What a VPN Actually Does
A Virtual Private Network (VPN) creates an encrypted tunnel between your device and a VPN server. All your internet traffic is routed through that server, which means:
- Your Internet Service Provider (ISP) can see you're connected to a VPN, but not what you're doing.
- Websites and services see the VPN server's IP address, not yours.
- Anyone snooping on your local network (e.g., on public Wi-Fi) sees encrypted gibberish.
That's genuinely useful — but it's a much narrower protection than most VPN marketing implies.
What a VPN Does NOT Protect You From
This is the part most people miss. A VPN does not protect you from:
- Malware and viruses: Encrypting your traffic doesn't stop malicious software already on your device.
- Phishing attacks: You can still click a malicious link over a VPN connection.
- Browser fingerprinting: Websites can identify you through your browser's unique configuration regardless of your IP.
- Account-based tracking: If you're logged into Google or Facebook, they still know it's you.
- DNS leaks (if misconfigured): Your DNS queries can still reveal your browsing habits if your VPN isn't set up properly.
Choosing a Trustworthy VPN
Not all VPNs are equal — and some are actively harmful. Here's what to look for:
| Feature | Why It Matters |
|---|---|
| No-logs policy (audited) | Ensures the provider can't hand over your data even if compelled to |
| Open-source client | Code can be independently verified for backdoors or bugs |
| Kill switch | Cuts internet if VPN drops, preventing accidental IP exposure |
| DNS leak protection | Ensures DNS queries route through the VPN, not your ISP |
| Jurisdiction | Providers in 14-Eyes countries may be subject to data-sharing agreements |
Avoid free VPNs from unknown providers. If the product is free, your data is often the product.
Configuring Your VPN for Maximum Privacy
- Enable the kill switch in your VPN client settings — always.
- Test for DNS leaks at a site like dnsleaktest.com after connecting.
- Use the WireGuard protocol where available — it's modern, fast, and well-audited.
- Avoid split tunneling unless you understand exactly what traffic you're excluding.
- Don't use the same VPN server location every time if anonymity is a concern.
When You Should Definitely Use a VPN
- Connecting to public Wi-Fi (airports, cafés, hotels).
- Accessing work resources remotely over untrusted networks.
- Preventing your ISP from logging or selling your browsing data.
- Accessing geo-restricted content (with appropriate legal awareness).
The Bottom Line
A VPN is one layer of a privacy strategy — not the whole strategy. Combine it with a privacy-focused browser, strong passwords, multi-factor authentication, and good digital hygiene for meaningful protection. Treat it as a tool, not a magic shield.