Understanding VPNs: What They Do and Don't Do

VPN marketing is aggressive and often misleading. Terms like “military-grade encryption,” “complete anonymity,” and “total protection” appear frequently in VPN advertising, creating expectations that don’t match what these tools actually provide.

This doesn’t mean VPNs are useless — they have genuine applications. But understanding what a VPN actually does helps you decide whether it addresses a problem you actually have.

What a VPN Actually Does

A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a server operated by the VPN provider. Your internet traffic travels through this tunnel before reaching its destination.

This has a few specific effects:

Your internet provider can’t see what you’re doing. Without a VPN, your ISP can see the domains you visit (though not the content of HTTPS connections). A VPN hides this from your ISP.

Your apparent IP address changes. Websites and services see the IP address of the VPN server, not your actual IP. This can be useful for accessing content restricted by geographic region.

Traffic on public Wi-Fi is encrypted. On an untrusted network (a coffee shop, airport, hotel), a VPN prevents others on the same network from intercepting your traffic.

What a VPN Doesn’t Do

It doesn’t make you anonymous. The VPN provider can see all the traffic you’re routing through their servers. You’ve shifted trust from your ISP to the VPN provider — not eliminated it. If the VPN provider logs your activity and that log is subpoenaed or breached, your traffic history is exposed.

It doesn’t protect against tracking by websites. Advertising trackers, cookies, browser fingerprinting, and login sessions track you regardless of your IP address. A VPN doesn’t prevent this.

It doesn’t protect against malware. A VPN is a network privacy tool, not a security suite. It doesn’t scan files or prevent malicious software from running.

It doesn’t fully hide your identity. When you’re logged into Google, Facebook, or any account, that service knows who you are regardless of your IP address.

When a VPN Is Genuinely Useful

Given these limitations, there are specific situations where VPNs provide real value:

Public Wi-Fi: If you regularly use untrusted networks — traveling, working from cafés — a VPN encrypts your traffic against local network interception.

ISP privacy: If you prefer that your internet provider not have visibility into which domains you visit, a VPN addresses this specifically.

Geographic access: Accessing content restricted to other regions (streaming services, regional websites) is a common and practical use.

High-risk contexts: Journalists, activists, researchers in sensitive situations have stronger reasons to use a VPN as one layer of operational security.

Choosing a VPN Thoughtfully

If you decide a VPN is appropriate for your situation:

• Look for providers with independently audited no-log policies
• Avoid free VPNs — free services typically monetize user data, which defeats the purpose
• Check jurisdiction — providers in countries with strong privacy laws and no mandatory data retention are preferable
• Understand that paying for a VPN doesn’t automatically mean your provider won’t log data

A VPN is a useful tool for specific privacy scenarios. It’s not a comprehensive privacy solution, and it’s not necessary for everyone. Use it for the problems it actually solves.