonymity.
- Jurisdiction
- The country whose laws apply to the provider, and therefore who can demand its data.
FAQ
Beginner questions
No jargon, no upselling — just the answers that decide whether you need one at all.
What is the difference between a VPN and a proxy?
A proxy reroutes traffic for specific apps and usually does not encrypt it. A VPN encrypts everything at the operating-system level and covers every app. Proxies are lighter and cheaper; VPNs are the safer default.
Does a VPN hide my browsing from my employer?
Only on devices you control. On a company laptop, monitoring software can see your screen and your activity before any VPN is involved. Do not use a work device for private browsing you would not want reviewed.
Will a VPN stop my ISP from seeing what I do?
It stops your ISP from seeing which sites you visit and what you send. It can still see that you are using a VPN, the volume of traffic, and the timing. That is a meaningful reduction in visibility, not invisibility.
Are free VPNs safe?
Some are, most are not. Free services must fund servers somehow, and the usual currencies are advertising, data collection, or a network so small it is unusable for streaming. If you need free, use a reputable provider’s limited free tier rather than an unknown app.
Do I need a VPN at home?
Less than you need one on public Wi-Fi. At home, your ISP is the main observer. If that does not bother you and you never travel, a VPN is optional. If you stream, travel, or dislike your ISP’s advertising business, it is worth the few dollars.
Ready to try one properly?
The best way to understand a VPN is to use it for a month on your own devices, with the option to get your money back.
Prices checked October 2026.