What is a VPN?

VPN stands for virtual private network. In everyday terms, it is an app that scrambles your internet traffic (encryption) and passes it through a server somewhere else before it reaches the wider internet. That single change has two effects: the network you're connected to — your home Wi-Fi, a café hotspot, your mobile carrier — can no longer see which sites and services you're using, and those sites see the VPN server's IP address rather than the one your internet provider gave you.

A VPN moves the question of "who can see my traffic?" from your internet provider and the local network to your VPN provider. It does not make you anonymous — it changes who you have to trust.

That framing matters because most confusion about VPNs comes from treating them as invisibility cloaks. They aren't. The rest of this page walks through the mechanism, what it protects, what it doesn't, and how to pick one without falling for marketing.

How a VPN works, in one picture

A VPN works by building an encrypted "tunnel" between your device and a VPN server, and sending all your traffic through it. Your device encrypts each packet before it leaves; only the VPN server holds the key to unscramble it, so anything in between — your ISP, the Wi-Fi operator, a snoop on the same network — sees only unreadable data going to a single server, not the sites you're actually visiting.

The exact steps — the handshake, the keys, the encryption — are covered in how does a VPN work. For now, the mental model is enough: encrypt on your device, decrypt at the server, and the internet only ever talks to the server.

What a VPN actually protects you from

A VPN protects you from anyone who can watch the network between your device and the VPN server. That is a real and specific set of threats, and it's worth being precise about which ones:

• Your internet provider or mobile carrier logging and profiling the sites you visit.
• Someone on the same public Wi-Fi trying to intercept traffic (though most websites now use HTTPS, which already encrypts the content).
• Websites and ad networks tying activity to the IP address your ISP assigned you.
• Region blocks that decide what you can access based on the country your IP is in.

It also hides your DNS lookups — the requests that turn a name like example.com into an address — from the local network, provided the VPN routes DNS through the tunnel and the connection doesn't silently drop. That last caveat is exactly why a kill switch matters: without one, a brief disconnection can leak the very things you turned the VPN on to hide.

What a VPN does not do

A VPN does not make you anonymous, and it does not stop most of the tracking people actually worry about. It can't undo the fact that you're logged into your accounts, it doesn't remove cookies or browser fingerprints, and it does nothing about data you hand over voluntarily. We spell this out honestly in do VPNs make you anonymous — the short answer is no.

• It does not hide your identity from sites you log into — Google, your bank, and your email still know it's you.
• It does not protect against malware or phishing; that's the job of good habits and, if anything, a browser or antivirus.
• It does not stop advertising trackers that follow you by cookie or fingerprint rather than by IP.
• It does not make illegal activity legal — the crime is still the crime, wherever the traffic appears to come from.

And crucially, the VPN provider itself can see your traffic, because it's the one decrypting it. That's why an independent, dated no-logs audit is the single most useful thing to look for — more on that below.

VPN vs proxy vs Tor: what's the difference?

A VPN encrypts and routes traffic for your whole device; a proxy usually reroutes one app and often adds no encryption; and Tor bounces your traffic through several volunteer-run relays for much stronger anonymity at the cost of speed. They solve overlapping but different problems. The table below is the quick version; the full breakdown is in VPN vs proxy.

Do you actually need a VPN?

You need a VPN if you want to keep the network you're on from profiling your browsing, if you want to reach services as though you were in another country, or if you're on networks you don't trust and want a second layer over HTTPS. You do not need one if your only goal is to be "untraceable online" — no consumer VPN delivers that. Honest, common reasons people use one:

• Stopping an ISP from building and selling a profile of the sites they visit.
• Accessing a home country's services while travelling, or region-locked catalogues.
• Getting around censorship in places where access is filtered — where a VPN can be genuinely important, and also legally risky.
• Adding privacy on shared or public Wi-Fi, on top of the encryption most sites already provide.

What is a VPN router — and VPN passthrough?

A VPN router is a router that runs the VPN connection itself, so every device on the network — phones, laptops, a smart TV, a games console — is covered without installing an app on each one. It's a convenience-and-coverage idea, not a different kind of VPN; the encryption and the tunnel are the same, just terminated at the router instead of the device.

VPN passthrough is an older, related setting. It's a router feature that lets legacy VPN protocols (PPTP, L2TP and IPsec) pass cleanly through the router's network address translation to a VPN client on a device behind it. Modern consumer VPNs mostly run OpenVPN or WireGuard over UDP and rarely need it, so passthrough is largely a term you'll meet on older hardware and in router menus rather than something you'll usually have to configure.

How to choose a VPN without falling for the hype

Because a VPN sees your traffic, choosing one is mostly about deciding who you trust — so pick on evidence, not adjectives. The things worth checking, in order:

1. A recent, independent no-logs audit you can actually read — not just the phrase "no-logs" on a homepage.
2. A real kill switch and DNS-leak protection that are on by default.
3. Modern protocols (WireGuard or OpenVPN) rather than only ageing ones like PPTP.
4. A clear ownership and jurisdiction story, since many brands are owned by a handful of parent companies.

By that standard, the names that consistently hold up are the ones that publish repeated audits. Mullvad is the plainest example — it takes cash, needs no email, runs annual third-party audits, and pays us nothing for saying so. Among audited providers that do have a free tier and repeated no-logs audits, Proton VPN is a reasonable starting point (that last link is an affiliate link — it doesn't change what we say). We don't publish a ranked "best VPN" list here; this is an explainer site, and the checklist above matters more than any single pick.

Are free VPNs safe?

Some free VPNs are safe; many are not, and the difference matters more than with almost any other kind of software. Remember the core fact: a VPN can see your traffic. Running a global fleet of servers is expensive, so a genuinely free service has to pay for it somehow — and with the worst offenders, the way they pay is by logging what you do and selling it, which is the exact opposite of what you turned a VPN on for. There have been repeated findings of free VPN apps that harvest data, inject ads, or are quietly tied to companies users would never knowingly trust.

That doesn't mean "free" is always bad. The safe free tiers tend to come from providers with a paid product to protect and an independent audit to point to — they offer a limited free plan as a funnel, not as the business model. As a rule of thumb: a free VPN that can't tell you how it makes money, or that can't show you an audit, is one to avoid. A reputable free tier from an audited provider is a reasonable way to try the idea without paying; an anonymous free app promising "unlimited everything" is a red flag.

Why VPN use has jumped recently

VPNs used to be a niche tool for the technical; they've become mainstream because the reasons to use one keep arriving in the news. Age-verification laws in the UK and several US states, which require some sites to check that visitors are adults, drove huge, sudden spikes in VPN downloads through 2025 and 2026 as people looked for ways around the checks. Censorship abroad, high-profile data breaches, and growing awareness that internet providers can profile and sell browsing history have all pushed more ordinary people to try one.

The upshot is that a VPN is now a fairly normal thing to have, in the way a password manager is — useful for most people, essential for some, and no longer a sign that you have something to hide. What hasn't changed is the need to choose carefully, because the tool only helps if the provider behind it is one you can actually trust.